Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File:                     ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier:          G+02MgExXfmrO02E9NifQvTK64DfsWO389S8qvhRtPQ=
Subject key identifier:   17:03:5C:EC:E4:72:D4:80:F8:2E:76:FB:5A:89:5E:45:B1:B8:BB:04
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer:       /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial:       0198D6982AD8CA0E478102A569BE11C4A7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 11:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:33 +0000
Files and hashes:         1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: zL4c8gZ5GmvG4HcfJ1HYge5wOvblyjQFgbAJaYH925w=)
                          2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:2a:d8:ca:0e:47:81:02:a5:69:be:11:c4:a7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
        Validity
            Not Before: Aug 23 11:02:33 2025 GMT
            Not After : Aug 24 11:02:33 2025 GMT
        Subject: CN=17035cece472d480f82e76fb5a895e45b1b8bb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:f1:94:3a:c0:e3:c4:ac:b5:47:2e:1b:af:
                    65:d7:82:b7:5e:ae:c2:63:c1:79:28:23:a1:aa:5a:
                    cd:22:de:28:de:5c:f0:c0:fd:ec:69:5c:ea:9a:99:
                    10:77:5b:c8:8c:43:c9:e6:f4:9b:70:48:82:9b:05:
                    34:ae:ee:f6:d7:d8:e2:98:6a:cd:44:0b:06:74:fe:
                    9c:92:05:e2:90:75:b7:65:48:17:52:45:6e:9e:ee:
                    07:ef:49:c4:61:1a:d4:1f:84:f3:19:bd:f7:2f:95:
                    56:f3:f5:fe:73:e1:e2:17:c6:87:4c:af:ce:36:12:
                    93:98:f3:37:50:d3:19:8c:f8:90:9b:8b:cd:34:a8:
                    42:71:ab:47:ce:7a:03:24:ca:f2:93:5b:49:fd:e3:
                    35:73:80:22:db:45:db:c6:84:41:90:26:db:48:85:
                    ff:e7:19:1f:52:04:8d:d6:19:07:78:b4:9c:0b:c8:
                    3b:35:bd:ae:f5:ff:f7:42:41:d5:ae:e5:d0:28:78:
                    45:6e:3e:27:77:de:21:27:61:4c:de:42:6b:9f:f7:
                    36:a6:53:ae:ef:7d:c0:49:43:68:91:22:e6:3d:73:
                    2f:61:f5:8f:a3:db:76:14:12:81:76:f0:80:b1:3e:
                    77:8d:78:1f:c1:1a:4f:48:e2:ce:f8:08:16:56:07:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:03:5C:EC:E4:72:D4:80:F8:2E:76:FB:5A:89:5E:45:B1:B8:BB:04
            X509v3 Authority Key Identifier:
                keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:89:98:09:59:59:4a:c6:17:d4:66:12:97:d0:8f:24:ba:53:
         47:f5:d4:c5:97:bb:6c:5c:3e:b5:91:45:45:ed:71:4a:24:9a:
         da:54:33:54:88:9a:0a:de:95:d6:79:0e:bb:bf:37:03:4d:88:
         8a:cc:64:29:1b:fd:ae:3f:20:ff:3d:bb:50:85:89:a0:95:1f:
         d9:45:5f:7d:11:e3:65:6d:ed:cd:09:97:c5:c6:4c:7e:6f:cb:
         52:39:1b:10:1c:28:ef:14:ec:4d:d3:c0:ac:f3:0c:50:dc:f0:
         27:42:83:4f:86:2c:d8:c2:10:43:ff:06:d0:d8:e5:1d:c7:fe:
         73:2f:3b:2a:fb:27:1c:8f:5e:c3:30:ec:08:bc:e3:25:ee:5b:
         ce:00:fa:1b:c8:08:45:2b:d8:54:7c:34:01:26:e2:f3:82:5b:
         2b:0f:af:49:3b:2a:b5:76:43:b8:23:fa:c8:53:52:1e:3b:31:
         37:e1:8a:8d:a0:a8:48:12:48:73:7c:64:d9:ee:e9:b7:b6:4f:
         63:cc:ba:00:40:c5:7b:be:a5:de:84:5a:b0:ca:19:9c:ae:ae:
         b7:d2:1d:69:63:81:34:59:f0:08:67:25:91:11:7d:70:31:e3:
         ca:ab:1d:64:e7:ac:bf:26:03:f9:11:6f:1a:41:15:8d:64:fc:
         5d:23:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:06 2025 by rpki-client