Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File:                     kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier:          Li6b76uD91Q/eM6bWViEb/+gCgmRWA+hdfBKYnSjcNw=
Subject key identifier:   37:B5:97:E5:B2:AE:09:B5:70:6C:21:28:02:DA:1A:41:97:F7:D8:3B
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer:       /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial:       0199FD6B3A2CD3C750C1DF583354DBAEB9FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number:          142E
Signing time:             Sun 19 Oct 2025 17:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:26 +0000
Files and hashes:         1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
                          2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
                          3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: MdrqUxj8w2DOZNFlC6GJEiA42YGXPvlHAxvUPSvEqBg=)
                          4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:3a:2c:d3:c7:50:c1:df:58:33:54:db:ae:b9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
        Validity
            Not Before: Oct 19 17:01:26 2025 GMT
            Not After : Oct 20 17:01:26 2025 GMT
        Subject: CN=37b597e5b2ae09b5706c212802da1a4197f7d83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:e9:19:33:a4:97:a7:3c:d2:ee:af:65:ff:
                    f0:0d:63:94:76:2e:af:9a:df:bb:cd:3e:c5:19:7b:
                    1b:78:22:80:23:57:b3:2c:33:04:27:b2:ee:bd:f3:
                    9d:0a:4e:2d:7b:20:6d:75:69:e9:b9:4d:50:d4:79:
                    fa:00:d0:8b:b5:6d:ed:8c:ac:b1:25:78:fb:7a:ca:
                    56:fa:ae:86:fa:f9:93:bd:a9:85:a6:6d:7f:64:fe:
                    63:65:83:4a:60:b1:75:e1:71:56:a7:4c:71:73:81:
                    48:0a:25:71:cb:c6:53:3f:be:b2:ae:ad:4a:6b:43:
                    f6:08:80:26:45:46:0e:cc:19:59:9c:d3:87:71:e1:
                    6a:c2:ae:7c:d6:33:05:c5:4b:94:26:36:d9:c3:1b:
                    98:23:d8:4f:15:bf:13:22:a9:2d:31:ea:76:2a:ff:
                    a8:44:c6:6e:e8:77:63:91:2e:9f:fa:be:8e:29:f9:
                    69:e6:5d:6d:5b:88:23:b8:39:b9:71:ea:5c:01:98:
                    14:d1:c8:73:15:90:53:1c:19:29:f9:ef:a7:70:18:
                    b4:94:74:27:3c:0d:5a:3b:48:3f:e2:45:07:cf:fc:
                    98:c9:18:1c:70:0e:4e:86:2a:f8:99:e6:6f:df:97:
                    e0:76:f7:56:a8:58:83:fc:1e:11:41:54:1c:74:5e:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:97:E5:B2:AE:09:B5:70:6C:21:28:02:DA:1A:41:97:F7:D8:3B
            X509v3 Authority Key Identifier:
                keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:29:17:87:96:33:12:44:e1:01:56:a5:f1:ac:e4:fd:79:f3:
         77:a5:d5:7a:1c:4b:9d:7a:ff:a9:fc:4d:c8:e5:0c:48:f9:48:
         ef:76:f8:99:4e:33:d7:52:81:31:9d:ba:dd:e8:fd:88:36:27:
         dd:e8:44:af:ea:16:b4:09:4d:5b:96:3f:84:f8:41:59:dd:b4:
         2b:d8:3e:aa:d6:7b:56:e2:97:25:3e:0c:f9:c2:e5:e8:62:6d:
         d6:56:9f:24:5e:de:b7:fd:ca:36:d0:84:36:83:40:e5:15:f9:
         07:a7:27:f4:f6:47:fc:b0:07:80:b2:1f:7e:ef:84:b7:b1:a5:
         49:ef:9a:01:f3:87:54:8c:c8:fd:ae:de:0a:36:88:f4:3e:6b:
         94:72:e2:55:56:bc:57:c0:7d:f6:47:ea:f7:ec:fb:99:1a:7b:
         41:2e:f8:96:8c:f9:59:46:34:33:1b:42:10:25:0a:9f:cd:05:
         fe:e4:3c:95:e9:cc:93:25:02:40:33:6d:a9:a9:ae:1c:6d:0d:
         de:72:f1:23:19:e2:21:6b:c6:5d:13:66:cc:9e:5c:41:c9:9f:
         f0:cd:e5:ac:4a:da:d7:3e:06:35:a6:7e:13:9c:fd:5f:90:de:
         38:f5:fc:9f:65:e6:36:f4:68:7c:eb:12:1f:67:9c:dd:c7:fd:
         88:6d:8f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:39 2025 by rpki-client