Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File:                     K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier:          zNSQIOCD6YLnURZlYvrExY9WcNbki75KaefKvpOnzEw=
Subject key identifier:   E3:E2:0D:D7:9B:A2:74:E3:30:BD:3E:D1:72:23:1F:E3:56:22:05:75
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       0199FD3486467BEB4555B7C0F30D7F1B1724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number:          089F
Signing time:             Sun 19 Oct 2025 16:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:41 +0000
Files and hashes:         1: Jm_xi_s9C4HueOQpadAteqzC5iI.roa (hash: nbZ24fnK71pZ0lURFKjMf67hub71ZiuhlPq0UEHzTVw=)
                          2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: RUTU83YvuYXx8yRNKfX1oR584jsVI8TwTG9mpAIwXF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:86:46:7b:eb:45:55:b7:c0:f3:0d:7f:1b:17:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Oct 19 16:01:41 2025 GMT
            Not After : Oct 20 16:01:41 2025 GMT
        Subject: CN=e3e20dd79ba274e330bd3ed172231fe356220575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:a2:d9:95:ef:1a:87:77:72:c5:85:9f:ea:
                    12:89:47:3e:3d:84:9a:8e:26:68:02:6a:f2:b9:52:
                    24:77:67:11:05:b4:d1:49:ec:ae:d0:dc:1d:4c:d7:
                    8f:d3:ae:b7:21:b7:5f:de:e0:d7:f5:56:ae:68:69:
                    41:82:56:83:6a:30:1c:51:72:90:00:56:a5:59:71:
                    86:ea:76:71:7b:72:9c:33:ea:b1:1c:b9:0e:10:9a:
                    0e:6f:0f:5a:43:3a:23:25:d9:50:18:b9:fb:ab:17:
                    5e:8b:7c:a3:ce:ac:ef:18:22:64:2a:4f:05:87:20:
                    1b:8e:79:f2:7b:58:91:f2:a4:fb:f1:71:64:49:bd:
                    3d:61:44:ae:2d:9a:a0:60:6d:15:67:e1:4f:1c:73:
                    f8:20:1b:52:44:45:27:4d:a7:01:f9:13:49:66:3d:
                    61:bb:7b:12:c1:b5:22:80:53:8b:62:3f:7d:f4:6f:
                    03:28:11:23:8c:ec:d3:4d:c5:99:de:51:dc:a0:cf:
                    02:16:ec:78:55:ea:18:15:7a:ca:36:98:e7:2a:8a:
                    e0:42:fc:8e:28:2b:c5:cf:7d:39:10:81:cf:31:6d:
                    a2:8d:66:04:44:b7:59:34:bc:1d:d0:e6:38:dd:b2:
                    2a:07:ab:c8:10:31:b8:c8:2a:1e:f7:77:9a:6f:19:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:0D:D7:9B:A2:74:E3:30:BD:3E:D1:72:23:1F:E3:56:22:05:75
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:34:c1:22:e9:19:56:c6:6d:f7:6e:10:b0:a6:0e:fc:cb:68:
         17:97:d1:5a:43:f2:6b:af:3d:a3:83:1a:a3:9c:db:38:3b:7d:
         11:50:c1:2f:a2:a2:f0:e3:60:a2:21:67:7e:f2:27:03:c7:04:
         05:6b:a5:65:3b:b9:21:e0:96:0c:29:99:d1:87:19:35:81:50:
         f7:fb:e5:28:5f:b3:c8:b1:d6:47:7e:d8:8c:54:76:57:f4:6d:
         74:f8:1c:31:52:db:56:b9:fc:72:05:77:db:e8:ea:f7:58:a8:
         8e:20:52:41:ef:49:35:7f:96:5b:17:b7:f6:fc:99:5a:01:ed:
         38:cd:5a:8f:a7:47:7a:9c:0a:61:fb:38:77:dd:2a:92:c9:27:
         a1:18:2e:3a:dd:29:80:bc:32:19:03:83:80:83:62:23:9d:c0:
         fc:6e:36:97:f0:98:db:5a:56:5a:bf:6e:3a:1a:0f:a7:2a:30:
         d2:b5:d2:c5:5a:a3:1d:3b:18:96:de:81:60:1c:16:b6:af:91:
         29:ac:dd:59:69:d2:6d:f1:46:34:e1:b7:fe:55:d3:5b:1d:4c:
         7b:60:15:e6:74:a5:37:28:66:8a:98:31:11:20:2b:69:58:65:
         37:20:74:5e:b2:d8:8e:b9:ae:0c:a5:47:ed:41:c9:8a:a1:55:
         28:c6:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:34 2025 by rpki-client