Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          At1dqIhdoNlUj+6Wg1n94mz0Nm1bs9SivevrJfftie4=
Subject key identifier:   F7:4E:55:1B:74:D1:16:EE:6B:AE:AB:07:C3:A1:15:19:A9:01:24:11
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       0198D515731B23C123657CF7BAD257E7F1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          1644
Signing time:             Sat 23 Aug 2025 04:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:09 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: duCXvQ0X2q68bkSPSfT/LWRd7nWebnGI6+4C9IjcQZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:73:1b:23:c1:23:65:7c:f7:ba:d2:57:e7:f1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Aug 23 04:00:09 2025 GMT
            Not After : Aug 24 04:00:09 2025 GMT
        Subject: CN=f74e551b74d116ee6baeab07c3a11519a9012411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:9b:45:ec:8e:32:9b:d5:64:14:5e:43:5a:
                    d9:50:77:be:0d:bf:2f:d6:af:14:6d:67:b2:0e:0d:
                    d4:6f:30:08:0b:b4:47:b6:cf:ff:99:7d:3a:39:fa:
                    b0:89:0c:1c:b8:6d:65:4a:ec:47:60:c5:58:47:e4:
                    98:cc:be:d8:82:f3:ce:e3:93:da:88:b8:e2:e1:95:
                    63:58:21:35:38:4b:8f:df:ad:29:5f:59:e3:8f:d9:
                    0e:0f:73:90:b7:0d:27:31:a8:f4:4d:34:f2:25:65:
                    c9:9f:50:88:29:63:7c:25:3f:5e:dc:52:07:10:af:
                    8f:55:27:67:37:44:4d:4f:fa:a0:80:ea:a2:46:aa:
                    d3:ea:d1:97:14:57:e7:3f:78:6a:4f:32:59:42:0f:
                    ae:7f:2b:ce:ab:d6:12:1f:1f:04:4d:a7:8e:12:30:
                    00:74:ff:c9:58:88:4d:fc:73:03:fb:62:c4:35:65:
                    29:a9:b3:d8:c0:ec:ef:c5:46:8a:82:af:81:fe:42:
                    d9:d5:1d:c2:70:21:4e:93:e6:1e:dc:d0:28:30:ce:
                    5e:40:f2:d5:a4:66:47:bd:94:cf:ae:e0:0e:3c:84:
                    0a:fe:29:f9:43:f9:13:3e:6d:33:04:c1:5f:f6:bc:
                    f2:67:b2:ac:b8:a4:d4:a9:6f:2c:b7:69:91:99:9d:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:55:1B:74:D1:16:EE:6B:AE:AB:07:C3:A1:15:19:A9:01:24:11
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:06:2b:91:e9:9a:a2:2b:c7:4d:5a:6f:63:67:3e:42:ad:
         16:9a:5b:2c:b9:56:c4:f1:b6:21:1e:7e:28:37:f7:79:44:a6:
         1e:cf:8b:e4:dd:4e:eb:bd:4a:dd:2f:f9:15:c8:85:f8:9b:0c:
         37:7c:f9:46:24:c1:d8:b2:d2:e1:90:94:2c:01:f7:24:af:b7:
         01:60:93:a5:c6:bd:6f:1a:01:b7:d2:0a:6c:86:6f:b2:a4:08:
         4a:1a:73:b0:35:2d:0b:c1:6b:c6:4b:0d:e3:57:42:53:41:7e:
         fc:b5:db:d7:24:b8:ec:29:d5:8d:47:82:12:34:b7:3e:a1:76:
         c2:8f:46:e9:76:dd:d6:d8:e9:bf:5c:02:ad:21:b5:15:2b:6c:
         0c:32:65:51:e6:4c:19:1c:82:9b:61:f3:39:be:be:e8:21:e9:
         14:d6:9f:0a:c7:2e:6a:62:a9:b5:59:fc:b4:31:fe:ec:e4:0e:
         17:44:06:26:51:36:85:56:72:82:29:cb:49:58:9c:d5:5e:ce:
         a9:43:50:5d:c9:8f:32:38:11:ec:d2:85:b1:a0:1f:f3:7d:f1:
         ff:1e:1f:df:91:f2:d7:98:18:d2:50:13:87:cd:a8:fd:43:db:
         4b:14:e4:73:f4:1f:a0:39:2c:b8:ef:a8:24:72:56:74:fd:45:
         68:6a:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:14 2025 by rpki-client