Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File:                     _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier:          lfg9JE0dBfjx8HpgsD+zXH79dErIAckec7Npr7VTJg0=
Subject key identifier:   13:01:27:8E:6F:D3:E9:6D:79:2E:FA:E6:0F:0E:AE:AF:20:57:77:FE
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer:       /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial:       0198361753890EF0D12B4D0B3B81A8D8BB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number:          0363
Signing time:             Wed 23 Jul 2025 07:02:34 +0000
Manifest this update:     Wed 23 Jul 2025 07:02:34 +0000
Manifest next update:     Thu 24 Jul 2025 07:02:34 +0000
Files and hashes:         1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
                          2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
                          3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: nQVhzQeoszoc/Nw96467kZjGZ/q9DgDB26SpHlOXNU8=)
                          4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
                          5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
                          6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
                          7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:17:53:89:0e:f0:d1:2b:4d:0b:3b:81:a8:d8:bb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
        Validity
            Not Before: Jul 23 07:02:34 2025 GMT
            Not After : Jul 24 07:02:34 2025 GMT
        Subject: CN=1301278e6fd3e96d792efae60f0eaeaf205777fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:90:f0:cf:84:16:4b:35:71:c0:ec:e7:d6:5c:
                    15:78:a7:ac:2c:16:59:6f:80:16:c7:aa:5f:8f:f8:
                    f9:e4:42:f9:6c:08:41:fb:2e:26:ff:01:9e:ce:5b:
                    0e:2f:64:71:28:64:67:5f:32:b9:69:d2:65:a9:79:
                    4b:e5:13:41:b7:4e:8e:36:fa:3d:9b:e9:cd:d0:47:
                    45:6a:ac:54:0a:09:3c:7b:74:44:cd:78:48:4c:94:
                    13:51:ac:51:3b:09:23:d6:0f:66:f8:f2:ce:c0:1f:
                    73:43:65:23:71:c3:02:b9:3f:4f:da:06:3c:e4:29:
                    83:4d:04:5b:90:ad:33:85:c9:5f:b0:9a:fc:29:ca:
                    2e:3c:97:e0:c1:35:9b:7c:28:82:43:1c:28:5f:80:
                    22:25:38:02:a4:ef:c8:96:9c:40:de:f8:17:40:4c:
                    c7:5b:81:4d:49:0e:e9:fd:28:f5:5c:7c:0e:f5:fe:
                    c9:34:17:e6:fc:b4:58:81:59:30:56:16:96:da:87:
                    2e:38:34:95:20:5e:ee:db:80:aa:56:4f:b7:71:38:
                    fc:3e:d4:7e:6e:62:c8:4e:4b:fa:e4:b2:25:ef:c6:
                    68:16:8f:16:8e:74:2a:09:d7:35:d1:a5:2c:4d:1e:
                    3f:b9:bf:7a:03:43:82:c8:fe:37:c7:9e:5d:45:99:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:01:27:8E:6F:D3:E9:6D:79:2E:FA:E6:0F:0E:AE:AF:20:57:77:FE
            X509v3 Authority Key Identifier:
                keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:7e:12:47:b0:4a:d2:31:2b:e2:7a:1b:79:07:23:4b:e2:
         e5:2e:fe:c8:95:85:5b:e9:5e:41:06:8f:e1:73:99:a5:89:6b:
         04:16:3b:43:c4:79:4f:3c:13:81:1b:ba:91:a6:72:ef:1e:f0:
         52:76:96:04:5e:32:a3:8d:c2:68:ec:6a:58:67:39:ce:c0:1c:
         1e:0e:9d:8e:dc:f3:f7:ef:4f:49:d9:a2:e5:8b:91:61:97:49:
         aa:d7:d9:89:cd:6d:0c:b6:bf:68:82:44:ee:d7:3d:36:65:d6:
         ea:02:a0:00:d8:d2:c2:4c:7c:b7:14:19:9c:2f:be:2c:c6:a1:
         10:0d:61:5b:84:01:bf:86:8b:fb:ee:ca:dc:b5:7a:01:a0:cd:
         7c:60:83:e2:6f:ec:2c:eb:27:e6:a0:11:cf:1d:54:ea:5b:09:
         b2:20:53:41:21:68:85:88:8f:aa:b0:ca:f9:ff:ce:e2:c1:26:
         8f:cc:f5:b1:b2:de:9a:76:eb:3b:18:d5:50:ed:06:68:9e:a5:
         75:cd:31:64:d6:78:81:7c:5d:20:97:6d:34:9d:73:55:cd:16:
         5b:1d:b7:67:e5:33:59:d1:b3:31:fa:ac:7d:91:62:10:0c:75:
         c8:aa:8f:bd:6f:46:6e:8b:31:2f:2d:f5:61:51:5a:28:d7:75:
         a0:d4:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:12:03 2025 by rpki-client