Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          o7hdHFP5AJG6uV1G0KZ+nrNDZ/YoReTx55w7zs/93Yw=
Subject key identifier:   25:36:AC:0C:16:B5:51:93:BB:FF:CA:C5:AE:05:DB:23:5C:C0:0F:5F
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       019844E3B089F6C65F60D19A863AF6B0A8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          0536
Signing time:             Sat 26 Jul 2025 04:00:29 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:29 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:29 +0000
Files and hashes:         1: eXKi70pVOkSciah0yxPymcceP7o.roa (hash: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: y9MGNs4FkuVoiF9QxTIhnQmCZS9XdWRXLFQIj5o9DMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e3:b0:89:f6:c6:5f:60:d1:9a:86:3a:f6:b0:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Jul 26 04:00:29 2025 GMT
            Not After : Jul 27 04:00:29 2025 GMT
        Subject: CN=2536ac0c16b55193bbffcac5ae05db235cc00f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:53:51:c1:70:72:7d:4f:ea:c0:f0:f1:ec:
                    a3:0b:7b:48:fc:00:7a:e5:d4:68:e1:22:1b:70:dc:
                    d4:e4:79:19:28:88:e5:85:2e:75:99:9d:67:a7:18:
                    cd:3c:13:d1:7a:87:ba:77:b1:18:d3:6a:26:32:63:
                    7b:1b:9a:20:ca:2e:dd:25:93:21:15:6d:ec:74:0f:
                    2c:4f:78:70:98:ef:80:47:22:8a:b3:d8:89:ea:a2:
                    8c:c6:90:2d:99:b5:92:3b:64:4a:6f:a9:e5:eb:bf:
                    f8:b7:0b:f8:40:8c:cd:25:c9:f3:81:79:61:12:17:
                    a6:9d:76:37:44:fa:1f:bf:d9:8a:a4:2d:bf:9a:20:
                    48:e8:b1:6e:1d:51:de:29:9e:ae:76:48:c0:0c:50:
                    75:3d:ed:f2:a9:16:0e:be:e4:fd:ca:a7:0c:ab:00:
                    00:ac:cf:57:06:4f:76:4e:38:de:e0:b1:32:7a:30:
                    f6:6e:6a:5e:dd:67:6f:29:d9:e1:d7:64:c7:64:7d:
                    6e:c7:ea:ed:21:60:44:3b:17:5e:e5:07:d6:ca:28:
                    45:ca:58:9f:dd:85:38:ea:0b:f7:61:cc:e0:84:56:
                    f0:d7:c4:a6:3f:c4:2b:c2:84:3d:17:d2:28:c7:bd:
                    67:28:3a:07:d2:b0:a8:8b:68:1a:84:a2:42:9a:2f:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:36:AC:0C:16:B5:51:93:BB:FF:CA:C5:AE:05:DB:23:5C:C0:0F:5F
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:42:71:89:48:7c:9c:4d:57:43:3e:56:4a:bb:89:e8:74:
         cc:cf:6e:43:f4:72:4f:78:c4:7b:60:9d:a5:c9:8f:bb:be:e5:
         d8:d4:2d:77:ac:1b:1e:61:54:4d:51:09:b7:46:a2:1e:b1:d2:
         c9:4f:a1:01:66:b8:a2:ad:56:09:3a:ce:41:7b:84:bc:43:64:
         1e:bf:5a:36:99:12:ee:5d:10:d1:dd:cb:d9:75:0a:a5:91:9a:
         c5:55:1c:2b:2e:fb:61:04:6d:d1:2b:d1:a8:86:19:20:4f:d4:
         7c:39:6f:ff:f2:a1:ce:8f:9c:f5:8a:f9:32:4b:b5:13:16:ad:
         fc:ca:f9:40:1b:34:1b:04:8c:c6:2c:7a:c7:3f:65:4f:68:b2:
         3a:52:d7:f5:08:e8:c7:a4:86:7f:99:01:67:66:9c:cb:59:26:
         72:f8:dc:b5:f5:c7:41:75:e8:20:85:7a:a5:64:02:e0:60:d0:
         ad:3d:e8:5d:4c:ea:cf:12:36:dc:47:66:a9:07:61:7b:51:fd:
         c7:d3:34:1e:8c:79:9d:da:be:e9:84:3e:12:6a:4c:3e:52:7d:
         ec:53:27:fd:cc:74:93:3a:20:ed:f8:2e:3f:5c:5b:39:b8:0a:
         7f:94:e4:59:49:3f:5c:00:8c:a0:89:9b:5b:82:1e:9d:05:f4:
         f3:2d:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:45:03 2025 by rpki-client