Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File:                     KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier:          1eetoPzs8LcE2P9OVNiCehcZLHFgSl/w35y2hOy4uho=
Subject key identifier:   55:CC:EB:FB:71:6A:52:99:AD:D6:F9:99:52:CC:48:D0:18:54:CB:80
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer:       /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial:       01984852EBAA43535307C81B946AB9DEA1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 20:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:50 +0000
Files and hashes:         1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=)
                          2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: PKNGUC1yPPsGvaY2ie1+wrEuZ5sXX+lKDkj5n8Vn2Kk=)
                          3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=)
                          4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:eb:aa:43:53:53:07:c8:1b:94:6a:b9:de:a1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
        Validity
            Not Before: Jul 26 20:00:50 2025 GMT
            Not After : Jul 27 20:00:50 2025 GMT
        Subject: CN=55ccebfb716a5299add6f99952cc48d01854cb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:ab:8b:76:94:ca:10:fb:6b:76:72:e5:40:
                    9a:01:57:b9:16:07:cc:6b:21:10:ea:90:06:40:d8:
                    97:55:66:ba:22:ea:d9:65:c4:3b:c3:e4:c7:dc:da:
                    e4:a4:cd:f6:ab:8c:0c:02:e5:71:6a:36:28:02:48:
                    9f:85:47:d0:d8:68:18:e7:8b:c3:f1:25:fa:99:c0:
                    f3:ac:f9:9e:5d:28:4a:41:a2:30:75:b2:ed:c2:78:
                    fc:58:b6:70:91:b3:b0:ff:a6:7f:5b:1c:f4:b3:36:
                    99:e5:73:82:da:99:96:58:64:fd:ca:f8:a0:3b:73:
                    33:51:e2:ed:36:3a:6c:32:fc:4b:37:56:78:97:5c:
                    9d:06:0f:df:33:c6:5e:51:7a:55:53:30:61:33:1c:
                    d6:da:09:2b:69:e2:b9:fd:03:a8:6a:98:a5:fc:88:
                    be:2c:2b:70:68:32:29:8e:b7:6f:56:d7:cc:5c:90:
                    e0:29:04:1f:dd:0b:0b:d8:1c:f7:5f:f1:c8:01:4d:
                    63:34:63:08:cc:44:7e:22:cd:10:72:ee:b8:66:c0:
                    9e:80:36:04:9e:8c:86:7f:17:45:ea:b2:7d:8d:30:
                    8f:19:66:df:3f:71:e3:3d:08:96:e1:1f:c6:c1:0e:
                    a1:a6:f0:ed:74:4a:0b:36:9e:e4:04:2d:90:55:31:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CC:EB:FB:71:6A:52:99:AD:D6:F9:99:52:CC:48:D0:18:54:CB:80
            X509v3 Authority Key Identifier:
                keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:e8:88:45:c3:8c:2d:d9:94:ed:c3:5c:cd:f5:2a:0c:87:
         d3:cf:49:18:72:6f:66:72:2b:14:37:28:43:40:2b:d1:47:af:
         2c:79:20:5a:60:93:b4:58:53:9a:06:55:fa:83:90:8e:9b:3a:
         ae:cf:42:95:54:ad:e8:58:22:a5:41:c3:7f:b7:5f:eb:64:66:
         94:40:d7:7a:5b:9d:83:e0:9a:19:aa:2a:5f:8e:40:3a:9a:e7:
         25:dd:27:af:10:1a:6e:d8:41:a4:39:2c:c2:ed:50:da:2a:8d:
         9b:6f:c6:7a:17:f0:73:0f:64:b6:2b:b2:58:82:a1:aa:a1:e2:
         5c:91:2b:96:a0:48:b1:14:e0:9a:2d:b4:82:15:17:33:d0:ad:
         7f:36:3d:40:60:68:92:ad:7c:ca:7b:b7:cf:ac:d1:c6:83:ce:
         ab:61:55:35:55:89:58:98:1e:22:eb:7c:ce:e4:8e:60:b4:d2:
         1a:5e:86:48:62:ac:76:2f:74:b1:29:ee:89:b3:10:f5:4b:24:
         d2:f8:8d:0d:57:83:b0:29:e2:e3:8d:7a:07:a2:51:be:d5:59:
         7e:08:c9:89:cb:0f:94:36:99:e1:86:6a:71:b2:1b:12:99:0e:
         e6:7f:04:49:89:6c:80:16:7a:05:83:eb:80:7e:b8:9c:7c:78:
         7c:7a:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:05 2025 by rpki-client