Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          s6JWymYNMo6dfmgKWBGeD3dSPKaYmbu0f43w3qgrSRM=
Subject key identifier:   EE:70:2F:24:C5:07:54:5C:C3:6A:62:EE:C9:8B:90:CB:77:EA:FE:42
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       0198D5F1D23127DD0130AE6466F0D0A93D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          0534
Signing time:             Sat 23 Aug 2025 08:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:51 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: gyxxH1wN/AQGI7QAuITL3Kk+V4ViFLpFNsqpF8PTOzQ=)
                          2: uYWwRm4H6YcSfThBlj9ZG4s8g-o.roa (hash: k7HHEyNrsyk4kGL9qKSfgAwu15JappUHRUGh3h3zAJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:d2:31:27:dd:01:30:ae:64:66:f0:d0:a9:3d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: Aug 23 08:00:51 2025 GMT
            Not After : Aug 24 08:00:51 2025 GMT
        Subject: CN=ee702f24c507545cc36a62eec98b90cb77eafe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:2a:55:43:27:f8:f9:c0:bc:da:55:ec:6a:
                    6a:86:d3:a1:de:dc:62:f9:ab:a0:1b:70:03:ce:d8:
                    90:6f:e5:27:ba:bd:1b:92:68:b5:9c:8b:49:01:83:
                    0c:86:2f:66:52:e7:df:5b:4f:fe:c7:fc:95:13:df:
                    f6:c8:10:97:52:c1:1e:43:4e:e9:5a:b3:84:7a:6b:
                    69:f9:bb:8f:9c:4a:45:d0:45:0e:6b:99:85:5e:11:
                    fa:44:5c:80:60:ff:bf:2b:11:c9:ed:9f:19:5c:67:
                    5f:7d:02:38:5f:0c:7b:78:7f:44:12:4b:36:a3:ce:
                    bb:67:0e:1c:8d:68:e6:73:51:88:eb:73:f9:88:15:
                    c3:44:32:85:23:7a:c6:55:82:f6:33:a3:c6:b2:e8:
                    0c:54:f4:e1:a8:56:a1:13:de:da:61:ca:fc:c8:44:
                    e9:ef:97:bc:24:ac:d9:e0:b5:db:f9:4d:60:53:86:
                    ce:16:02:f5:3f:3c:60:54:a9:72:d6:15:82:f2:c3:
                    f0:b2:0f:74:fd:2e:00:b6:f0:1a:08:de:89:b5:42:
                    79:e6:00:eb:26:c7:22:f0:bd:39:02:2c:e9:2b:c0:
                    be:37:8b:74:f4:ec:61:c0:64:4e:b1:ed:de:05:d8:
                    49:02:bc:29:38:c0:5a:f4:41:31:dc:96:aa:60:7b:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:70:2F:24:C5:07:54:5C:C3:6A:62:EE:C9:8B:90:CB:77:EA:FE:42
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:da:7e:c2:12:67:50:88:19:47:f4:ab:f9:59:51:4d:44:
         76:0c:d8:35:45:12:66:1b:7e:6c:8f:d5:93:31:6f:ff:46:44:
         34:71:eb:ea:80:0d:c6:14:f9:20:fe:4c:e7:e5:6d:50:68:76:
         42:2c:a9:e1:cd:59:dc:92:c3:dc:c2:c2:6f:b7:21:6b:f9:12:
         fd:1c:de:49:58:5a:43:2b:0e:87:b6:ce:dc:39:6a:88:b3:df:
         61:11:6c:3f:7c:fc:e5:5c:34:26:28:c7:aa:47:0d:ab:7b:16:
         00:7c:c9:52:93:ca:9b:62:0d:78:e7:d9:f3:61:cd:58:30:fa:
         c0:bf:a5:9e:53:19:0e:cc:07:bf:65:fe:27:03:ae:bd:02:72:
         2e:55:cc:6a:99:ee:1f:2e:ae:74:f7:bd:01:85:a6:fb:79:e9:
         4d:f3:23:37:b1:9e:e9:19:79:c1:80:cd:a5:a9:6a:5c:49:c8:
         c2:34:bc:95:c8:cd:95:9e:fe:9b:1e:24:ec:9e:9f:93:9d:77:
         08:8f:e0:88:d4:df:d8:96:51:7c:55:e8:44:d7:a3:0b:3f:01:
         21:82:18:b0:13:40:22:a1:cf:16:85:cf:71:d5:30:f4:9e:5a:
         94:73:ea:67:ad:96:1d:5d:d2:eb:84:ee:e1:e3:d6:6b:d8:bd:
         f4:a8:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:09 2025 by rpki-client