Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File:                     KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier:          q7P7NGmtmlGb6rC9abvVuAIChONBulpk2gtLYfwZLL4=
Subject key identifier:   E7:E9:1B:91:3E:41:2B:D4:A5:BC:C1:10:E7:C8:27:C8:E9:34:4B:3E
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer:       /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial:       0198D6CCDED95A2ABD2C037AE9380D1D388E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number:          0BE6
Signing time:             Sat 23 Aug 2025 12:00:07 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:07 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:07 +0000
Files and hashes:         1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: s3OONbSRclyerwjXDgdMdBu6fCQiIBrZ1we0ZE5zS+8=)
                          2: YH99c0q_olNEfAaRzhJ9pz57sG4.roa (hash: OOfjz24iJ1ROiHG1nf6s+ocWKHslkCgE1Kj76TfUgiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:de:d9:5a:2a:bd:2c:03:7a:e9:38:0d:1d:38:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
        Validity
            Not Before: Aug 23 12:00:07 2025 GMT
            Not After : Aug 24 12:00:07 2025 GMT
        Subject: CN=e7e91b913e412bd4a5bcc110e7c827c8e9344b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:9d:2f:0d:6a:c9:07:42:fa:d6:6f:fe:df:
                    be:ee:e8:b7:41:c8:61:4f:04:8f:50:7a:54:40:9c:
                    71:1f:87:86:23:b6:0a:44:40:29:f1:0d:98:fa:0f:
                    a3:fa:aa:cc:be:be:62:fb:59:de:19:1c:f1:e4:73:
                    c1:0b:ea:0e:4e:b5:44:25:c8:4c:d8:7a:43:70:cf:
                    92:24:f2:b3:c1:5a:b9:25:e1:70:d7:8e:f7:36:53:
                    aa:55:00:48:3b:ca:64:1d:21:7b:bc:e4:3a:7e:43:
                    1d:42:be:9c:c4:0c:ef:20:80:e4:09:a8:48:d9:b6:
                    4e:01:e0:9a:2d:76:60:59:59:1a:d5:98:80:33:e1:
                    96:70:e0:af:25:f6:37:57:e1:7d:0a:3d:df:6e:c2:
                    c8:d3:f7:e1:9e:85:34:4d:54:0f:a9:da:10:c9:48:
                    ea:2d:90:50:18:f4:3e:75:ed:fe:22:03:73:24:9f:
                    5b:2b:32:d6:71:7e:91:47:98:c5:6c:65:35:76:b9:
                    b7:e6:f2:f3:8f:5e:d1:1b:3b:f8:7d:8c:67:9a:ad:
                    ae:a1:8e:64:68:77:0e:22:a9:79:02:44:83:ee:6d:
                    75:08:8b:c5:83:cd:2c:f1:5a:e0:0b:61:c5:78:60:
                    4b:00:75:af:b7:9c:4f:46:09:b4:d9:21:ac:50:d1:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:1B:91:3E:41:2B:D4:A5:BC:C1:10:E7:C8:27:C8:E9:34:4B:3E
            X509v3 Authority Key Identifier:
                keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:cd:60:fb:07:85:07:29:35:80:20:68:c0:e6:18:97:f1:
         47:65:d3:02:9c:08:44:d7:86:22:c0:fd:77:4b:53:d9:45:2a:
         e0:57:3c:56:17:4b:3e:08:08:61:04:ea:38:02:59:e7:fa:74:
         63:72:91:0e:e8:28:78:dc:41:4b:d2:c7:62:a2:11:2e:6c:40:
         cc:f9:a2:dc:d9:b1:fc:66:b0:e1:93:39:77:9c:5c:76:b6:47:
         5a:88:81:c9:cf:72:fd:68:9b:09:cb:73:5a:57:c5:3e:84:f1:
         8c:d7:2b:48:4d:c9:97:66:ca:5a:ee:c8:45:3f:03:d0:86:08:
         c4:a3:c4:35:ea:82:8e:6e:1b:42:ee:d9:69:b4:ab:98:bf:07:
         ef:47:57:4d:7b:2f:cf:3a:0d:82:7a:4f:f3:d0:cf:b0:2a:5b:
         da:2d:0b:85:76:13:ca:22:bc:be:c1:c4:bb:d5:bf:93:1d:8c:
         55:63:93:64:bc:e4:e1:53:db:bc:32:22:11:6d:38:46:1f:d4:
         b1:c8:89:27:c3:88:5e:e0:51:7c:34:2a:4c:ff:b4:db:e1:41:
         53:40:74:86:c1:2d:ab:f3:50:52:b3:d0:de:28:3a:0f:c5:eb:
         32:44:2a:1f:35:1b:a4:0d:e4:ea:75:62:6c:7a:2b:bc:e8:66:
         b6:86:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:00 2025 by rpki-client