Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File:                     klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier:          KiLw94qtuyVtaPBbH6Ezrtpo2v5gunh3/D08GIfgWX4=
Subject key identifier:   A7:CD:6A:14:DE:06:C9:55:03:31:F5:0B:7A:14:48:18:4B:4E:39:4F
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer:       /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial:       0198D5BC04A71566DEAD2E0C3D6EBFB4F7DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number:          15E8
Signing time:             Sat 23 Aug 2025 07:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:05 +0000
Files and hashes:         1: EfOMbgh_pKQt-7ajxMUeTepJbo4.roa (hash: RicjsAR+fFB8KuftKBMTKVHP55uAJ9KWTl0BH2re0WQ=)
                          2: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: hZ0GmgmO27jclqRWncf2zjOjEB0K3vMuj5a7p0QHtZE=)
                          3: r1IMpiCHpPweMRkuWsw73RYDo3A.roa (hash: H3EX+meKiUt0EpGIqmimp5m+RpOOJnWjXaAa27zBx8A=)
                          4: uW5xZeMVu996ePnsDNWix3IxddE.roa (hash: eZBsZLTI5FHa2cO1NIRNHlb8bthiS8UjIJ0pt0v6Shw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:04:a7:15:66:de:ad:2e:0c:3d:6e:bf:b4:f7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
        Validity
            Not Before: Aug 23 07:02:05 2025 GMT
            Not After : Aug 24 07:02:05 2025 GMT
        Subject: CN=a7cd6a14de06c9550331f50b7a1448184b4e394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:0a:b8:63:8d:68:17:99:ba:01:b1:a4:96:
                    e7:bb:9b:e1:35:51:57:75:16:88:f5:0b:50:a1:16:
                    aa:ca:c5:e4:23:4d:9f:1d:ff:95:c0:0c:69:5b:cc:
                    0d:15:01:89:15:ce:9d:c7:37:9d:53:70:36:8b:89:
                    89:f7:e3:0a:24:44:9b:06:f5:f6:f0:75:c9:c2:3c:
                    b1:89:6f:7b:d2:1c:c8:a4:37:f5:f7:0c:e9:93:a6:
                    b8:13:0e:31:6b:e7:19:d4:e0:e5:ca:a4:d5:2e:83:
                    f4:d7:ab:7b:7d:59:c7:a1:c3:c0:9b:3b:d8:5b:01:
                    d4:e5:40:1a:0f:87:63:96:46:8a:ba:25:8e:62:f5:
                    a3:ad:65:70:5b:bb:df:5d:72:aa:4b:c7:d3:2a:67:
                    c1:c7:3e:2d:47:db:02:a3:c5:30:b5:d8:cc:30:9c:
                    7d:23:ea:02:d6:62:fd:95:45:b7:99:73:1d:d9:de:
                    49:e8:db:0d:3a:a2:2b:08:3a:b8:16:a1:06:28:e4:
                    26:b1:e9:44:56:25:18:71:cf:27:7c:c5:ad:fe:64:
                    4b:6c:f2:a7:7f:7d:70:80:c8:fd:b9:3b:80:6e:8f:
                    d3:c6:78:45:f4:69:3a:66:f4:a0:74:37:d9:cb:5b:
                    b9:a1:bb:d7:48:8f:00:79:e0:eb:11:5f:83:c3:73:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:6A:14:DE:06:C9:55:03:31:F5:0B:7A:14:48:18:4B:4E:39:4F
            X509v3 Authority Key Identifier:
                keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:22:ec:44:e0:c6:f3:68:13:f5:08:30:4b:05:37:38:7a:52:
         4e:28:76:59:d1:94:66:f4:a2:1d:b2:a2:1e:5b:50:89:eb:93:
         59:2f:ff:4d:c3:da:da:3c:16:6b:f2:d3:40:cc:bd:22:50:1d:
         3d:ce:0b:4c:42:f1:f4:0c:07:26:1b:f5:f8:eb:7f:f3:d6:2c:
         ad:ee:2d:1e:b9:08:60:d2:be:3e:e3:59:14:c5:01:29:ed:5c:
         7d:71:d6:a3:d1:79:f0:11:39:e5:ab:94:58:62:8d:b6:a2:7e:
         3e:13:c6:bc:44:4a:42:45:2c:24:e7:6e:8b:71:2b:a6:db:42:
         99:90:9c:ea:f9:43:b7:82:f7:92:d7:61:4a:ba:a9:04:e7:80:
         03:61:6c:48:a3:65:20:45:28:cd:6f:94:87:f4:f9:c6:f6:53:
         91:70:4a:94:45:dc:9a:1f:84:ef:84:34:58:ed:c5:a5:a8:57:
         66:8d:fc:e4:fc:44:50:d6:50:42:53:ea:fa:54:43:8e:6d:16:
         66:08:54:39:c0:96:dd:f4:46:f1:6a:98:52:6c:58:4e:46:20:
         aa:12:3a:89:1f:dc:9b:17:ef:d2:0a:d6:2c:50:f4:54:01:1e:
         ad:89:a3:13:be:96:14:4a:54:c2:6a:9d:f6:7b:71:04:8d:41:
         a4:07:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:08 2025 by rpki-client