Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          xm4PB82mHNKrfAqUINvzk6fyw0mVVGMim/TTwg1mqRM=
Subject key identifier:   BE:14:34:E4:93:EA:DC:DF:2D:0E:C5:B2:4F:DC:81:1B:22:6F:58:07
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019839F2964D949C0F4370756D47467B09D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          1607
Signing time:             Thu 24 Jul 2025 01:00:56 +0000
Manifest this update:     Thu 24 Jul 2025 01:00:56 +0000
Manifest next update:     Fri 25 Jul 2025 01:00:56 +0000
Files and hashes:         1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=)
                          2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=)
                          3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=)
                          4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=)
                          5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=)
                          6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=)
                          7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=)
                          8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=)
                          9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=)
                          10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: yoZH1CMSQMxEqWfyXWnPVUnILeqemoXR+43rjInwLeA=)
                          11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=)
                          12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=)
                          13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=)
                          14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=)
                          15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=)
                          16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=)
                          17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:f2:96:4d:94:9c:0f:43:70:75:6d:47:46:7b:09:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jul 24 01:00:56 2025 GMT
            Not After : Jul 25 01:00:56 2025 GMT
        Subject: CN=be1434e493eadcdf2d0ec5b24fdc811b226f5807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:02:24:00:0f:a8:89:25:bc:5c:8f:00:f2:
                    d2:9b:21:22:15:95:41:06:59:8f:b1:a5:31:cd:4e:
                    60:6b:06:1f:53:e1:35:b2:dc:fc:6a:17:7b:09:3b:
                    44:9c:27:c1:94:1a:e4:50:cb:c6:1a:c8:0e:fc:e6:
                    c9:48:e9:d2:f6:82:30:9f:89:8a:79:a2:62:88:1a:
                    9b:36:fe:7c:3b:1e:26:9a:e2:6e:25:bb:aa:ad:70:
                    45:2a:a9:67:ce:02:cf:8a:47:b5:d1:1f:d1:05:96:
                    3f:1b:61:6f:fc:d0:75:2f:05:5a:c1:24:89:63:fb:
                    e4:1e:a1:e8:28:6e:26:77:40:43:fb:4d:b2:6a:f7:
                    d0:d5:77:e2:14:8a:d9:19:59:c3:50:ae:44:d1:17:
                    d6:77:55:2b:76:75:84:12:a9:e8:c4:c0:b3:1c:49:
                    fa:e2:22:cd:62:80:a2:4b:36:7f:9c:6e:6d:95:82:
                    8a:10:a6:32:4d:dd:b2:c5:14:52:54:c5:bf:da:0c:
                    62:83:70:97:95:5b:c9:c5:39:5b:b7:6e:33:4b:66:
                    82:86:2a:80:3f:69:b2:e7:7e:4d:8f:f8:ff:9f:be:
                    82:fb:1d:c9:30:e7:9b:00:fc:e4:19:8f:38:c4:6c:
                    15:27:cc:bb:cd:7b:a1:ea:5a:1d:ef:d6:fd:02:9c:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:14:34:E4:93:EA:DC:DF:2D:0E:C5:B2:4F:DC:81:1B:22:6F:58:07
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:23:8f:2a:57:0f:ed:77:9e:86:de:58:c4:6d:76:1c:8f:
         f0:3a:0e:67:93:40:75:0a:f1:aa:aa:6f:26:5c:6b:cf:f1:05:
         a2:69:aa:38:b0:14:fa:41:aa:e3:6d:4d:4a:f7:64:f1:48:9c:
         7e:9a:ac:45:02:65:01:22:98:22:b5:a5:92:5a:4b:b3:10:1a:
         d2:2c:3c:1c:99:fb:87:9a:e0:4b:4e:de:31:bd:1f:a2:a4:33:
         00:b6:f0:17:b9:e0:8e:b8:02:fc:bf:5d:da:5e:f6:eb:0f:f1:
         da:c2:74:a3:d3:04:e0:39:b0:c4:95:f2:1d:e4:a4:10:d2:aa:
         c2:15:dc:de:67:62:24:cd:93:31:09:08:29:e3:7c:ca:53:25:
         12:23:dd:83:9b:00:49:58:09:4c:3f:40:c1:35:f2:87:a3:8d:
         c6:3a:c9:41:5e:67:28:82:9e:34:bd:4c:28:07:87:82:5d:4b:
         48:37:37:bf:75:fe:19:66:89:03:89:8a:c8:95:e2:70:86:09:
         c8:4d:1c:8a:ec:80:cc:90:e1:eb:a4:1c:1b:17:bb:e7:27:21:
         d5:03:83:56:47:3d:ce:f9:6a:9a:9e:60:31:13:da:1c:81:a7:
         c9:07:2b:25:62:b4:21:71:8f:ef:e5:12:a6:4f:cd:08:ae:9b:
         88:8d:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:15:13 2025 by rpki-client