Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File:                     KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier:          VcXS03UqPCtSdt6LeCLQPUIJWiyzZ/PAI+qMucveRS0=
Subject key identifier:   C6:08:A5:2C:7F:B6:FC:26:0D:AE:FA:C1:35:75:D4:81:50:FD:C1:ED
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer:       /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial:       0198D698191E0F74B64ABADC51864B559467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number:          0A7D
Signing time:             Sat 23 Aug 2025 11:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:28 +0000
Files and hashes:         1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=)
                          2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: 4+7ItdnhpZJFa4Pgai+UFdD+krwYlb4jKwUnvXqPr2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:19:1e:0f:74:b6:4a:ba:dc:51:86:4b:55:94:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
        Validity
            Not Before: Aug 23 11:02:28 2025 GMT
            Not After : Aug 24 11:02:28 2025 GMT
        Subject: CN=c608a52c7fb6fc260daefac13575d48150fdc1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bf:97:6d:d1:4e:af:3a:63:0e:f1:96:b2:0a:
                    26:76:53:87:42:ff:8c:e5:3f:f4:68:88:83:72:85:
                    e6:62:df:e6:9f:3b:0e:93:d2:44:72:78:a0:0d:da:
                    36:30:4a:73:a2:f3:98:c2:8c:68:38:65:9a:94:98:
                    26:8c:95:1d:58:13:da:f6:04:d7:27:a3:f8:24:a0:
                    cc:a9:64:fe:c4:76:e4:63:0e:e8:92:2e:15:23:d1:
                    e2:27:8f:01:04:2a:ee:60:a3:ea:fc:3e:b6:96:46:
                    8f:f0:27:c4:eb:2e:cd:51:11:b3:b5:f1:58:e8:56:
                    20:8b:2e:59:f7:00:1d:c9:2d:ea:10:43:05:de:2e:
                    fa:6d:a2:d1:7b:6d:91:c4:ed:a2:1d:e1:23:4b:8d:
                    27:cd:97:29:6e:87:b5:f7:11:91:48:ce:cb:80:24:
                    4f:95:9b:2e:c1:d0:3b:17:10:23:9a:ff:f3:b5:1c:
                    6a:a9:c5:30:46:91:9f:77:f6:f8:ea:9b:45:fa:87:
                    11:e8:8c:db:c0:6d:e4:b0:5b:03:fe:b2:5a:18:c0:
                    15:27:78:21:fe:8c:23:77:d9:6c:d2:18:ea:ca:14:
                    12:72:95:73:b6:50:66:ce:e7:8d:f8:20:40:5e:da:
                    d3:86:e6:ec:47:45:ed:48:93:b6:1c:19:05:34:0d:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:08:A5:2C:7F:B6:FC:26:0D:AE:FA:C1:35:75:D4:81:50:FD:C1:ED
            X509v3 Authority Key Identifier:
                keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:73:4e:69:e5:54:16:ee:0d:44:06:1e:ac:f6:a9:6d:28:
         5f:ff:cb:ab:a4:f4:6d:54:67:21:39:41:ea:c9:0b:03:b3:22:
         51:68:77:7e:8c:54:0f:cf:59:f8:5e:c5:49:6f:ef:d9:5c:5a:
         1d:3e:ef:f4:21:e3:26:0b:57:10:47:9e:b8:df:46:38:0e:f8:
         65:ea:a7:f1:2e:9a:71:07:85:c0:a6:6b:23:65:a7:75:4d:fa:
         d5:4a:63:db:f8:ee:64:4b:fb:bb:c3:f4:ee:a5:15:57:9c:31:
         12:81:fb:19:1c:b5:88:01:16:e4:bd:64:6c:6b:59:e6:e0:6d:
         81:c4:5c:4f:c3:ab:e7:45:5e:f2:1c:c1:55:1c:be:89:2b:b8:
         85:b3:89:6f:8b:e2:0d:f7:26:29:23:a2:14:eb:d4:f7:27:b8:
         de:6a:7c:e1:67:13:eb:5b:87:4f:f0:37:54:87:af:64:36:09:
         0f:0b:03:07:ad:e0:21:e9:83:3c:5b:8f:b0:f9:94:2c:5d:9c:
         fb:e9:36:ab:73:2d:0e:19:f1:f7:fd:62:03:0b:bb:d8:b1:b1:
         f4:a9:e4:ff:1b:e1:de:f9:59:d1:d2:a8:80:e5:c2:61:90:b7:
         96:8f:4b:50:5d:95:cc:44:5f:90:a3:ed:6e:4a:d6:77:83:76:
         54:6f:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:48 2025 by rpki-client