Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File:                     K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier:          XvYVWVWTEb+3ugJo5WMaP2fgeIO5LEKDqZDlDmRcTn0=
Subject key identifier:   A4:CA:14:12:4F:BD:84:7A:BA:E0:36:BC:1C:53:1C:33:E8:5E:BD:F3
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer:       /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial:       0198353A189237E6F334EAF7D0B09213638A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number:          0A0E
Signing time:             Wed 23 Jul 2025 03:00:56 +0000
Manifest this update:     Wed 23 Jul 2025 03:00:56 +0000
Manifest next update:     Thu 24 Jul 2025 03:00:56 +0000
Files and hashes:         1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
                          2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: oCQc5+/VBRTqBOdzq+lIf22ACunYSUFMDu898sw/EXI=)
                          3: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
                          4: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:3a:18:92:37:e6:f3:34:ea:f7:d0:b0:92:13:63:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
        Validity
            Not Before: Jul 23 03:00:56 2025 GMT
            Not After : Jul 24 03:00:56 2025 GMT
        Subject: CN=a4ca14124fbd847abae036bc1c531c33e85ebdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:a1:d4:09:22:b9:81:31:61:e5:a8:10:19:
                    ec:11:aa:80:76:0a:d9:96:93:3f:ab:2a:82:74:8f:
                    05:ed:b9:56:7a:6f:db:ce:5b:9a:ae:98:0c:8f:b8:
                    d5:ef:15:2b:cd:47:2e:27:89:0b:42:5d:ce:37:74:
                    42:5d:be:da:a2:cf:1d:4d:4e:50:fd:d6:0a:d7:4b:
                    91:1c:8d:56:5f:26:e7:4d:cf:6a:91:8f:12:86:80:
                    4e:7f:f7:46:5e:65:79:99:6b:54:95:f1:3c:24:62:
                    f8:86:b1:d3:50:8d:16:bc:47:38:ce:1d:35:3e:6a:
                    dd:5f:f8:a8:d0:06:55:78:7d:52:22:33:dd:65:d6:
                    2f:b7:b5:89:48:46:c9:fe:96:3b:dc:82:99:0c:7d:
                    2d:eb:ef:05:7b:6b:6f:5a:57:1f:40:52:02:b8:98:
                    d6:97:b0:ad:8b:9e:7d:12:5d:58:08:ae:dc:23:6f:
                    7b:38:61:61:d2:1e:c4:9e:77:b9:e6:7e:cd:8b:c2:
                    fc:ff:f8:32:cd:fd:f9:b4:c6:18:79:76:00:74:84:
                    34:15:ad:62:77:01:48:1d:0e:88:e8:14:b3:15:cd:
                    cc:7d:8c:de:2c:ca:ac:f7:08:41:3e:b7:41:38:2a:
                    f0:2d:1d:6d:17:de:e4:cf:64:ed:8b:bb:3b:f2:73:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CA:14:12:4F:BD:84:7A:BA:E0:36:BC:1C:53:1C:33:E8:5E:BD:F3
            X509v3 Authority Key Identifier:
                keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:a7:2e:9e:2d:e8:e6:71:4c:50:fa:c9:b8:a4:45:8c:3d:
         3f:4f:03:a6:ac:15:ae:8c:84:54:06:07:8a:6f:53:69:76:8f:
         cd:13:c6:eb:3c:e8:6e:0e:49:0c:34:eb:a7:a6:6b:95:63:82:
         52:06:63:52:c0:3a:bf:59:7e:c8:21:89:98:7c:0d:37:9a:30:
         05:91:0c:e3:20:9b:cb:55:e6:c6:50:d4:e6:19:4e:39:34:cb:
         05:84:20:d5:d2:f0:b0:55:50:98:20:d0:ae:07:b4:51:0a:22:
         aa:97:a6:c8:0c:79:15:6d:f7:69:d6:b0:3b:fe:d7:a6:07:07:
         da:56:7a:c2:b4:97:e1:bc:9c:29:36:0d:78:e4:64:73:2b:c7:
         f7:7e:bd:1f:d8:2d:1c:52:8d:b9:73:08:7b:89:2c:a4:b1:77:
         89:48:0f:35:46:7a:b9:16:e8:5e:96:88:b7:40:07:bd:e3:48:
         8b:5f:86:e3:fa:90:8a:a5:4c:08:97:f5:19:bc:92:9c:a8:bc:
         7f:60:72:88:dd:ab:09:0c:1b:36:1b:ad:54:ef:a2:6f:51:79:
         89:14:36:88:f9:73:28:a2:59:34:4c:43:70:6f:18:b8:ba:e0:
         76:a2:b4:2d:ba:fe:09:f2:bc:30:8b:c2:c5:f0:cd:87:0d:0c:
         19:0e:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:23:54 2025 by rpki-client