Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File:                     0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier:          ZMdeudhxFweIxZ1XnMLll1bMffoM1Q2Qt+RFBm5gnRE=
Subject key identifier:   13:C2:42:75:C9:D8:54:D9:25:25:12:B6:B7:B4:41:16:C3:88:DA:68
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer:       /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial:       0198D515636F2D097485AA6FD0BA66D548C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number:          0265
Signing time:             Sat 23 Aug 2025 04:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:05 +0000
Files and hashes:         1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: jOt+LaYRIKxCnDJ6JGmJGCkegMc+jWzqs1CYJWp8tL4=)
                          2: 2mOIvyxqACEFmIkGDLPkH-bc67w.roa (hash: a5V4lxFeCQH7YtlBbiNtuF1rDDvq1OPE/o43ZTFdAYQ=)
                          3: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
                          4: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
                          5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
                          6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:63:6f:2d:09:74:85:aa:6f:d0:ba:66:d5:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
        Validity
            Not Before: Aug 23 04:00:05 2025 GMT
            Not After : Aug 24 04:00:05 2025 GMT
        Subject: CN=13c24275c9d854d9252512b6b7b44116c388da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:9a:cd:1c:2a:8f:b8:b3:3e:e0:9a:a7:90:
                    7c:d5:08:72:52:7f:a2:d1:5d:19:e8:26:23:8b:e4:
                    44:43:e7:da:47:fe:2c:7e:f3:75:74:52:e4:1f:f9:
                    1c:6a:31:a6:7d:c8:c3:5e:e6:9c:07:a4:73:49:8d:
                    f0:58:15:90:f9:d3:44:58:3d:79:74:ce:c4:77:21:
                    c9:a9:5a:e9:ef:2f:5e:0e:70:7a:a2:1e:df:89:2c:
                    cf:1d:8b:2a:8f:26:de:54:e7:1c:87:e5:3d:9e:4a:
                    83:83:4c:cd:7a:2b:01:3f:07:24:1e:1b:a0:60:20:
                    82:b8:00:69:87:ee:cb:a1:3d:59:c5:94:8e:d4:86:
                    6e:53:5c:7b:ec:e2:53:75:8b:16:9d:ba:ac:c3:70:
                    ee:ca:05:7d:1c:f8:5c:a9:07:4c:19:5f:c0:ae:85:
                    29:09:19:68:69:6e:a6:16:92:34:af:68:ae:2a:80:
                    9b:3b:81:d6:4d:2a:1c:4f:79:cf:a6:12:d6:22:5e:
                    72:9b:f0:13:41:e5:4a:46:85:73:3c:1e:d0:85:71:
                    cd:b4:ea:c5:70:48:84:f2:85:72:1d:16:13:f6:fc:
                    e4:96:0c:cb:3d:f4:7a:20:3b:a8:aa:48:c8:fd:da:
                    73:ef:ea:ec:a9:9d:dc:a9:fd:76:36:73:6b:d4:a1:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:42:75:C9:D8:54:D9:25:25:12:B6:B7:B4:41:16:C3:88:DA:68
            X509v3 Authority Key Identifier:
                keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c1:12:fd:65:01:aa:ad:df:a0:22:80:5e:c7:08:22:28:5f:
         b4:95:18:3c:f9:e0:3d:a0:ee:0b:85:e2:e1:c0:36:eb:29:ce:
         2e:77:07:cd:c2:08:c0:cc:8c:8f:70:ff:1b:1c:51:0c:88:12:
         42:b1:d7:a5:51:fc:3e:27:52:e6:34:ca:5b:46:20:5d:2d:ef:
         29:10:79:17:f3:71:c5:1c:f4:06:7c:2b:9e:fd:aa:5e:05:6a:
         04:34:7b:6e:ea:2e:df:29:b7:b9:be:55:b8:06:b9:d8:20:b7:
         9e:4e:27:f7:f8:bf:00:75:64:82:b7:b1:cf:f6:b2:f5:f1:6a:
         1e:6f:33:1d:fc:64:dd:a1:78:1d:12:0c:4e:72:76:a6:79:61:
         e1:ce:1b:77:03:c9:97:8f:b4:6e:b0:48:42:fa:5a:d3:76:2f:
         53:b5:00:7e:67:0f:70:11:99:f7:7c:e2:2a:30:03:a3:a3:d4:
         00:04:d7:61:02:33:eb:f7:49:5e:c4:10:79:19:0f:9f:eb:e6:
         a5:3c:7c:5f:95:10:6b:04:fa:f5:6f:b3:9c:31:a4:1c:5f:63:
         07:2b:2f:4a:c9:90:45:e3:6d:1a:d9:e8:09:7f:13:35:5c:2d:
         66:da:e8:42:5c:e3:ba:2d:aa:54:ce:71:ab:84:93:78:51:a8:
         6c:fe:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:57 2025 by rpki-client