Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          2iR2scJ+i9WLWUKvBx6SfYcjw9Vw9S/IlHH+nbtAAjw=
Subject key identifier:   F8:2C:81:4A:AA:59:92:C6:55:30:00:E1:87:AB:8A:00:8D:7A:71:DF
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       0197B6A0BC87D2C09A06BA77A52B04B698B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          15BC
Signing time:             Sat 28 Jun 2025 13:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:16 +0000
Files and hashes:         1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=)
                          2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=)
                          3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=)
                          4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: 6ItqeGlDdXVriV2UNDgrNemZDfQ6qVvNyVrqX5Cx15Y=)
                          5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=)
                          6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:bc:87:d2:c0:9a:06:ba:77:a5:2b:04:b6:98:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Jun 28 13:01:16 2025 GMT
            Not After : Jun 29 13:01:16 2025 GMT
        Subject: CN=f82c814aaa5992c6553000e187ab8a008d7a71df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:5b:42:64:ca:8e:87:18:d7:59:c1:68:78:
                    35:99:f5:34:dc:a9:80:ae:04:0a:f2:81:b9:06:4a:
                    e2:c5:4f:36:0a:7d:a4:11:9c:9d:b8:86:e1:ce:64:
                    80:5f:64:8b:6e:47:c4:67:e7:99:e7:6c:cd:38:87:
                    6c:86:bf:fb:13:d1:80:4f:eb:c6:5a:0e:65:44:91:
                    8b:05:be:f7:3e:1a:b5:88:3f:df:22:89:d8:45:9f:
                    e7:4a:e4:df:1e:da:66:a5:cb:0c:98:55:87:b2:e6:
                    ce:c5:be:ab:dd:ae:f9:96:1a:bc:3f:c3:74:c6:9b:
                    93:32:aa:d3:e8:9d:e7:e3:58:f1:f7:7d:55:52:e4:
                    b9:c4:d0:d9:00:a3:29:80:a4:2d:38:aa:9e:0f:f3:
                    b3:37:f2:76:57:17:1c:a0:a6:33:32:d8:24:cb:e7:
                    cf:86:5d:38:d5:22:91:04:e5:38:5b:4c:00:ea:f6:
                    93:d2:84:27:84:d6:a8:d3:c4:17:bc:6f:c2:49:6e:
                    1c:fe:49:97:e5:6b:94:dc:bf:a3:9c:8b:4d:7f:77:
                    df:39:48:6f:6a:dd:93:37:20:bf:22:89:01:a7:29:
                    04:40:8d:8e:8a:ae:a9:1e:8b:d5:06:aa:31:7e:15:
                    50:44:eb:0c:54:80:28:4d:5f:04:3f:3d:4a:6d:24:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2C:81:4A:AA:59:92:C6:55:30:00:E1:87:AB:8A:00:8D:7A:71:DF
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:83:e5:93:82:ce:86:62:74:5d:d8:57:77:2d:03:4d:38:09:
         6c:10:98:d1:1d:9e:68:cb:9f:9e:f6:cc:c1:ee:ff:dd:33:ac:
         c7:3d:17:99:35:a0:4d:32:63:b7:24:fa:89:8b:50:e2:fb:5c:
         75:6b:b6:48:f7:05:33:89:ca:35:a7:63:f6:b7:f5:fb:61:27:
         2b:89:be:d2:15:ca:5c:22:8d:ab:53:17:8c:df:38:47:fc:22:
         88:1d:6e:c6:ef:b1:8d:6e:9d:fa:80:38:be:17:73:9e:c3:cc:
         9a:b4:88:eb:bd:5d:a7:85:6a:6f:7f:40:f5:00:53:9b:95:d6:
         e0:5b:81:9e:bd:55:a1:25:7b:07:a7:e6:ff:f4:99:ac:bf:ae:
         cd:f1:fc:41:24:fb:4e:c9:93:65:f3:93:9b:a3:f3:3a:35:21:
         02:49:b6:92:78:4b:54:69:ce:53:85:3d:c6:d6:16:9c:8f:92:
         fa:f7:07:36:2e:f1:49:24:61:64:b3:75:26:22:9a:a7:99:91:
         f1:71:17:53:a7:25:20:23:d1:0c:3a:91:fe:53:a6:80:6b:d4:
         f9:04:71:e0:66:15:62:56:e2:cc:0a:3e:9d:1a:09:8f:06:64:
         13:86:dd:dd:ea:87:63:08:8c:02:92:d2:7e:d3:3a:24:f8:0b:
         b2:bd:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:30 2025 by rpki-client