Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          0VIPcuwubyNP7y7qFIuZaxiEJCZ35pofSEmFj7SVy74=
Subject key identifier:   D9:7F:68:0D:00:1B:7D:7E:BE:7B:03:04:A8:C8:D0:A6:B6:1E:AB:91
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       0199FD6B5CE054DBB5EBCE40F4A895CFCF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          066B
Signing time:             Sun 19 Oct 2025 17:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:35 +0000
Files and hashes:         1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
                          2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: TZkEstP2m7giKwBFNFoJzLvzEIH8xFemVM1WRjlRq6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:5c:e0:54:db:b5:eb:ce:40:f4:a8:95:cf:cf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Oct 19 17:01:35 2025 GMT
            Not After : Oct 20 17:01:35 2025 GMT
        Subject: CN=d97f680d001b7d7ebe7b0304a8c8d0a6b61eab91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:26:21:c6:8f:46:74:7c:14:19:46:ae:fd:
                    4e:6c:dd:71:8e:2e:5e:c7:62:0a:12:cc:d6:a2:f7:
                    cb:2f:3b:a0:79:0a:47:c8:52:5a:ca:b8:de:a2:c3:
                    7d:35:82:2c:8d:16:88:25:34:1c:16:00:62:db:f5:
                    ee:aa:6c:af:ce:e8:29:e4:93:ae:78:75:54:ee:28:
                    b9:d9:9c:a3:6e:f1:41:6b:29:72:b5:22:4c:3c:30:
                    83:48:61:db:91:c1:e3:b2:b5:46:3c:82:ed:20:b5:
                    64:46:fb:47:26:f6:8e:cd:01:4c:4d:e5:c9:bc:a1:
                    4d:44:9f:08:b7:e9:94:26:5f:a5:31:20:92:c8:4b:
                    35:b9:8a:4d:93:a7:a8:ba:7e:ed:fc:11:30:e4:b8:
                    04:7d:16:8a:31:1a:11:a8:39:5c:2e:74:12:f1:d8:
                    63:e9:de:db:a1:c3:c9:2b:b1:62:49:57:5c:d6:9c:
                    c7:58:08:33:56:1d:e4:96:f2:05:24:14:79:c6:5e:
                    16:e7:35:05:97:f1:5a:a6:db:d9:99:f1:c0:4a:33:
                    e5:68:82:bf:29:25:48:a5:d1:06:e6:59:84:30:99:
                    1a:7e:0a:0a:61:33:bf:e4:d0:e1:fa:67:9d:f2:0c:
                    ed:7b:57:af:a8:8a:2f:aa:82:d9:08:ee:4b:33:7c:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7F:68:0D:00:1B:7D:7E:BE:7B:03:04:A8:C8:D0:A6:B6:1E:AB:91
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:c1:5e:96:d0:e1:ec:56:24:0c:ab:6f:0b:99:c3:04:f0:
         fd:1c:ff:85:ec:fc:e0:93:8e:fc:26:01:54:03:b9:6d:38:25:
         98:49:f9:42:2a:bb:5b:83:59:c7:ed:ab:e9:c3:ae:5c:bb:6b:
         c0:08:e9:1d:cf:88:ca:5c:02:53:80:3c:60:e8:39:f0:0c:7b:
         19:6c:fe:73:b0:fc:d2:90:d2:9e:98:95:b7:fa:8e:c4:09:be:
         d6:9d:ab:71:ca:fd:06:ac:f9:70:4d:ac:1a:e6:f7:ef:b0:9c:
         17:dc:00:10:46:08:60:c5:c4:1c:16:0c:4c:33:a8:00:89:e0:
         0a:cd:9f:f9:1b:10:d9:71:d6:19:0b:9f:1b:f7:19:54:6b:81:
         38:25:9e:38:53:5e:89:db:18:fc:84:ef:09:bf:ff:d2:d0:6e:
         88:25:bd:be:64:14:d5:ce:99:d8:5f:a4:a2:93:77:cb:2e:4d:
         48:75:62:99:61:c9:96:3b:a6:6c:44:10:35:8b:3b:d3:1e:ae:
         3f:12:33:95:d4:18:02:3e:c3:dd:79:5e:9f:57:2d:04:cc:2d:
         ea:ec:e9:7d:5d:84:ae:5e:ac:0d:62:7e:06:e5:23:4e:64:da:
         19:fc:24:79:18:ca:9c:34:60:a5:fb:d1:f6:c1:73:66:31:4b:
         93:a8:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:09 2025 by rpki-client