Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File:                     1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier:          2jFkY82fLn+qCMOFDPFOCO+rPljYNqdWOpasIyWW2wM=
Subject key identifier:   64:D0:0A:52:51:61:AE:C3:FD:E5:45:05:67:50:26:08:A2:7F:ED:CA
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer:       /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial:       0198D4E0A63536CF09C021AFB20BD6ED5A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number:          1251
Signing time:             Sat 23 Aug 2025 03:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:29 +0000
Files and hashes:         1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: z2UZ4JdwvaxtyWscJ3vTHe0wrGsP/UcqW/u1DIKFCs4=)
                          2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:a6:35:36:cf:09:c0:21:af:b2:0b:d6:ed:5a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
        Validity
            Not Before: Aug 23 03:02:29 2025 GMT
            Not After : Aug 24 03:02:29 2025 GMT
        Subject: CN=64d00a525161aec3fde5450567502608a27fedca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:d8:ad:4e:38:0f:a0:ac:b7:17:52:68:51:
                    d0:e4:44:00:3c:56:6f:0b:d0:39:ad:a8:2a:0b:2c:
                    24:7c:4a:d0:f0:a8:dc:fc:77:ca:da:b2:31:a3:7a:
                    6b:29:33:2d:6d:89:c8:93:35:57:95:1d:56:49:8d:
                    20:16:9d:c1:02:34:8c:84:a7:30:86:ea:db:6e:99:
                    09:38:60:3b:ad:0f:ce:3a:9b:f5:44:36:fc:81:30:
                    24:73:80:42:55:5f:97:06:45:3c:db:57:9b:f1:77:
                    41:41:0f:c7:09:37:9c:b2:90:34:e7:10:66:d3:f1:
                    1d:62:6a:61:e7:83:52:ba:c5:7a:24:10:a3:f4:1b:
                    cf:3e:14:41:c2:e8:0b:3f:cd:f4:eb:fa:65:5e:00:
                    27:59:b0:77:79:2d:29:53:2f:32:41:4f:73:ee:0b:
                    48:49:3c:83:12:e5:9b:9f:e8:06:9d:09:88:4f:51:
                    d0:04:27:78:26:9c:13:92:03:b8:cd:ae:c8:8c:51:
                    f6:52:72:69:2c:74:9c:8c:69:bf:1e:a8:5c:88:90:
                    16:7a:e8:80:44:d0:0b:cb:b0:30:c8:ad:34:af:2b:
                    a0:c0:8a:11:d2:85:31:2f:9e:07:d7:d5:91:1a:66:
                    c1:ea:15:36:14:51:27:c4:4d:13:f4:37:42:c5:38:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:0A:52:51:61:AE:C3:FD:E5:45:05:67:50:26:08:A2:7F:ED:CA
            X509v3 Authority Key Identifier:
                keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f9:c7:c6:85:d3:6a:50:d8:4b:8a:46:50:d3:72:28:12:96:
         1f:9d:8d:76:e4:59:eb:16:82:31:dc:75:fa:17:0f:9a:cc:71:
         19:ab:b2:57:db:69:23:c8:9e:7d:ce:36:cf:32:f0:25:67:c8:
         7f:57:e1:0f:09:78:2c:7d:e8:87:51:fa:9e:6f:0b:95:70:ff:
         33:42:65:50:3b:ed:93:cd:3f:72:82:03:4e:a4:66:96:be:60:
         fd:9e:21:e2:a2:1b:86:b6:44:55:37:5b:db:2b:1a:0d:55:bd:
         35:5e:94:52:b8:98:74:f7:7a:82:36:ae:fe:87:d2:90:e4:64:
         4f:5f:37:f5:3b:e6:bd:0b:c5:e7:af:51:79:20:3e:13:f0:c5:
         f0:dc:d4:3a:45:f6:c2:f9:94:01:34:c4:33:b6:fb:91:9a:da:
         a7:58:85:44:e9:46:4b:9b:72:6a:a1:8a:7e:b4:42:3b:17:b8:
         74:00:ac:a7:d9:d3:4c:9c:38:23:35:fc:40:1d:2a:53:4d:21:
         58:74:67:7b:30:87:89:8f:59:49:24:45:72:e4:c6:90:a5:cb:
         3d:92:a8:dc:70:68:10:f6:b0:d0:fc:5e:0f:92:31:bd:15:4c:
         cb:03:49:96:a4:e3:0e:ba:6f:52:85:a1:83:d0:12:35:a6:ae:
         70:44:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:22 2025 by rpki-client