Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File:                     KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier:          AWRzSm2j5S4uN1AwNOoOTiYDbUHlozzMERGKnwFEeqc=
Subject key identifier:   A0:8A:4A:E6:9F:9E:D2:E3:15:97:52:C7:F6:A6:8A:85:46:A3:95:6A
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer:       /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial:       019848C07FE5CBC1FA64252F148FB5E11569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 22:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:31 +0000
Files and hashes:         1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
                          2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: /yEtdd5jnVyMqnQ8G2jcRuNvTJVBsacBz8sPIeAc64k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:7f:e5:cb:c1:fa:64:25:2f:14:8f:b5:e1:15:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
        Validity
            Not Before: Jul 26 22:00:31 2025 GMT
            Not After : Jul 27 22:00:31 2025 GMT
        Subject: CN=a08a4ae69f9ed2e3159752c7f6a68a8546a3956a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:05:77:d7:af:c2:87:c8:92:8d:b2:f3:23:9a:
                    35:63:18:79:b2:ba:12:1b:e0:ff:c7:0f:3f:98:a6:
                    40:36:f4:d5:43:3a:3b:ee:fa:17:10:05:f6:c6:1c:
                    68:26:0a:54:39:88:82:9b:2b:cb:90:7b:99:30:22:
                    84:bb:81:f5:3f:de:a6:81:e8:c5:54:7c:f5:8c:cf:
                    08:9c:6b:7e:cb:41:1d:3d:bc:b4:21:cf:9d:57:09:
                    57:89:d8:79:25:4d:4f:6a:88:be:33:f3:d4:14:4b:
                    91:f4:65:e8:10:7c:5d:64:5b:8f:fa:fe:9a:3e:3c:
                    19:bb:fb:3c:b7:3f:38:1f:31:1b:0d:13:29:a5:6f:
                    ca:0e:2e:5a:30:26:68:86:50:27:44:0d:7b:8b:99:
                    4b:8b:c3:93:90:f7:74:41:3e:fd:87:0b:78:de:5d:
                    87:ec:6a:1f:ce:73:cc:53:31:10:cd:a3:93:ed:b9:
                    b2:5d:96:17:37:b5:2a:3a:af:b0:ab:ec:2d:11:ac:
                    74:a6:87:ad:16:75:ca:4e:5c:ae:5b:0c:86:52:64:
                    69:83:54:46:ac:0b:d4:f5:d8:c4:a6:8a:25:a2:a1:
                    3d:39:70:55:02:ce:af:e2:13:28:4f:d4:92:31:6c:
                    89:61:f4:8d:23:99:78:68:c6:9e:da:d9:74:8f:7a:
                    6c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8A:4A:E6:9F:9E:D2:E3:15:97:52:C7:F6:A6:8A:85:46:A3:95:6A
            X509v3 Authority Key Identifier:
                keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:55:7f:85:6c:03:0a:25:43:80:21:80:d7:4d:47:03:fc:
         db:d9:4c:e1:d9:62:01:a4:86:9c:16:cc:c4:4f:10:47:05:d8:
         e5:cf:bf:2a:3a:45:0b:8f:c4:83:4e:d0:61:75:0e:14:05:3d:
         7a:3e:6d:88:9c:b4:6c:cc:73:31:b7:6a:76:00:6f:6e:d0:ab:
         b5:07:49:f5:f1:98:5f:22:88:d4:fb:80:29:35:d1:5c:9f:d8:
         7e:94:db:9f:4c:29:2c:c6:fc:59:6c:c0:ea:fd:ce:29:06:75:
         3d:41:a4:1c:56:3d:bd:86:26:2f:37:dc:92:0c:e5:ca:b5:e6:
         4d:b1:2b:45:e2:f1:67:8f:5d:bb:fc:9e:04:fb:ac:a1:7a:d6:
         2a:b6:da:c3:f1:4d:aa:7b:f4:98:80:f8:12:18:de:b8:ed:36:
         2d:bf:d5:01:1a:08:ea:2a:d1:75:30:35:89:6d:9a:df:63:2a:
         27:50:a5:64:5b:32:7f:b2:b4:fe:0d:5c:65:f7:65:fc:99:0f:
         0a:cf:07:b8:ea:37:1f:45:61:dd:65:55:9e:b2:78:d8:8d:77:
         f8:be:4a:32:e4:54:da:90:a5:1e:7e:89:d5:ac:61:61:98:52:
         e3:43:44:cf:a7:3b:40:41:5a:e8:d3:6a:7a:28:e5:3f:f1:e2:
         6c:25:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:19 2025 by rpki-client