Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File:                     Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier:          G0PmkIN0gAjVJK1WuPnRH2pPh6sDJIbYRnGuNruIV3E=
Subject key identifier:   8B:8D:22:97:A8:C9:C9:71:56:DF:F2:F1:9B:D5:01:14:51:F4:C3:16
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer:       /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial:       019840994CC8687148A88742E3E6379A9C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number:          1560
Signing time:             Fri 25 Jul 2025 08:00:45 +0000
Manifest this update:     Fri 25 Jul 2025 08:00:45 +0000
Manifest next update:     Sat 26 Jul 2025 08:00:45 +0000
Files and hashes:         1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: qwHl9tPIkJ5IuC9Erx9y3wNebOeyGiLMKJtTLScOuss=)
                          2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:99:4c:c8:68:71:48:a8:87:42:e3:e6:37:9a:9c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
        Validity
            Not Before: Jul 25 08:00:45 2025 GMT
            Not After : Jul 26 08:00:45 2025 GMT
        Subject: CN=8b8d2297a8c9c97156dff2f19bd5011451f4c316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:c5:46:ea:aa:d5:9c:21:5c:2f:9d:9a:1c:
                    d7:c6:d8:c7:8d:68:68:5b:19:f1:27:d0:d7:5b:69:
                    cd:1d:26:07:50:95:f6:72:a2:96:c1:45:65:1f:27:
                    0e:8f:a5:15:d2:65:5c:00:3b:6c:81:a8:be:5f:e6:
                    4b:a0:92:2e:26:68:78:c5:fb:33:83:a2:fa:95:64:
                    a6:8c:d9:d7:93:d7:e0:b4:84:aa:db:5d:45:37:8d:
                    6c:7c:a5:52:01:5c:1a:7a:14:e4:7d:b7:33:ce:21:
                    c9:31:d7:bd:a2:0e:e0:32:88:95:5d:b0:27:55:a9:
                    5c:16:95:da:74:a4:bd:a5:71:51:bd:89:75:2f:e7:
                    d9:6e:74:27:a9:be:c4:dd:b9:e6:6e:f7:de:2d:f3:
                    d5:ee:c6:4e:22:8e:a7:c6:d9:d2:ef:70:78:23:9a:
                    89:d6:5f:34:5a:3c:2d:ac:b8:5a:1e:27:7c:2f:dc:
                    4e:cd:98:06:88:e1:da:ce:79:51:f5:84:44:bd:4d:
                    75:2b:57:5c:a3:f9:9c:d4:c0:46:16:c5:77:59:9d:
                    3d:93:fb:91:1b:bd:10:64:27:14:3b:23:6d:2a:88:
                    b4:8e:4e:cc:fd:9c:d1:cc:39:a3:b6:4a:0c:56:db:
                    2f:f7:1f:d8:db:02:aa:a1:ea:b9:4d:22:4b:1b:1c:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:22:97:A8:C9:C9:71:56:DF:F2:F1:9B:D5:01:14:51:F4:C3:16
            X509v3 Authority Key Identifier:
                keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a0:8e:06:ca:7e:ee:73:aa:25:21:62:29:91:26:0c:22:e1:
         fb:0b:ce:78:e0:f9:b8:58:a8:eb:20:21:9a:63:94:58:22:ce:
         e1:53:b1:42:c1:cb:72:34:da:15:28:f8:c5:f9:89:d4:f0:d9:
         54:57:d5:6d:5d:5e:5d:e0:76:ae:aa:92:d6:da:aa:5b:df:32:
         9d:bd:11:52:77:44:f2:23:54:e9:e8:e9:97:ca:69:df:4d:3e:
         f7:79:d0:63:61:04:02:f1:4d:e1:ce:b7:4e:c3:bd:8f:a3:df:
         bc:c3:04:df:a5:f0:71:35:e4:bd:85:cf:54:54:09:fb:5a:d8:
         7f:f9:a7:37:62:c7:3d:34:95:32:1b:ff:e4:66:96:cc:4e:eb:
         b9:75:d9:84:a8:e6:e6:52:82:67:bc:90:6c:66:f8:57:29:f5:
         cf:c9:35:49:f7:05:06:27:64:97:cc:2d:4e:3f:c3:b3:97:c9:
         5c:ab:73:39:ff:b1:93:ba:bb:a1:30:b5:9a:0d:18:3f:61:33:
         f8:04:84:9c:63:67:03:77:d7:4d:c0:59:f5:23:d2:e2:a7:7c:
         a1:45:02:4f:b6:b7:e2:ae:b9:b0:de:7f:af:ed:26:4a:da:53:
         b7:c9:4e:e9:56:40:e4:5a:30:45:fa:58:b4:ff:de:0b:4f:b0:
         75:a6:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:15:27 2025 by rpki-client