Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File:                     k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier:          Sg9MFltlV90VPzshr/aqPTTOxIYXLg6C+1x8Pz0inIw=
Subject key identifier:   A9:6C:78:AC:83:13:4B:99:CB:54:D7:97:56:3D:7E:22:9F:91:E3:11
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer:       /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial:       01984966977542B16724F069BF7D39E0F6F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number:          1450
Signing time:             Sun 27 Jul 2025 01:01:56 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:56 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:56 +0000
Files and hashes:         1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=)
                          2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: T7MZut6h+jBGu1kX76El4ZIVdWwOC3p3GIXP9WbC4RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:97:75:42:b1:67:24:f0:69:bf:7d:39:e0:f6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
        Validity
            Not Before: Jul 27 01:01:56 2025 GMT
            Not After : Jul 28 01:01:56 2025 GMT
        Subject: CN=a96c78ac83134b99cb54d797563d7e229f91e311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:45:69:1a:a7:ee:56:41:5e:7b:28:ee:01:
                    1e:52:75:6f:13:9e:32:ba:a5:81:12:5f:f6:97:54:
                    56:f4:29:b5:66:d9:4d:b9:a4:0d:44:83:af:5f:86:
                    04:23:14:41:23:cf:35:be:8e:33:0e:f6:ef:0e:f1:
                    e0:bb:d1:b6:f7:ba:39:cd:2c:1e:76:e2:b8:28:46:
                    0c:68:34:d2:fb:61:44:5d:2c:99:b0:0c:f2:d6:cd:
                    61:25:97:79:e7:43:ea:f3:4b:f5:1f:b4:50:81:0e:
                    28:a6:83:9a:c9:ad:b9:33:0e:5d:06:25:59:f7:23:
                    a8:68:a1:c2:a1:2d:4e:68:6f:5c:6c:41:34:7c:4a:
                    e8:2d:83:46:d1:41:56:ae:13:f8:fd:96:bf:1f:29:
                    04:2c:44:7a:c0:3a:7d:62:e7:e4:16:ba:8a:4f:fa:
                    00:d8:91:be:56:4c:21:1b:b6:4d:26:48:fb:5c:a2:
                    4a:9e:0e:6e:e5:eb:ea:95:f5:bb:27:c1:1c:34:90:
                    ed:34:4c:ed:f8:bb:be:07:ac:c9:f3:ee:17:ad:94:
                    b0:34:a3:00:f8:5d:cf:cf:45:85:6b:c8:29:4d:a9:
                    7b:1e:10:d7:4c:93:60:28:42:08:e1:cb:aa:df:9b:
                    7d:b1:9b:8a:b6:4d:11:d6:88:a5:5b:25:f8:0d:08:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6C:78:AC:83:13:4B:99:CB:54:D7:97:56:3D:7E:22:9F:91:E3:11
            X509v3 Authority Key Identifier:
                keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:81:a3:1a:f0:be:fd:d6:74:ae:c3:17:7f:f4:6b:07:af:
         73:e1:ad:ac:7d:62:ae:b4:94:82:a1:37:38:0a:f8:f9:07:09:
         e3:c7:08:48:d3:45:82:5f:e8:e6:31:a4:cc:51:48:cd:99:39:
         32:aa:60:01:5b:4b:b1:e5:4f:5c:ab:c1:5a:88:b0:6e:2f:a4:
         63:41:1b:ec:2b:8f:26:18:28:33:4d:c7:48:d3:36:1a:af:c0:
         1f:dd:a5:6f:58:c1:f0:ac:cf:bc:34:19:29:ff:c0:fa:f6:47:
         58:1b:93:e2:d4:e6:2f:72:8f:48:d1:5e:03:a8:e0:bb:30:41:
         e7:42:07:95:f1:b2:5d:ea:1c:60:74:ab:80:af:e9:50:47:2a:
         9b:60:09:45:c9:77:4d:99:51:2c:a5:dd:b6:12:21:6a:40:03:
         c8:a1:9f:f1:1a:c6:2b:e4:1e:e3:5e:f2:06:bd:89:0c:1c:1a:
         62:92:a2:ae:28:cd:7e:6a:08:1e:03:cf:f8:cd:ad:3c:3c:95:
         0c:80:c3:c0:7e:7b:48:c6:e3:08:47:13:b1:7e:5d:08:b0:13:
         bc:e0:29:e8:6c:0d:ac:ec:55:d0:a5:38:14:a4:5e:e2:36:46:
         d4:1a:27:fc:28:20:f8:e6:3b:5d:04:d9:a0:6b:b5:01:54:54:
         9b:73:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:43:34 2025 by rpki-client