Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File:                     KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier:          AMD2ELmUUMAUfhz4v7iZvQBZSxDNe59q5wbtoo9Cu28=
Subject key identifier:   FF:A0:87:5B:7B:B9:9F:EC:47:79:E6:2E:42:76:37:0F:DA:59:20:DC
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       0198274725F4F26A24B0082F75187566B94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number:          078F
Signing time:             Sun 20 Jul 2025 10:00:30 +0000
Manifest this update:     Sun 20 Jul 2025 10:00:30 +0000
Manifest next update:     Mon 21 Jul 2025 10:00:30 +0000
Files and hashes:         1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
                          2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: uIIehJa/gcqdLBTF/zYjF6h51KhnedaxHeJCJVgI03c=)
                          3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
                          4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
                          5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
                          6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
                          7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
                          8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
                          9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:47:25:f4:f2:6a:24:b0:08:2f:75:18:75:66:b9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Jul 20 10:00:30 2025 GMT
            Not After : Jul 21 10:00:30 2025 GMT
        Subject: CN=ffa0875b7bb99fec4779e62e4276370fda5920dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:bb:dd:70:6b:84:47:88:c6:e0:35:06:83:
                    0b:04:4c:f4:08:30:f9:a3:2f:4e:35:ee:bb:fe:bd:
                    16:d0:47:e9:9d:9e:fc:df:47:6d:73:e6:71:45:95:
                    fe:5f:02:ab:56:c8:a2:0c:50:1a:c1:21:b7:4f:09:
                    44:d7:d3:c7:fd:b8:2e:ad:2d:4a:49:a4:08:f8:2e:
                    af:c5:9f:3d:42:eb:7d:f1:43:2b:20:00:ba:71:d1:
                    1b:dc:0b:31:de:a2:fc:46:5b:3b:39:03:2b:0f:34:
                    fd:f2:52:61:b0:11:a7:c0:06:cd:11:05:ea:29:d5:
                    4c:19:13:60:88:05:b7:6e:90:8d:e4:85:01:96:c1:
                    e9:2a:1f:8b:c2:0b:96:fa:31:ea:20:82:b5:69:7d:
                    74:19:b8:9c:34:bd:85:e8:7f:07:3e:d6:1c:70:f6:
                    88:dd:c8:d2:a4:23:8a:42:16:fd:e9:24:e9:a1:42:
                    4a:aa:44:29:07:31:02:20:dc:c6:cc:bd:96:f9:bb:
                    0f:fc:62:2e:22:fa:7b:db:13:cc:e2:25:70:0d:4d:
                    0b:93:12:42:1f:17:4d:c2:04:04:1f:e0:22:54:0b:
                    59:a6:34:af:9f:fe:a0:d8:c2:72:12:a0:41:12:ee:
                    1e:87:1b:a3:6f:42:ad:23:98:16:36:d1:77:b7:51:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A0:87:5B:7B:B9:9F:EC:47:79:E6:2E:42:76:37:0F:DA:59:20:DC
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:cf:62:f2:60:93:4e:59:6c:0a:09:34:09:b3:63:cf:fa:
         f2:fd:35:82:c9:81:ff:52:e8:84:08:1c:1e:d3:69:d3:9c:ca:
         64:c8:33:ee:7d:40:05:c4:24:9d:90:c1:f4:23:90:82:24:1e:
         a8:0c:98:67:f0:f3:9a:1b:1f:0f:63:84:34:5c:83:c1:fe:c6:
         bf:d9:05:1e:c5:10:f1:02:de:52:35:12:c2:c1:13:02:8c:6a:
         02:70:c8:66:d6:94:f8:06:36:06:69:01:e7:97:14:fc:e7:38:
         36:3e:bd:6f:09:ef:44:8e:0d:ba:df:26:6e:4e:9f:5d:ea:f3:
         2a:e3:65:cb:80:2d:37:d0:7d:14:b2:59:8e:54:a1:17:5d:1c:
         81:69:20:6a:da:21:c2:ac:11:b6:6a:fd:3b:7a:f2:fa:cb:89:
         c2:57:e1:d2:7c:d3:e5:30:71:a7:ff:de:c5:44:05:c7:d7:74:
         09:db:db:20:3e:20:61:6f:55:53:22:00:6c:37:8c:3b:3b:3c:
         26:cd:8a:a1:9c:2e:cf:6f:16:4b:26:ab:25:c7:1e:88:c1:41:
         75:c5:e2:6c:67:93:b0:7e:eb:65:1e:4e:5e:43:a2:08:84:fb:
         9b:9f:95:54:52:00:22:ed:02:eb:77:87:cf:30:c0:9c:6a:4b:
         a6:b1:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:30 2025 by rpki-client