Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          XuSGYOAz5oX0HmG2wk3FaLTRMYcL/7MM1G5NlEglk5c=
Subject key identifier:   56:E6:DA:3A:EE:11:C8:2A:73:D4:F7:AA:30:05:36:B1:32:82:09:A4
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       0198D58344420441DF005AB1E0004596F81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          11BA
Signing time:             Sat 23 Aug 2025 06:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:06 +0000
Files and hashes:         1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
                          2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
                          3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: ktgrQb0RfHPJ2AgqO13Sjuf5VQn5lLpG/XaoJl6pkJQ=)
                          4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:44:42:04:41:df:00:5a:b1:e0:00:45:96:f8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Aug 23 06:00:06 2025 GMT
            Not After : Aug 24 06:00:06 2025 GMT
        Subject: CN=56e6da3aee11c82a73d4f7aa300536b1328209a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:6a:61:f9:d3:13:10:14:77:ab:6f:6b:a0:
                    d9:a6:49:99:43:1c:db:5b:ed:93:43:10:6a:ce:6e:
                    85:a4:db:ac:bb:22:8b:7e:56:e2:04:19:24:b7:c7:
                    15:e9:1f:5b:08:a6:1c:96:45:95:d4:a2:9c:f5:e6:
                    b3:69:ed:7b:e9:19:33:6b:1b:0a:dd:78:f8:b8:1f:
                    77:39:ed:43:ce:1b:ed:61:51:f7:ed:40:5d:14:ef:
                    f7:a8:c8:74:e9:32:54:2d:a7:4d:a4:83:23:76:50:
                    5d:a4:d7:f2:86:19:0e:52:29:78:8b:88:8a:2f:a0:
                    55:02:51:41:e5:b6:0a:4a:a9:28:43:5c:01:aa:8b:
                    74:51:94:b0:52:0a:ed:e4:19:a2:2d:95:19:a2:99:
                    ef:4b:be:22:a4:ba:66:f2:92:1f:6c:dd:fe:78:22:
                    94:56:72:4e:8f:50:45:f3:fa:7e:f7:be:07:c3:b6:
                    9f:5c:bc:9e:f4:75:14:92:49:fd:d2:0e:a1:66:29:
                    1b:22:90:64:42:fb:c2:42:d3:e7:b5:55:58:a4:6f:
                    30:47:0e:f5:6b:51:28:71:a0:79:cc:94:bc:c2:89:
                    f3:e6:03:0a:ba:02:fa:c2:8a:5a:57:34:fb:eb:24:
                    ca:09:44:11:19:8e:78:31:cc:3a:0b:5d:45:ab:f6:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E6:DA:3A:EE:11:C8:2A:73:D4:F7:AA:30:05:36:B1:32:82:09:A4
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:7f:4e:de:e8:62:56:4c:95:e4:9f:d1:cb:76:d1:62:cc:
         0d:03:78:f4:e2:82:4c:19:55:bc:d6:ce:d9:44:c9:8e:81:41:
         98:d0:e1:c7:8d:b3:5a:cd:1d:9d:be:dc:e4:80:50:cc:ab:9f:
         0b:8c:a9:b1:cf:27:9e:98:bf:17:41:a2:27:8f:04:74:f0:f3:
         dc:ed:f6:9c:d0:dd:ec:86:65:25:37:45:98:4e:c8:d1:c2:97:
         3c:16:3a:05:0d:41:ef:29:dc:6e:0e:14:80:b7:73:5f:62:e2:
         ef:98:ed:33:54:2d:34:1a:a8:32:47:8d:16:e0:e7:09:39:7c:
         b6:93:4e:74:ca:a3:8c:25:02:17:ac:be:82:5a:97:68:05:f3:
         46:84:df:1b:83:76:15:a2:22:aa:38:9a:69:e6:ac:f1:ab:38:
         d0:65:46:e1:40:96:a2:bc:5f:e3:68:aa:21:04:83:fa:b4:5c:
         94:13:8e:f8:48:ab:90:90:1c:48:8e:f5:8c:1e:3c:54:13:da:
         09:ab:a5:16:4f:60:ab:8e:56:05:4d:24:5a:68:25:9c:f0:7f:
         4c:fd:14:2d:61:6c:b1:82:2f:24:b5:f5:ce:99:dc:f6:ef:73:
         76:98:41:aa:f2:13:25:d2:0a:e5:36:c7:98:69:43:f5:5b:98:
         c5:71:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:51 2025 by rpki-client