Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File:                     K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier:          SjNOfvE26/QVutZqxvxGlKvUn/znRI2hg5KSSyz5r0o=
Subject key identifier:   A5:D3:E0:39:3B:72:CE:DA:CE:56:ED:6A:C6:36:35:92:25:62:84:5B
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer:       /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial:       0198D5F16FF60B424ABF6C40101DF6CB712D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number:          014F
Signing time:             Sat 23 Aug 2025 08:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:26 +0000
Files and hashes:         1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: J940o7rf82pPrLLm3M4L1nSgoN7moTuUnx6BVb4fjhY=)
                          2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:6f:f6:0b:42:4a:bf:6c:40:10:1d:f6:cb:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
        Validity
            Not Before: Aug 23 08:00:26 2025 GMT
            Not After : Aug 24 08:00:26 2025 GMT
        Subject: CN=a5d3e0393b72cedace56ed6ac63635922562845b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1a:44:08:86:80:79:95:2f:1d:88:91:be:4c:
                    24:56:78:2c:d2:cb:e2:cb:8f:64:df:da:6c:6c:cf:
                    a3:69:2c:6a:cc:f5:a1:68:ed:ab:54:2f:51:42:6d:
                    b6:97:9f:51:2e:4f:06:33:6f:be:0e:b3:b7:6b:66:
                    f7:e9:77:1b:50:fa:3c:1e:0e:90:80:f5:ee:9c:60:
                    e3:c6:ea:57:70:19:78:4b:6c:83:83:aa:d0:fa:d5:
                    54:24:ce:35:82:00:a3:a9:33:b2:e5:0e:7a:5e:3f:
                    54:66:42:eb:3e:4b:2c:41:3c:97:0f:1e:3f:ff:60:
                    fa:4c:ad:35:04:a3:5a:4f:96:4a:86:63:aa:03:4a:
                    a5:44:70:0a:89:1c:d9:7c:10:ac:05:d2:e5:73:8d:
                    4a:67:68:1f:b5:5e:96:c6:0b:d9:3c:90:c0:e2:50:
                    78:23:01:ef:5d:a6:2f:fa:9c:09:74:2b:ad:44:69:
                    21:be:b4:c7:9b:d6:0d:c0:19:e3:97:df:cc:1b:f9:
                    74:57:f3:aa:c8:55:de:1d:28:aa:4f:4f:12:a7:d5:
                    51:f0:5f:5e:c5:1e:a2:f9:8f:3e:4b:98:64:c2:cf:
                    26:8b:02:f6:55:e1:96:1e:47:65:5b:3a:a2:92:1c:
                    2b:f3:09:48:67:8f:18:e2:ce:61:0a:62:ca:3a:58:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D3:E0:39:3B:72:CE:DA:CE:56:ED:6A:C6:36:35:92:25:62:84:5B
            X509v3 Authority Key Identifier:
                keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:64:6f:36:48:35:03:b8:91:08:81:b5:0b:85:f4:36:27:d0:
         5b:f4:b6:06:f0:35:fb:4b:e3:1c:cd:15:8a:f0:13:74:ca:de:
         da:d4:77:1c:75:fa:6f:e4:83:78:0c:58:5d:47:f1:af:28:73:
         f4:9b:f9:d5:2d:98:61:01:42:81:fb:62:b3:fd:6a:c8:8e:bd:
         61:1a:17:ad:11:8f:f9:2a:41:50:62:68:35:38:3a:05:65:22:
         49:52:03:85:c4:19:39:cc:88:90:3d:2d:62:e3:b5:16:46:78:
         3a:68:f7:3d:70:98:43:44:1f:4b:52:25:91:f2:16:0b:55:a0:
         4d:21:d2:ef:ef:ed:d6:e0:ee:82:98:ba:4b:18:48:cd:dd:80:
         c6:4b:d8:14:f2:8d:ca:e8:35:5e:78:d9:61:6d:0c:4a:1b:e2:
         b7:26:5b:a2:7b:be:16:e1:c1:d2:5e:48:6a:6f:9e:09:6b:1c:
         ff:38:75:48:35:33:7f:f1:dc:be:fd:5e:ba:58:40:f2:bd:d3:
         af:4f:52:b1:4a:cf:f3:98:3f:db:57:ef:5f:aa:24:a4:ec:0f:
         81:cc:7d:5e:d7:73:ca:1c:89:7d:6c:2b:38:78:11:e9:8b:45:
         6c:1b:fc:d8:24:bf:19:0e:dc:21:d6:04:e8:8b:e5:33:5a:c3:
         b3:80:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:51 2025 by rpki-client