Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File:                     kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier:          lU2ZDei3np24Sf0xgxhlOOFrcMYwqisjGDYueiOPa98=
Subject key identifier:   FE:C6:B9:0C:F9:19:C0:2B:59:7A:92:E1:FD:64:6D:F2:4E:94:5C:CC
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer:       /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial:       0198D65F204415DDBA8E9AB6262307DDC868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number:          1375
Signing time:             Sat 23 Aug 2025 10:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:14 +0000
Files and hashes:         1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
                          2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: 8nhUP8Y3fY4jsmtS0LQk6xlNtekQHKVR9fGjQUi0Vcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:20:44:15:dd:ba:8e:9a:b6:26:23:07:dd:c8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
        Validity
            Not Before: Aug 23 10:00:14 2025 GMT
            Not After : Aug 24 10:00:14 2025 GMT
        Subject: CN=fec6b90cf919c02b597a92e1fd646df24e945ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:a5:6a:5e:5e:87:c2:32:4a:d0:38:e8:38:
                    0f:55:25:34:ff:68:98:e1:a9:e0:f7:dc:26:09:49:
                    d8:67:03:18:df:7e:04:df:52:dd:71:d2:e4:3c:de:
                    32:ba:d4:54:ea:8d:a0:66:95:48:f9:52:fb:4f:d1:
                    7e:9a:2e:2b:13:26:ff:f3:c6:5d:6d:13:05:1c:87:
                    46:82:4d:5b:c4:16:75:80:e4:c2:77:cd:69:7f:0b:
                    17:c2:b6:d1:c6:b2:42:40:bb:02:e9:45:69:04:a9:
                    c7:39:b9:ef:2b:15:a0:8c:30:ba:16:5c:cb:85:04:
                    83:7b:46:79:95:d6:30:78:8a:41:de:e9:5b:bc:39:
                    62:cc:32:4b:8d:3a:85:5b:62:cb:49:2f:69:a8:df:
                    6d:de:bf:a9:d5:1c:ce:eb:e2:14:af:d9:b7:62:f8:
                    84:5a:fa:0c:0a:b1:e2:2b:e9:28:04:fb:93:de:8d:
                    4c:fe:f5:f0:0d:81:88:2a:5e:51:eb:b8:fe:bc:76:
                    5f:f9:86:d8:15:6e:a1:0d:a5:24:92:ae:76:3a:cd:
                    a0:ae:d6:10:22:43:e5:12:ad:66:32:33:5e:30:34:
                    3c:3b:74:66:5f:70:6a:a4:eb:c0:18:fe:ff:ef:3d:
                    60:d9:30:76:b6:21:17:8c:38:e7:3b:a5:5b:c3:49:
                    be:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C6:B9:0C:F9:19:C0:2B:59:7A:92:E1:FD:64:6D:F2:4E:94:5C:CC
            X509v3 Authority Key Identifier:
                keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:d1:82:9e:5d:26:db:98:cc:54:18:c7:8b:95:90:7f:3a:
         f3:3a:a4:68:68:32:41:dc:85:9f:5e:a5:10:93:bc:17:96:91:
         f7:78:11:f5:d3:b2:4b:b6:78:0a:19:ee:5e:7b:7b:fc:4a:da:
         ac:fc:d8:b3:b9:93:45:a3:fc:38:57:bb:c0:74:e4:81:5b:9d:
         96:ea:06:34:14:9b:cf:46:8c:56:4e:67:08:26:1b:54:0b:fa:
         15:c9:72:88:66:f4:ab:d5:38:29:ae:7d:a1:6b:a5:d5:8c:5b:
         6c:34:5b:08:87:ee:c9:b2:23:3b:ba:bf:26:8b:6f:86:2a:ac:
         a4:8b:54:19:87:b5:27:c3:b3:bb:04:2a:47:24:47:49:ee:f3:
         ee:06:54:51:4f:cd:ce:99:9d:7e:09:c6:db:63:61:fd:5d:99:
         dd:e4:23:a2:0c:73:1f:91:5f:57:3c:fb:11:8b:a2:03:29:8e:
         9b:76:22:bd:e5:1b:cd:af:1c:c2:3a:41:53:42:ae:53:8a:9b:
         9d:82:d4:9a:5c:17:9c:1a:22:4c:93:52:69:a3:13:1b:98:7a:
         43:fa:11:4d:8b:38:26:83:80:95:54:98:7e:77:da:bb:84:59:
         4d:fd:b3:21:76:59:9d:44:7f:e4:9f:e2:51:56:eb:74:89:09:
         66:eb:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:03 2025 by rpki-client