Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File:                     kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier:          rZJDdN0j3mO5HwdElinQLNzgTGVp3/bd89X2uqB4xP8=
Subject key identifier:   9C:82:99:A0:EA:CF:A3:38:02:9C:F2:CE:C4:39:07:AE:2A:69:91:CC
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer:       /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial:       0198D5F149347CD7CE295347BB17DE458BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number:          069C
Signing time:             Sat 23 Aug 2025 08:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:16 +0000
Files and hashes:         1: dqOSF9Ies6urS5k4Ct3cQtw5VN8.roa (hash: J3BiGkZdoL6h6rfESwdaItaaKVovQQqfeD9nGDkL6og=)
                          2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: k90iBnDGfpa4/2A9Or6sDdu3ketKM2nCqhfUDJLQZO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:49:34:7c:d7:ce:29:53:47:bb:17:de:45:8b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
        Validity
            Not Before: Aug 23 08:00:16 2025 GMT
            Not After : Aug 24 08:00:16 2025 GMT
        Subject: CN=9c8299a0eacfa338029cf2cec43907ae2a6991cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:bf:e8:bf:47:ab:87:57:9d:7c:82:04:4b:
                    74:90:55:b4:ee:31:91:49:c1:72:1a:a7:38:ca:f3:
                    38:dc:85:e2:48:0c:5b:d0:d7:4f:fa:08:43:50:ee:
                    59:3f:6d:b1:85:ac:1a:55:75:55:9b:35:9a:da:ff:
                    56:bd:96:da:75:38:93:e7:ad:0a:cf:e7:f8:1c:fe:
                    b4:69:d1:51:b9:b0:6e:10:7d:69:47:0a:d8:aa:a0:
                    2c:e4:1f:73:79:d8:cc:a6:ef:ef:73:44:91:b9:5c:
                    e7:2f:16:96:d4:c3:43:82:12:70:55:e1:5c:86:6b:
                    41:9d:02:74:08:81:0d:85:76:12:55:52:c6:72:14:
                    88:2c:bc:33:bc:f8:da:1d:6b:e3:23:6f:24:4a:09:
                    e8:08:db:ad:e8:a7:98:66:2f:f6:3d:f2:55:ed:8f:
                    28:9f:2f:38:81:ee:4f:9a:63:4b:06:af:fa:2e:f6:
                    c2:41:40:96:79:d6:4e:a3:e3:64:38:78:89:33:b9:
                    bb:2a:e7:77:6f:30:31:3f:26:5e:90:cb:0e:62:0e:
                    de:5f:1f:c3:c3:28:52:aa:15:d4:da:7b:44:02:6b:
                    fb:9d:d9:7a:1f:f8:60:e6:1d:cb:ea:6c:6c:4e:4f:
                    45:7c:2e:2f:3b:74:8d:f7:07:9f:37:fa:65:34:a9:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:82:99:A0:EA:CF:A3:38:02:9C:F2:CE:C4:39:07:AE:2A:69:91:CC
            X509v3 Authority Key Identifier:
                keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ba:9a:25:46:f9:42:02:90:43:6e:8f:8b:e0:1a:80:e3:d1:
         de:12:5e:94:c6:a7:e5:9e:5c:a9:76:ce:a6:5b:15:28:db:83:
         68:0c:ae:9e:aa:55:d9:7f:29:5f:5c:b4:72:cf:dd:4d:56:2a:
         5a:ec:84:3b:d0:bf:50:8c:de:18:ce:af:1b:d4:0f:c0:94:d1:
         f7:9b:bd:f0:9c:14:df:42:66:f4:5d:81:49:25:62:0b:c0:c5:
         72:7e:0d:d1:39:8d:d7:b5:2b:ba:5d:52:3a:57:75:5b:ce:65:
         6b:1c:b6:71:77:ce:c0:5f:81:98:09:05:62:a0:36:23:2f:67:
         42:84:a2:46:ec:de:4c:e2:b0:80:36:8c:59:5f:09:0c:7e:af:
         39:c9:d0:79:c7:8a:be:5a:17:ac:5f:40:5f:2e:65:fa:33:99:
         e2:96:81:22:12:13:39:38:de:f3:d7:4b:47:cb:3b:47:54:ae:
         8b:78:21:a1:fb:ad:31:e6:69:cb:52:70:8c:ee:9c:eb:0d:b3:
         7c:3e:b4:d3:6d:fd:2d:1b:d8:fc:4d:68:10:71:bb:23:10:a5:
         02:78:2e:cb:e2:ad:2b:a7:62:6d:3b:3a:32:25:a7:5a:e3:c6:
         c9:3f:02:c9:19:ed:53:55:29:d1:50:6e:fb:10:61:73:95:47:
         38:df:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:07 2025 by rpki-client