Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          02vUrMNXm5m4OEk5YTd9JBMnayJWjLpvgx38S4KEHEU=
Subject key identifier:   0C:ED:63:5A:81:D3:68:8B:F9:1A:9E:E5:74:72:90:25:97:6F:74:F0
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       0198D5161BA9890940AD5F41E8EF43950BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          165B
Signing time:             Sat 23 Aug 2025 04:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:52 +0000
Files and hashes:         1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=)
                          2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=)
                          3: 2agkXyHYLavy52GOnasZCi4iRJU.roa (hash: /8hJlOhKQEZNQ7GxeihGGgIOb6cTUP3xxsaJyU7K0Dw=)
                          4: 4F0KJtFXRU3fkugT-OafG-85Iaw.roa (hash: Cm6BlMCjwcC260JqpRt6qpSEAwf360RpgzlbjNm7EnI=)
                          5: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=)
                          6: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=)
                          7: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=)
                          8: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=)
                          9: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=)
                          10: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=)
                          11: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=)
                          12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=)
                          13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: Px6Fzkwarq6qrUCYDutEvlB0TVNGHHAvCWUqQxHAaAY=)
                          14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=)
                          15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=)
                          16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=)
                          17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=)
                          18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=)
                          19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=)
                          20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1b:a9:89:09:40:ad:5f:41:e8:ef:43:95:0b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Aug 23 04:00:52 2025 GMT
            Not After : Aug 24 04:00:52 2025 GMT
        Subject: CN=0ced635a81d3688bf91a9ee574729025976f74f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:98:28:fd:60:ae:13:73:5a:03:f4:11:63:
                    2e:80:2f:90:e3:c6:86:f0:bd:13:ae:5c:0c:ed:ec:
                    7c:7e:d8:0b:aa:49:a5:8e:20:f2:28:5f:b0:34:b2:
                    1b:24:66:bd:11:8c:d1:35:90:b9:6e:9e:a8:10:5c:
                    59:26:7f:e6:a5:a6:92:bc:f7:54:b9:50:4a:79:b8:
                    1b:ab:88:44:a9:26:3c:fe:fd:47:a0:25:dd:d8:40:
                    57:4a:10:50:ef:87:43:f1:23:73:d7:3c:08:21:b2:
                    f0:e5:0a:4c:5f:f6:a8:0d:00:67:4b:3a:48:1f:87:
                    43:71:a0:11:71:b2:2e:63:d4:0b:ab:e9:42:11:4d:
                    aa:9f:9d:9a:a3:37:36:57:79:19:4b:d3:59:c3:40:
                    34:1e:60:5c:0f:fc:75:99:fd:88:cf:ed:f9:c3:dc:
                    c6:42:34:1c:7a:4a:5c:9e:6d:ea:9d:ac:c3:70:d1:
                    a3:c8:7f:e9:61:fe:65:ef:5d:1e:68:3e:68:3a:b4:
                    30:0a:6b:63:bc:fb:ae:b5:c3:43:fe:7f:a3:e2:ea:
                    ae:43:c2:3d:8e:cb:09:f1:c6:9d:9a:22:5e:38:1a:
                    88:2d:31:25:29:e4:aa:1b:94:69:61:c9:02:d1:11:
                    ef:6d:40:43:19:b6:07:c7:2a:71:4f:e5:99:c6:4a:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:ED:63:5A:81:D3:68:8B:F9:1A:9E:E5:74:72:90:25:97:6F:74:F0
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:88:3e:00:2e:45:76:7a:28:e0:b0:28:c8:bb:0b:41:04:ec:
         10:49:f4:d8:48:c7:f2:f2:b9:83:a8:3e:fd:10:ae:30:57:8d:
         5d:1b:93:4b:4b:12:50:cf:54:d2:70:b4:96:a5:83:30:ea:3d:
         8f:38:bb:19:8c:d3:91:3c:a8:77:16:30:36:61:34:21:cd:a6:
         1a:e2:52:39:a3:13:47:a1:de:2e:60:9c:a9:79:68:42:e6:5a:
         5d:2e:6a:05:61:e0:c0:aa:f3:1e:b8:59:7f:0c:1d:6e:95:e6:
         95:e7:75:03:e7:a1:a5:30:f8:52:0b:0c:6a:84:6a:43:9c:8c:
         f1:70:8d:13:fa:0c:44:8b:d4:1a:fe:7f:17:f8:ca:2c:99:34:
         1a:e1:bc:3a:d7:79:99:f3:4b:c0:c1:c6:15:d3:11:0a:bf:ac:
         9d:bb:ee:85:db:b1:0f:92:a1:30:73:7d:65:0c:0a:03:e4:db:
         c5:00:6b:d2:bb:fb:65:e5:f6:fe:bd:95:f0:e5:4f:1c:b7:91:
         1d:f7:3f:4c:0a:10:54:bf:f4:45:06:30:2f:fd:6d:19:b5:63:
         cb:4b:ec:84:47:0e:65:12:e7:d1:c8:1c:f8:e7:74:29:3d:91:
         c6:4d:62:6d:00:9c:8f:6c:5f:1c:5e:e3:68:a5:17:f7:ab:c5:
         3f:40:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:39 2025 by rpki-client