Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File:                     K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier:          9+OxmYsrADgR7BFnJVDAHsfLwP0684yUqpdFaEK1afU=
Subject key identifier:   FA:45:DF:20:38:46:76:0B:F6:E9:2F:25:4F:D9:C5:28:B7:D2:24:69
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer:       /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial:       0198D583EA09AC22447AA8547BC551A3CC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number:          0A61
Signing time:             Sat 23 Aug 2025 06:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:48 +0000
Files and hashes:         1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
                          2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: BzSeojjFsN33f3KGbIViSXOlVe4HVe4O+dQcrQkpvRk=)
                          3: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
                          4: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ea:09:ac:22:44:7a:a8:54:7b:c5:51:a3:cc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
        Validity
            Not Before: Aug 23 06:00:48 2025 GMT
            Not After : Aug 24 06:00:48 2025 GMT
        Subject: CN=fa45df203846760bf6e92f254fd9c528b7d22469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:24:17:af:ed:30:3d:70:7c:a7:cd:b6:bd:
                    34:58:dc:92:e5:d2:b4:60:69:5e:5c:44:83:79:a3:
                    46:3c:f7:30:60:1c:b5:2b:07:c5:28:41:4e:64:b2:
                    9f:bd:66:e0:c3:74:8a:eb:d4:43:77:2c:28:5d:ca:
                    14:ab:54:d2:44:46:22:a7:cc:e5:88:1e:c0:44:75:
                    4f:e2:c2:3d:4d:37:1f:6f:be:6a:fc:89:45:26:4a:
                    a4:70:ee:45:b2:1a:68:d5:ea:9a:8b:85:1d:31:10:
                    41:49:14:3e:47:66:4b:65:88:5f:b3:2a:c6:b9:b7:
                    a4:45:5b:fa:b3:5e:1b:d5:5b:04:34:5d:d7:74:7b:
                    df:ff:a1:35:73:40:43:45:16:3f:8b:82:02:1a:85:
                    3d:6c:de:46:3b:81:13:7e:84:06:32:48:f4:69:56:
                    00:84:9f:9a:28:b3:cf:8a:7d:76:0a:cf:be:e1:fa:
                    86:59:81:9c:6c:7f:10:08:f5:77:35:4c:a5:31:ae:
                    73:c5:50:7e:03:a6:25:1d:d7:14:71:68:db:73:63:
                    07:01:63:d9:d2:59:cd:2c:a5:56:ed:1a:e7:ce:c1:
                    7d:77:a8:a9:98:76:da:ee:6c:4f:f2:2d:d1:7f:6e:
                    19:40:c9:6d:b5:4f:39:a3:51:ea:2c:31:31:16:84:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:45:DF:20:38:46:76:0B:F6:E9:2F:25:4F:D9:C5:28:B7:D2:24:69
            X509v3 Authority Key Identifier:
                keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:18:72:8a:31:13:09:a7:a8:1b:a1:3f:2f:ce:93:cc:35:
         97:65:dc:65:37:ca:ea:e1:96:6a:c5:ad:c7:95:0c:1d:42:39:
         d9:b3:62:5c:ab:1f:46:08:8c:d6:e1:74:b4:79:a0:3e:bf:19:
         eb:49:af:cc:a0:5a:be:e6:9b:eb:70:45:09:c0:14:58:3d:0f:
         21:ec:84:10:8d:aa:1b:84:2b:b4:91:0c:5e:ab:4c:78:d9:af:
         2b:8b:62:74:f0:49:d4:3c:3e:74:4d:3c:d9:a9:cb:2e:4e:7d:
         f7:41:d3:6c:67:b6:26:5b:24:7a:63:fa:d2:2f:d4:d4:37:86:
         d9:76:7d:17:fe:10:cd:94:80:17:61:25:1e:89:a7:47:af:00:
         db:39:15:0b:4c:09:91:24:ce:a5:2a:38:78:87:12:41:be:d7:
         12:e1:6c:94:e2:67:1e:f4:22:18:65:ab:99:cc:d9:f4:16:9b:
         c2:ea:2b:74:0c:7d:6a:ab:0b:8e:a7:e1:32:b8:a2:d5:58:36:
         07:20:b4:f1:57:62:08:32:fb:ff:ff:94:87:35:26:06:27:94:
         a4:58:86:42:56:39:77:aa:0f:10:2e:ed:a2:ec:7b:a3:09:ef:
         d8:77:20:4a:df:50:30:23:7a:b7:5b:60:43:d2:db:74:a0:31:
         76:bb:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:38 2025 by rpki-client