Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File:                     KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier:          3dkNF+w9jSLDyb571UA8zOCLRABtsjwU/tuQTq15PTI=
Subject key identifier:   8D:DC:FF:28:1E:40:AB:DB:49:02:C1:42:0F:A3:86:79:E7:61:F4:7B
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer:       /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial:       019849D3A6D44148869EB3FCE45FCEF2C3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number:          069C
Signing time:             Sun 27 Jul 2025 03:01:04 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:04 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:04 +0000
Files and hashes:         1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
                          2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: siku8lQuZ70MKS1HvuQhnYd5KazqaUkcnZEPKJw8ZNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:a6:d4:41:48:86:9e:b3:fc:e4:5f:ce:f2:c3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
        Validity
            Not Before: Jul 27 03:01:04 2025 GMT
            Not After : Jul 28 03:01:04 2025 GMT
        Subject: CN=8ddcff281e40abdb4902c1420fa38679e761f47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:88:47:a8:4c:f5:9e:fb:1a:7c:74:4a:bf:
                    80:e3:e6:1b:01:8e:5f:54:ce:56:f9:88:44:bb:92:
                    da:41:57:6b:2f:59:57:2d:13:1c:5c:0a:85:c2:72:
                    a7:65:a2:fa:9f:7c:0e:f1:62:7e:bb:88:f0:c6:8c:
                    ff:31:02:02:3b:a7:9c:2d:ba:3f:70:f6:f9:d1:0e:
                    9b:eb:5f:11:d7:eb:b8:0d:bc:07:26:0e:5d:e5:47:
                    5a:03:7a:ec:3d:13:74:65:cf:a0:de:c3:c0:dd:86:
                    6c:41:e7:c1:f7:46:e3:f0:df:8f:66:8a:78:c1:99:
                    af:60:ad:e2:79:ff:24:a3:62:61:52:c1:32:e9:d3:
                    19:c6:82:82:d5:e3:3c:f7:00:4e:e9:dd:48:87:78:
                    74:88:c4:e6:28:e4:27:31:98:96:35:18:30:c3:a0:
                    45:12:e7:07:3e:b6:35:4e:d0:1e:52:6d:26:d6:c2:
                    52:1f:ce:d9:ad:a8:91:41:40:03:9e:42:96:0a:54:
                    2e:bf:8c:1e:cf:5e:9b:9b:ed:42:cd:99:d4:02:2b:
                    fd:f6:e8:73:e2:45:72:94:03:c1:10:34:ae:bc:80:
                    a9:06:95:2b:78:6f:c0:65:be:b9:a3:08:05:12:f9:
                    43:6b:10:66:f2:1c:f5:92:95:31:e1:14:a3:90:56:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:FF:28:1E:40:AB:DB:49:02:C1:42:0F:A3:86:79:E7:61:F4:7B
            X509v3 Authority Key Identifier:
                keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:78:e6:0a:55:00:87:c3:ec:23:63:90:0c:23:91:51:55:
         9b:9c:75:20:1c:8a:bf:e6:99:28:7b:9c:8e:78:ef:20:63:51:
         f1:3c:98:ec:54:be:10:ea:79:e0:bb:29:d7:0b:f1:6d:e3:9b:
         68:fe:7a:d9:9a:44:aa:df:0b:28:3f:73:7b:48:d4:80:7a:cd:
         15:34:24:bc:3e:1f:d6:13:a9:f2:98:e4:97:e0:b2:ca:e2:b5:
         af:46:70:a7:35:2f:3c:2b:88:60:60:ba:16:8c:69:35:eb:d0:
         97:ad:37:f5:ab:df:5f:92:9a:ea:db:d3:86:fe:35:89:19:83:
         04:8f:f5:8c:6e:49:ce:fe:13:d0:88:2b:80:b0:c1:5f:55:c4:
         89:ec:d4:87:9e:80:c1:54:76:3c:b9:84:7f:9e:66:de:e1:56:
         7d:64:81:b1:5e:67:85:6d:21:e1:fb:bf:d3:43:84:69:54:b6:
         68:d2:bd:4c:e4:c4:81:83:5d:0a:3b:ca:49:e9:20:73:1d:38:
         1f:78:d9:05:ab:61:2b:c3:65:0c:64:bd:88:b1:fd:fd:01:a4:
         de:aa:1a:8f:62:ed:54:fd:72:3c:c5:5e:69:5e:91:3f:a1:a9:
         77:43:d4:0d:8e:c7:6e:fc:3c:a3:a8:52:bc:ef:63:5e:ae:a9:
         70:db:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:42 2025 by rpki-client