Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
File:                     K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json)
Hash identifier:          025t/pF2pFeWwma2JqOasK7o8KJ61kjQ2t0MTD0K0r4=
Subject key identifier:   7E:4B:EF:08:30:85:CA:95:71:69:02:CE:12:F3:A9:57:C3:52:19:02
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Certificate issuer:       /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial:       0198D705D55F30BA28C2C9332D9131F2C1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
Manifest number:          1058
Signing time:             Sat 23 Aug 2025 13:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:20 +0000
Files and hashes:         1: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: Uj69cHEvHQT/xOzO4kaY19h2HoDx+QFt8XxhPbiHG8Q=)
                          2: aK_WMtrzKAXs0LTqbVOCa8ChzP8.roa (hash: f1Um7efAs/j5iF2wB08cWIqaipZskvxt+HmOXtWDHMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:d5:5f:30:ba:28:c2:c9:33:2d:91:31:f2:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
        Validity
            Not Before: Aug 23 13:02:20 2025 GMT
            Not After : Aug 24 13:02:20 2025 GMT
        Subject: CN=7e4bef083085ca95716902ce12f3a957c3521902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:3b:f7:c9:c9:02:fe:1e:a9:a1:f4:2a:a2:
                    0e:df:20:b1:b7:9e:14:c0:62:d6:43:bb:38:2a:1e:
                    c6:ba:9b:05:48:14:96:d6:aa:1e:a0:ac:6f:47:55:
                    fb:af:32:a5:e6:7e:87:26:91:8c:2b:0e:1c:2a:a1:
                    a2:7f:37:5f:53:11:73:20:34:d8:df:59:c5:b7:b0:
                    e8:49:59:e4:bc:62:2c:6a:e0:67:24:11:52:d4:8a:
                    75:8f:4f:a7:84:72:3a:2f:69:10:33:c7:95:7d:1d:
                    ae:aa:85:75:fb:8b:f6:42:37:0c:be:3e:7b:31:a7:
                    d9:99:43:51:2a:2d:42:77:56:b3:b5:cd:15:65:b6:
                    f6:90:81:6b:65:ce:ed:16:83:b1:0c:b9:33:78:08:
                    06:70:bf:61:75:f2:70:85:4e:b6:ac:17:48:7e:f7:
                    bb:32:32:0b:fd:88:ac:ad:f1:f8:1a:8b:e3:37:48:
                    b6:04:af:58:75:ec:3e:87:8a:e4:c0:83:89:1e:bf:
                    85:d4:00:e9:82:76:1f:30:ef:2f:5d:0c:b0:64:78:
                    0b:73:10:6e:a6:0a:9e:3d:25:a7:87:7b:02:00:de:
                    74:38:99:4f:eb:a4:ea:71:5a:d0:d8:99:3c:6e:e7:
                    0d:a6:9f:45:36:7d:67:dc:fa:a8:a7:5e:6d:2a:f1:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4B:EF:08:30:85:CA:95:71:69:02:CE:12:F3:A9:57:C3:52:19:02
            X509v3 Authority Key Identifier:
                keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:1d:c2:a2:1c:f5:e6:68:90:eb:18:12:ea:93:35:b2:b7:
         86:2d:71:7d:c4:ca:8a:8d:51:ff:54:82:fb:dd:a5:73:36:52:
         15:2c:f2:ec:a5:c1:5a:da:b4:02:72:62:1a:7e:74:fb:36:0c:
         40:5b:3d:c4:d5:48:41:9f:e0:08:e9:78:93:f5:d0:f4:31:b7:
         c4:17:d9:95:ce:5a:e7:3b:96:d0:2d:47:99:a0:40:ab:1b:78:
         6e:d0:99:03:5a:a1:4b:5b:b1:6f:21:20:2e:35:85:8b:cb:b8:
         36:a0:d1:63:b0:17:0f:d5:91:bb:04:7c:ad:e6:4c:28:15:a6:
         7c:c8:55:ff:97:eb:19:f9:f7:0b:72:97:24:6c:f4:50:f3:fc:
         ec:ec:f2:87:3a:1c:47:9b:41:29:f9:3d:c7:65:de:aa:01:0b:
         01:f2:16:20:48:7d:14:09:60:31:42:c9:33:d7:4e:83:ee:5a:
         ce:b3:6d:a7:5c:38:db:8b:a3:33:34:6c:6f:f4:91:1d:3a:55:
         ef:21:91:71:0b:41:b4:c1:57:a7:05:79:07:86:ba:9b:fd:93:
         ea:7c:f7:58:83:6f:24:86:9b:bb:4a:35:24:53:f6:24:4a:08:
         8f:b0:14:59:9f:5e:b7:13:ba:1c:2b:b5:70:5f:50:ae:82:3c:
         c6:f9:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:56 2025 by rpki-client