Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File:                     KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier:          UThnI3JmCv4UJLuUpWasvDGMd0RvrYCi1yCJ7eo+i5o=
Subject key identifier:   6A:C6:24:D1:A1:CE:52:62:9E:DF:F8:E5:53:B2:78:97:53:BD:44:C5
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer:       /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial:       019A0110CD53916A243EAD709DF7594092FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number:          0AC4
Signing time:             Mon 20 Oct 2025 10:01:09 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:09 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:09 +0000
Files and hashes:         1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: 2jcZhsl0/nNeU4+5108/plV56IUdr3naRA0OOdK5AnU=)
                          2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:10:cd:53:91:6a:24:3e:ad:70:9d:f7:59:40:92:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
        Validity
            Not Before: Oct 20 10:01:09 2025 GMT
            Not After : Oct 21 10:01:09 2025 GMT
        Subject: CN=6ac624d1a1ce52629edff8e553b2789753bd44c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:cc:1e:68:2b:29:c8:0d:f6:c9:30:48:67:
                    6e:8d:03:03:b8:82:f7:45:fa:cb:f3:2e:c5:32:19:
                    de:34:b5:09:3f:7b:0d:35:0b:77:f1:f4:d6:28:4d:
                    f1:a4:cc:c4:9b:b6:b6:93:d4:6e:dd:1e:86:2f:71:
                    4d:15:f5:d1:69:c5:f9:bf:7b:b7:83:3e:9d:73:80:
                    ce:21:59:50:69:18:9c:1c:c6:8b:05:77:f8:6b:c8:
                    97:2b:62:ee:35:f9:b9:9a:6a:e4:a9:e4:f8:b4:e8:
                    5c:e2:82:25:c1:ef:b8:59:fd:ff:ef:98:49:55:db:
                    41:bd:57:46:48:36:00:10:3d:c0:55:f9:ef:88:e2:
                    0b:65:3e:a9:a6:70:7d:fb:c1:f6:9a:af:57:16:a0:
                    ee:31:52:cf:81:04:28:83:1c:47:6c:8d:4a:fc:49:
                    00:97:90:f0:3d:42:f3:9f:f1:7c:94:d7:8a:bd:21:
                    b1:3c:e2:d5:c0:b5:75:1c:f9:c2:26:b2:a7:c1:79:
                    17:af:d2:55:25:7c:24:6d:2f:f8:77:6f:f7:c2:89:
                    4d:b3:a8:63:ed:63:80:53:f4:93:de:10:ce:65:9a:
                    08:3d:3e:92:59:2f:89:4f:64:ec:47:6a:11:ac:4c:
                    1a:2a:45:a1:5a:70:af:f6:e5:ab:64:04:9f:89:75:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:24:D1:A1:CE:52:62:9E:DF:F8:E5:53:B2:78:97:53:BD:44:C5
            X509v3 Authority Key Identifier:
                keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:21:ba:28:23:53:41:fd:9d:09:12:43:89:bf:69:17:69:74:
         36:2d:06:51:43:6f:c7:7d:85:bb:19:99:df:02:1a:ca:da:e9:
         3a:bd:d7:b2:a7:58:18:2c:f8:50:b5:39:53:6e:74:e8:44:90:
         ce:ec:3a:a3:e2:90:bf:c5:ed:d8:fc:1e:13:a4:14:bb:b6:5e:
         ba:7d:a2:8f:66:20:9d:f5:13:2e:b0:08:1b:46:fc:68:b9:c4:
         0b:44:41:02:48:16:88:eb:88:c9:48:7e:44:0b:f1:05:2d:6b:
         de:f3:51:c4:27:6d:4a:0b:eb:68:0b:42:72:67:c8:fc:79:43:
         57:22:4c:17:ce:85:d8:92:d4:ec:b1:8e:67:ea:72:b2:73:b3:
         ca:de:02:3c:d8:ab:54:e2:64:8d:5b:b6:48:6f:42:c2:40:cf:
         79:fd:ee:11:1a:2b:be:5b:ba:7a:f0:08:5b:31:67:4b:c2:0b:
         3a:0c:02:55:4f:ac:28:2e:a3:67:8c:fe:a7:e6:36:17:6c:6c:
         6a:1a:dd:cd:29:64:5e:ca:d9:46:1f:11:ec:66:81:69:82:3e:
         d3:13:98:5a:85:98:e5:66:fb:fe:08:c9:54:36:cd:c7:90:30:
         7f:e5:bd:09:3e:bb:9b:75:e4:d5:ab:0b:38:b7:7b:a5:d5:14:
         63:c8:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:28 2025 by rpki-client