Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File:                     K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier:          RKO1AdYTaHgFMxaKEqxwIt5X8YZhbg78oMMDM06U8IE=
Subject key identifier:   DC:CB:BA:7B:6E:6B:85:88:AB:1D:DB:42:3C:25:48:E7:98:40:16:E6
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer:       /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial:       019847AD7DE379C3DEA31E0953954AE64B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number:          0366
Signing time:             Sat 26 Jul 2025 17:00:08 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:08 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:08 +0000
Files and hashes:         1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
                          2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: uXDcrkremeUCMb/mk5WNfALFC66boUrspghjL6tigYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 17:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:7d:e3:79:c3:de:a3:1e:09:53:95:4a:e6:4b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
        Validity
            Not Before: Jul 26 17:00:08 2025 GMT
            Not After : Jul 27 17:00:08 2025 GMT
        Subject: CN=dccbba7b6e6b8588ab1ddb423c2548e7984016e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:80:81:55:a4:c9:ca:6e:10:c0:f4:3b:a9:
                    5a:e0:d6:4f:8b:37:4a:39:49:20:08:2e:59:88:4d:
                    35:d1:71:16:78:2d:06:b1:dd:03:93:e7:38:ee:68:
                    22:27:fb:2c:81:e5:ed:a1:b3:b1:a4:33:b1:63:9f:
                    ca:3b:81:7d:55:3a:3e:58:30:65:30:36:6d:7b:da:
                    7f:a3:fe:02:5d:1d:f5:5b:4d:bc:37:d2:01:de:3d:
                    1e:ce:bd:1e:bb:1b:da:6f:69:83:1b:f6:4c:67:e9:
                    1d:25:df:be:4c:c5:cf:25:a7:47:b4:ec:84:c7:c1:
                    86:99:21:29:ac:4d:95:d4:07:c7:69:d3:63:93:92:
                    e3:c2:bf:02:f9:e8:13:c8:0a:c0:f4:2a:d5:5f:0b:
                    fb:de:e0:b5:ed:45:55:3a:ce:6d:06:40:4d:6b:45:
                    ea:ee:8d:a8:22:7a:a1:0d:e9:93:d2:2d:32:1d:9e:
                    77:54:40:22:2d:c7:ba:53:b2:fc:c9:97:20:9e:43:
                    a6:ce:0d:e5:59:44:81:75:50:09:c6:0b:83:e9:83:
                    69:fc:1b:c8:34:53:f2:f4:b6:69:79:10:ef:0e:5b:
                    1f:0a:52:6d:a6:4b:72:52:02:28:95:a1:19:9f:e3:
                    ea:7f:5d:09:13:e2:22:cb:fd:65:13:1e:fe:ed:3a:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:BA:7B:6E:6B:85:88:AB:1D:DB:42:3C:25:48:E7:98:40:16:E6
            X509v3 Authority Key Identifier:
                keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:dc:ea:fb:36:a9:7e:35:ce:51:88:73:12:07:2b:a5:65:
         3a:84:fa:46:04:07:17:8a:57:d4:56:89:02:50:47:95:39:a0:
         2c:f1:9b:c8:a7:b9:27:6c:07:8e:0e:12:9c:3d:e2:5d:7e:92:
         3e:da:67:5b:72:c1:67:a6:24:95:da:f6:d0:fa:29:86:be:d8:
         c0:51:bd:0d:e6:46:c3:c1:dd:b0:1f:d5:05:bb:7d:d1:35:dd:
         c6:93:21:3d:fc:f8:87:d8:c9:24:a7:b6:f6:02:e0:b5:a8:d1:
         07:89:c0:a0:5f:ea:da:13:ee:94:13:ff:72:1f:eb:46:08:7b:
         41:a4:6e:55:aa:fd:f9:0a:e7:1e:38:70:41:15:d8:e5:e2:bc:
         ad:b6:e7:a4:99:36:f1:d5:e9:64:6e:5e:38:94:01:9e:a2:10:
         ba:9e:d1:e9:59:b7:5f:89:da:b3:c3:0e:56:7c:e5:d6:00:9d:
         aa:22:ce:37:4e:70:97:7e:db:88:a0:67:3d:33:b5:bc:ff:c7:
         14:fd:a9:d7:91:f5:93:7a:cf:71:82:df:67:c0:21:60:ab:38:
         e7:fc:99:ed:f2:31:37:b5:13:a4:f7:61:75:24:08:7c:75:15:
         dc:e6:7b:38:01:ee:29:ab:dc:71:b4:e1:13:d7:c4:e3:6b:c2:
         84:a6:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:00 2025 by rpki-client