Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File:                     K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier:          1w7hrD/pB5z6wUzyxIdgbLtuSMFKjk48P4UETUa56lk=
Subject key identifier:   46:B2:C9:21:1F:38:37:4E:AF:5C:B4:BF:9E:A3:DC:28:A4:B1:39:8E
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer:       /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial:       0198D515EDCB5F8FA7C2B2BC2A34B1EB17BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number:          19
Signing time:             Sat 23 Aug 2025 04:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:40 +0000
Files and hashes:         1: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: cCPCabyZyo9ZA3Rjk+oYept61NbSm/wlSmmCqQjwG8o=)
                          2: MKp_wnfGXJz9vDnuCk6NRSVDYjQ.roa (hash: 5LllIjjTErVD6cEbTzyP47TnfsEC+5tnD2nfvOPP5z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ed:cb:5f:8f:a7:c2:b2:bc:2a:34:b1:eb:17:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
        Validity
            Not Before: Aug 23 04:00:40 2025 GMT
            Not After : Aug 24 04:00:40 2025 GMT
        Subject: CN=46b2c9211f38374eaf5cb4bf9ea3dc28a4b1398e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:cc:c9:1e:fa:0e:c5:24:09:43:2a:09:27:
                    28:7b:8e:a7:35:5c:2e:02:96:a7:6a:f1:5f:f3:8d:
                    68:5e:02:7c:1e:96:bb:30:1e:a6:8e:94:0b:28:52:
                    a7:1a:e6:f8:19:ec:ae:eb:f3:a8:42:65:cd:cc:9e:
                    a3:6c:1d:5d:2e:18:0e:5e:f0:15:7d:28:31:ec:a0:
                    bf:dc:29:ff:78:96:1b:f3:82:c2:7d:2f:1d:dc:77:
                    e2:d6:32:06:c3:11:10:cc:a4:f9:98:30:96:99:6c:
                    cf:7d:37:09:4c:b1:16:9e:5d:a4:a8:29:b2:e8:82:
                    bf:1f:f9:8c:56:ba:d5:f3:29:55:f3:f0:3d:47:52:
                    ca:88:f4:7c:a6:39:ef:0a:49:1b:df:a5:84:e3:0c:
                    17:cf:82:e8:78:a6:75:15:63:ae:f4:2d:7b:e2:77:
                    c6:46:40:57:89:b7:6d:21:d3:0e:2d:b3:50:6f:0f:
                    fb:27:39:07:a5:c1:d1:86:15:a5:9f:63:85:7e:cc:
                    c5:5c:80:3a:19:9f:de:56:53:75:03:8c:b3:85:d6:
                    d6:2b:ca:09:fd:eb:69:08:ee:0b:e7:d3:b7:96:9d:
                    53:c8:4b:36:c9:b4:fa:bf:55:0a:82:c9:05:73:09:
                    91:eb:49:9e:45:cf:a2:90:fd:7e:5f:bb:a2:0f:ce:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B2:C9:21:1F:38:37:4E:AF:5C:B4:BF:9E:A3:DC:28:A4:B1:39:8E
            X509v3 Authority Key Identifier:
                keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:db:80:16:06:6a:0b:43:7d:b3:6c:0e:fe:2d:01:ce:fc:6b:
         e2:ed:b7:0b:78:6f:ab:a6:ed:90:22:09:fc:4e:d0:a8:77:e2:
         b3:e0:7f:63:58:9b:ec:bd:92:0d:81:10:16:d1:e9:4f:a9:3e:
         7c:9a:c3:c5:19:ca:db:ee:e3:e1:46:db:07:80:0a:f0:0e:81:
         9d:2e:6a:e8:80:54:96:fd:76:47:db:91:44:4a:ed:f4:35:50:
         e9:13:78:10:86:20:f4:76:b4:9e:82:84:58:9d:f9:a1:ae:ee:
         eb:91:e4:c2:d5:5c:de:f6:c9:48:f0:89:0c:a5:ec:5f:9b:b1:
         6f:b4:48:ca:d2:bf:88:a2:28:bb:7a:06:28:84:4c:d7:fa:45:
         6a:d9:c0:37:4e:89:65:f1:02:61:fb:ad:47:8d:c8:ac:f2:59:
         32:8f:5f:94:2c:c9:e6:fd:d9:4d:ef:ea:0a:2d:78:26:84:1b:
         04:6f:fb:ca:e0:11:80:5f:33:79:96:4c:1e:3d:95:19:27:18:
         6b:b5:98:20:b8:99:fb:18:67:3e:90:3c:65:27:67:37:54:0d:
         2a:18:45:5b:f6:8a:0b:3b:ea:09:dc:ca:93:0f:a5:a1:3d:62:
         1a:68:0c:85:e3:be:83:f1:85:81:ad:dd:19:4c:0f:d0:4b:fa:
         2b:1a:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:03 2025 by rpki-client