Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
File:                     K4GVFfOZ60LIAx876kqYyOKJ4e0.mft (raw, json)
Hash identifier:          eec+B+8eEhulUPURrSVg3WPCEybLqUIgM1KAvzKavVo=
Subject key identifier:   29:3D:ED:AD:E9:C6:76:0F:12:EB:BA:51:7D:B4:F9:03:D2:4B:E7:C5
Authority key identifier: 2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED
Certificate issuer:       /CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
Certificate serial:       0198D58379BFD496F9589AF908640C2354E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
Manifest number:          7E
Signing time:             Sat 23 Aug 2025 06:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:19 +0000
Files and hashes:         1: K4GVFfOZ60LIAx876kqYyOKJ4e0.crl (hash: ZomufR6X0p3BtpD0xv4LFs6MLpVI22KE5jcvAa0kSVE=)
                          2: MRY6fM9QiSsubyguz4kspQmishA.roa (hash: /78lcK4sMBWDJAqkZAAF4XGGhpfWKl2tLUozc3wFeS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:79:bf:d4:96:f9:58:9a:f9:08:64:0c:23:54:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
        Validity
            Not Before: Aug 23 06:00:19 2025 GMT
            Not After : Aug 24 06:00:19 2025 GMT
        Subject: CN=293dedade9c6760f12ebba517db4f903d24be7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:a6:ce:a6:2f:8f:f4:98:5f:9f:01:e3:02:
                    07:5a:c2:81:c8:69:12:8f:d2:10:ee:72:cf:a4:22:
                    39:1a:c5:78:88:c0:14:d8:62:60:92:4e:bc:f7:40:
                    06:34:8c:da:07:eb:f6:44:9f:d3:5f:0a:8d:d4:8e:
                    65:dd:d7:a2:c3:9d:cc:bd:83:14:00:28:f3:54:e0:
                    6b:c8:34:7e:b5:e6:59:e4:d2:fe:3f:21:6a:f2:94:
                    e3:19:92:ea:ce:69:1c:5c:00:e7:88:c8:fb:6f:27:
                    f3:1e:6a:a9:ca:ff:20:9e:19:4a:a3:47:1d:18:78:
                    78:50:06:31:23:f0:8c:20:ab:03:2e:7d:2c:be:81:
                    3a:de:66:75:e3:f3:12:92:f4:1f:25:d7:0a:76:2f:
                    bc:72:40:13:b1:d6:8c:a3:2b:0c:11:5a:f8:cb:18:
                    e2:db:77:ad:eb:42:f4:e3:71:2c:b1:d5:cd:28:74:
                    bb:26:6e:7a:36:72:a8:d6:ee:2d:98:03:15:33:2b:
                    57:71:08:bf:52:83:d0:42:f8:08:2c:ce:d9:79:35:
                    c5:09:ea:56:03:14:88:88:f6:55:02:b8:39:c3:3b:
                    0c:42:11:f8:2b:4b:a6:b9:ff:15:24:8b:51:6a:60:
                    74:bb:03:40:e8:c6:fb:88:fb:e7:77:25:56:4f:9f:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3D:ED:AD:E9:C6:76:0F:12:EB:BA:51:7D:B4:F9:03:D2:4B:E7:C5
            X509v3 Authority Key Identifier:
                keyid:2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:44:03:fa:20:0e:c0:bf:1b:d7:d7:a5:3d:42:f2:3d:1a:e3:
         c5:b9:99:34:40:73:f2:2b:01:cc:3c:32:dd:34:0c:9a:1a:64:
         80:4d:53:7b:18:67:5d:d3:df:ac:5f:11:81:97:74:7b:bb:84:
         39:bc:97:f0:83:96:89:d4:8d:92:d4:11:9a:47:e6:34:13:92:
         f3:92:c8:ba:14:09:db:98:81:4a:87:ea:36:c7:6c:73:23:19:
         70:66:16:80:9d:6e:de:3b:09:71:5c:e4:a1:99:bd:cc:78:e7:
         91:9b:51:3f:33:5b:71:a2:81:bb:a0:f9:80:b1:97:c1:1b:9a:
         9a:d9:2d:04:b3:66:3a:ee:7c:ef:c7:f0:9e:eb:2f:53:29:9f:
         58:98:4a:e8:e2:40:a5:8e:00:7f:e0:3d:9c:dc:17:1e:3f:d1:
         3e:33:d0:d0:77:a9:45:11:fa:0b:b8:8f:a7:32:5f:a5:99:d4:
         58:75:d8:b9:a8:f3:33:32:dd:b3:ab:fe:ac:7c:c2:c9:f9:5d:
         a3:b5:7c:bb:7a:f0:34:d7:fb:32:3a:68:81:d7:ab:2b:5e:27:
         72:f9:91:99:b2:27:4f:5b:fa:aa:36:7c:e8:47:63:12:ac:1c:
         b1:15:2d:4e:53:5d:a8:3f:41:31:97:63:db:3a:6e:0d:30:d2:
         3a:08:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:28 2025 by rpki-client