Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File:                     kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier:          PSVf/+x5TG/eSnP2cIaTFOTJgguizVVv1EtJcROGMOo=
Subject key identifier:   9C:EE:04:EE:D5:E0:3B:82:9A:02:DF:64:B8:7C:11:D8:65:B7:6A:2A
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer:       /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial:       0198481B4E35DB0030F6615F1CBA90A64625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number:          0F10
Signing time:             Sat 26 Jul 2025 19:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:05 +0000
Files and hashes:         1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=)
                          2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
                          3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
                          4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: 230EglpgyJONATmJAJ/0rkURMFXkJcLGYczAsmDEic4=)
                          5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:4e:35:db:00:30:f6:61:5f:1c:ba:90:a6:46:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
        Validity
            Not Before: Jul 26 19:00:05 2025 GMT
            Not After : Jul 27 19:00:05 2025 GMT
        Subject: CN=9cee04eed5e03b829a02df64b87c11d865b76a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:66:d9:8f:ce:b8:fb:14:0e:da:e2:10:f1:
                    2c:3a:c4:9c:8e:b2:fa:16:55:da:bf:97:c7:0d:83:
                    89:9f:02:e0:47:c8:e2:df:f4:44:60:52:20:df:9e:
                    6b:85:68:56:2e:9d:a1:5f:59:32:6b:b6:ec:12:c1:
                    62:f4:18:6e:27:53:1b:c2:ff:4b:51:42:46:f2:e1:
                    17:d6:e6:b0:f6:31:7c:a6:96:22:50:13:80:2c:da:
                    a1:9f:e5:26:a0:16:a0:32:3e:7c:49:8c:5b:8d:16:
                    31:30:3d:72:77:02:80:da:63:2a:e0:cf:c5:d0:39:
                    d6:18:9a:80:05:8f:2b:0c:de:63:a4:a1:97:41:ad:
                    e5:3d:6c:ca:1d:36:76:93:f9:fa:df:79:fe:45:42:
                    eb:2e:95:02:6d:a5:8c:64:c2:d2:98:29:29:92:ab:
                    ca:b8:ce:8f:52:00:36:92:2c:b5:e4:61:50:e9:19:
                    0f:65:a3:97:c2:b1:69:e9:0e:09:ae:a1:de:f9:e8:
                    21:aa:84:d8:62:bf:4d:bd:e8:dc:be:32:17:b8:e9:
                    15:69:c7:5d:fc:2a:92:5f:f9:da:22:b6:5d:85:98:
                    98:bd:42:0e:0d:8d:45:da:7b:ee:0f:e8:1f:23:27:
                    9b:89:ef:7e:35:61:23:46:a2:29:f1:a0:4f:49:8a:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EE:04:EE:D5:E0:3B:82:9A:02:DF:64:B8:7C:11:D8:65:B7:6A:2A
            X509v3 Authority Key Identifier:
                keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:b0:46:ff:dd:5b:5e:1a:4e:ca:c9:1b:d1:a4:84:24:c3:
         49:c1:b3:ef:28:0f:b6:1d:a5:9d:bd:77:75:43:ae:a1:16:ef:
         30:87:07:dc:0c:15:6b:56:26:23:14:d2:4f:ca:c6:88:f2:9d:
         52:d9:d4:32:63:13:1c:f0:81:ec:71:da:92:c2:f7:3b:1c:58:
         e7:27:ac:6c:4f:27:da:19:be:3c:3a:2c:49:99:35:54:0b:22:
         bb:51:85:71:e1:7a:63:a9:62:52:a3:9d:b5:4b:c5:63:f8:0a:
         29:19:28:55:5a:0f:85:5d:cb:f1:3d:4f:a6:56:9c:af:b4:ee:
         00:30:52:29:f5:22:56:6d:10:c2:7a:5c:e9:bc:f6:78:23:59:
         63:ea:74:ad:b4:15:62:cf:1a:17:05:fb:f7:ef:79:c8:b2:b4:
         de:28:d9:6e:c1:ab:db:99:6f:4e:fb:be:aa:8c:65:87:78:88:
         29:f3:7d:53:35:7a:8a:ea:94:21:52:4d:7b:12:93:a4:8d:44:
         71:73:5e:b0:53:da:6f:54:60:de:3d:e4:31:fd:f9:d7:54:d6:
         33:39:f0:ea:86:70:a8:76:64:0c:39:76:66:84:a8:cd:0c:b5:
         0d:95:40:bb:68:94:19:cc:d9:48:fb:8a:46:8d:33:d6:c9:7d:
         94:6b:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:48 2025 by rpki-client