Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File:                     K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier:          QOTG4Dx3ExfAjgEvwJ97O88QyP/T98x9s4tJtrW0bd8=
Subject key identifier:   26:58:EA:8D:4F:53:81:C7:99:FF:70:66:8D:62:93:89:15:70:99:97
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer:       /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial:       0198D5833FE42B9378C26DF5D91098511BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: p6ZR/+N/lndRWH1p03MYbU12NNxKTblOFb1vCocbDc0=)
                          2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:3f:e4:2b:93:78:c2:6d:f5:d9:10:98:51:1b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=2658ea8d4f5381c799ff70668d62938915709997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:6e:74:fa:6c:d9:fe:7c:9a:e4:54:a6:b8:
                    d6:74:f3:2e:ed:2a:cf:c4:ee:87:93:c8:54:b7:1f:
                    8e:08:eb:05:20:50:59:38:b5:1f:6b:c5:c3:3a:1f:
                    dd:07:4d:51:72:78:ad:47:78:2d:0a:20:69:11:ff:
                    cb:35:d0:c7:3c:80:a2:25:b7:8a:67:05:2a:3f:63:
                    72:8d:df:12:c1:47:16:5d:17:df:6a:fd:ad:24:4d:
                    b6:af:a3:1c:25:a8:28:ad:74:eb:ae:73:ad:98:fe:
                    27:d6:86:e5:57:b5:50:05:51:54:f2:bc:f6:97:de:
                    38:38:26:fe:e1:cb:f0:d9:93:d5:74:f4:3a:92:3d:
                    b2:39:b6:d0:de:68:e1:10:f1:f0:df:8d:7c:b3:7f:
                    57:79:89:cd:df:65:1a:95:79:a9:84:ff:d9:44:6a:
                    9b:ba:41:85:f9:fd:34:1e:40:22:f7:50:6f:88:90:
                    27:63:65:9d:ba:76:30:a4:a6:01:33:3e:a2:c7:b5:
                    b3:a6:1e:79:fa:3d:21:64:d8:6d:30:6b:70:c2:2b:
                    71:44:c4:27:2e:41:7f:59:a1:e0:78:e7:6a:94:dd:
                    0e:df:5f:8d:f9:5a:2e:bb:a9:52:5a:cd:5d:ae:d9:
                    7a:eb:bb:2c:d7:dd:d7:cc:14:19:36:2c:f1:bf:0d:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:58:EA:8D:4F:53:81:C7:99:FF:70:66:8D:62:93:89:15:70:99:97
            X509v3 Authority Key Identifier:
                keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2b:02:27:7e:56:9c:fc:a8:6f:db:23:f8:c4:90:2d:b0:49:
         39:ae:31:f7:57:b4:21:d2:fc:a0:11:58:96:a0:aa:5c:4a:c3:
         9a:14:7f:e9:5e:67:f8:a2:c6:89:7c:50:8d:1c:57:a5:1f:53:
         af:b5:a6:c6:0d:1f:bc:dd:cc:6b:7a:73:34:e8:fd:07:0f:02:
         ab:ed:d9:2a:bd:b2:4e:63:c5:52:1f:93:33:79:a5:2e:a0:00:
         e9:aa:7b:3e:24:c3:fe:82:92:ac:b9:1d:59:30:3b:4d:5f:41:
         e5:9c:a2:e5:51:3e:f3:09:00:23:9a:55:8e:9b:fc:a3:50:db:
         c6:c0:05:0f:87:3d:9a:c9:ca:2d:22:4c:45:3a:64:6e:b5:a0:
         46:17:bf:6c:4a:79:08:e1:f7:71:57:67:e1:fb:01:a3:9f:e9:
         72:44:f6:1d:3a:0c:bc:4f:4f:f1:16:68:79:8b:9b:6a:ef:9d:
         a9:0c:51:aa:4e:16:52:68:1f:f3:ce:46:ce:60:73:c7:e1:9b:
         84:cd:53:cc:1a:66:ba:79:94:2c:59:3c:1a:24:92:87:fa:9c:
         16:0b:49:6f:d5:4e:b6:43:51:88:c3:e7:94:cd:3f:7a:5f:18:
         11:cf:63:07:9d:23:28:28:3d:90:81:89:84:f9:60:dd:15:7f:
         08:f6:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:40 2025 by rpki-client