Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File:                     kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier:          L2s6KYQr58rLLrM9XW/o4tEGzDwDcKk5ffVpok6+09o=
Subject key identifier:   AC:AE:29:49:4E:B7:35:BC:9E:18:DA:EF:F7:77:11:6B:34:4F:46:D9
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer:       /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial:       01984889C78F35D29A16881AAA18C9FB016C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number:          1183
Signing time:             Sat 26 Jul 2025 21:00:45 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:45 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:45 +0000
Files and hashes:         1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
                          2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: /ksQxOPJWu9cS0axduvdy1w+FZeApNGaX8+McZ548Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:c7:8f:35:d2:9a:16:88:1a:aa:18:c9:fb:01:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
        Validity
            Not Before: Jul 26 21:00:45 2025 GMT
            Not After : Jul 27 21:00:45 2025 GMT
        Subject: CN=acae29494eb735bc9e18daeff777116b344f46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:5f:cc:68:53:0d:35:f0:a9:1d:f6:f6:2c:
                    22:a9:56:28:c3:ec:4b:7e:0b:63:0f:7d:05:c3:c8:
                    9c:53:48:28:b4:0f:6b:3e:9d:e4:2c:64:d3:47:29:
                    82:f1:3f:ea:f6:fc:b2:a9:59:51:76:60:67:c0:f2:
                    6d:c0:3a:5a:8d:83:07:2c:85:a3:bd:57:e5:f0:1b:
                    a3:ce:34:da:f8:0b:40:d1:1b:f2:9e:e9:40:b7:8e:
                    b2:42:6e:af:5c:23:08:ae:53:83:61:0e:c4:68:ca:
                    89:f2:f4:69:a7:bb:23:6f:09:4f:93:1a:82:ab:87:
                    3b:3b:1c:b8:d4:ef:cd:1f:f3:81:93:bc:e6:9c:a6:
                    e8:cb:89:23:ac:7b:46:c9:be:1f:59:ab:f8:fd:7a:
                    6f:d2:5a:43:2d:a5:e4:52:18:5d:54:e0:80:4d:5e:
                    07:17:eb:c0:3c:b2:b0:2a:d5:c7:d5:3a:9e:cb:14:
                    4d:97:54:3b:98:9d:04:ce:e5:a3:fe:3e:a3:d8:fd:
                    5a:19:41:19:fc:2f:59:8b:d2:d0:ab:93:ea:fb:d2:
                    44:8d:43:59:0a:d5:5e:30:95:65:50:f0:f7:05:e0:
                    fc:3d:03:56:3d:eb:84:1c:f4:93:cd:fd:34:fc:bd:
                    2d:24:ce:42:7a:16:a3:d4:6f:ad:b1:02:45:ca:38:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AE:29:49:4E:B7:35:BC:9E:18:DA:EF:F7:77:11:6B:34:4F:46:D9
            X509v3 Authority Key Identifier:
                keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:6e:ca:48:6f:ac:17:c8:26:25:6b:d6:4a:a2:65:57:02:
         8b:b8:f3:8e:4e:88:88:60:fa:a0:c6:40:55:33:5f:03:13:db:
         54:5e:94:91:1c:89:4a:c8:e1:2f:7b:3d:30:ba:3a:7b:38:54:
         3d:0d:c3:04:c2:ee:e3:a1:46:86:d3:ae:a5:03:e8:59:16:e1:
         63:19:2e:bb:67:b4:01:88:39:7f:99:97:c0:56:2b:70:00:d0:
         76:0b:41:01:93:08:2c:84:83:b6:30:f2:45:fe:c2:5c:b8:bd:
         93:dc:4b:3e:40:0a:ee:fe:54:4d:7c:e6:5a:18:45:90:60:3a:
         a6:dd:7f:40:85:7e:81:d4:db:06:a3:57:1a:f7:22:80:b8:f6:
         aa:e0:45:ee:76:31:dc:aa:f0:66:75:38:7a:14:3d:68:2f:5f:
         71:99:19:50:0b:0b:8d:d5:88:40:7f:69:b8:52:ec:c6:62:72:
         90:c9:67:9b:29:be:cf:ce:99:81:19:a3:d4:01:eb:27:7f:c7:
         a3:f9:63:93:39:aa:77:20:10:97:61:fc:85:a9:44:60:90:1a:
         30:08:72:9d:31:cc:78:57:4e:2c:6b:4e:fa:aa:1f:ab:8c:f1:
         4a:e4:fa:5d:93:08:84:b1:07:83:19:df:6f:a4:c6:11:bb:cc:
         56:63:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:22 2025 by rpki-client