Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File:                     KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier:          jok3EGf+l8vANXKgqEw8XK5RKs/oCSQgYCSbF6ICEhY=
Subject key identifier:   7D:DE:DB:CF:3C:E7:EF:07:3F:83:51:CD:77:CA:3E:33:93:08:9D:07
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer:       /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial:       0198D5F1C345051FB91CFEB2DE9A14B5AB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 08:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:47 +0000
Files and hashes:         1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
                          2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: dZ75rrnU8+S7GJgrafIcdf1cJqWUeLwjWjkLbRU9g18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:c3:45:05:1f:b9:1c:fe:b2:de:9a:14:b5:ab:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
        Validity
            Not Before: Aug 23 08:00:47 2025 GMT
            Not After : Aug 24 08:00:47 2025 GMT
        Subject: CN=7ddedbcf3ce7ef073f8351cd77ca3e3393089d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:f1:50:a8:2f:0e:08:a2:34:38:c1:f1:9b:
                    40:d4:db:02:1b:5b:b6:c8:0e:29:7e:2e:9e:e9:17:
                    45:de:0d:08:36:14:f2:2a:89:ca:9e:e3:52:4b:54:
                    ac:33:d2:a4:84:20:99:da:96:e7:e2:04:b3:57:9f:
                    6e:e3:f4:18:72:ab:7d:f1:f1:a9:e6:a2:c4:8f:77:
                    19:d2:a4:af:4b:6e:5e:a2:05:ee:82:35:80:4c:99:
                    56:38:3a:5c:c8:bb:84:b6:91:f3:cc:73:bc:4c:94:
                    aa:de:48:86:08:4c:c9:ed:36:ac:b1:6e:6f:2f:a9:
                    4a:2f:76:40:4e:2a:e5:5e:d0:55:6e:55:8d:44:e1:
                    56:99:4c:cb:6c:9a:7c:bb:ae:b8:0e:e3:30:d7:3e:
                    17:94:7e:cd:ff:e2:a1:85:31:10:47:ac:7a:55:0d:
                    be:48:df:ed:b3:1a:22:ce:ac:a6:b0:de:1e:aa:14:
                    be:a8:ff:56:32:b1:cc:54:c3:61:e0:2a:39:7b:7a:
                    94:56:1e:83:f9:91:09:bb:b7:fe:1c:bf:ae:50:03:
                    3f:9a:7d:95:fc:2c:75:f0:78:0e:f9:1f:89:d5:3a:
                    8d:e3:7f:ad:2b:fd:59:3c:1d:b0:7f:50:6d:e7:6f:
                    c3:e8:0d:7d:fa:e4:2e:c6:6d:b0:22:de:59:d2:4d:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:DB:CF:3C:E7:EF:07:3F:83:51:CD:77:CA:3E:33:93:08:9D:07
            X509v3 Authority Key Identifier:
                keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:e5:70:48:e7:95:a1:8d:16:bb:fd:76:17:9c:23:04:11:
         ad:a6:00:70:23:0e:72:96:9b:f7:ae:51:0f:2b:f7:91:bf:df:
         cd:f9:4c:4c:fa:dc:dd:89:a1:92:2d:20:f2:07:64:08:7c:f5:
         c0:c9:53:51:04:98:6d:96:f4:e4:e5:e0:67:2a:3d:35:ef:af:
         89:52:c9:b0:99:9f:9b:de:2f:07:a3:d6:a1:9c:bc:fc:f7:fd:
         45:fd:ed:47:ef:b5:c9:b3:39:31:c9:f0:28:fa:4c:4d:48:d2:
         77:31:3a:c6:62:85:9d:c7:0e:22:65:1f:e6:3f:df:dc:d8:86:
         e2:0f:8f:cc:6a:65:9a:06:d5:25:07:1b:7a:5b:01:87:e0:c2:
         7e:06:1e:89:53:1e:ce:f7:da:d8:a2:f6:9b:b1:4e:8b:37:ad:
         0a:69:27:b1:2f:35:d4:7b:ea:91:ed:e2:80:23:10:e6:d3:77:
         b4:fd:55:6d:87:42:50:b1:11:41:c2:80:60:50:3a:fa:71:71:
         c8:46:b5:9f:55:a6:36:a0:29:c3:ee:90:21:40:34:46:a0:61:
         a8:0a:66:1d:29:64:57:5a:1e:f9:af:f1:8a:d5:bf:8d:55:bb:
         bc:1f:28:a8:dd:90:20:d0:1a:51:80:74:0f:dd:6d:06:a2:d4:
         6a:08:c9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:36 2025 by rpki-client