Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File:                     ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier:          ILZDtNdaT5kHZO6Ae+HWqvUaDwdGHKiqss/qKh06Mss=
Subject key identifier:   25:B1:27:15:14:8A:15:41:1B:D6:CC:BA:0F:FC:05:23:27:B0:B9:17
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer:       /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial:       0199228CE6BA173A19814C015A18412A4C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number:          1175
Signing time:             Sun 07 Sep 2025 05:01:23 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:23 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:23 +0000
Files and hashes:         1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: yT7+F6t3JXduoCUZ69sBmK2Rb/RZbIyqlF5iwcpQpPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:e6:ba:17:3a:19:81:4c:01:5a:18:41:2a:4c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
        Validity
            Not Before: Sep  7 05:01:23 2025 GMT
            Not After : Sep  8 05:01:23 2025 GMT
        Subject: CN=25b12715148a15411bd6ccba0ffc052327b0b917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:7c:ae:cd:d9:64:50:bc:7a:f0:5d:c4:d3:
                    f6:28:4c:71:38:37:4d:fd:35:2f:77:6b:3c:62:ac:
                    99:60:3a:01:81:cd:73:e4:18:c4:2e:86:31:27:57:
                    0b:ce:ad:5a:78:93:8a:0b:2b:ac:dd:c1:51:8a:3d:
                    69:bc:c2:b8:68:83:fe:83:03:f7:ec:e7:a6:29:dd:
                    10:44:3d:60:74:68:bf:3a:08:84:20:a3:2b:66:53:
                    08:36:08:a8:4b:90:50:2c:27:08:e7:4f:6c:eb:e0:
                    54:42:cc:9e:cd:c3:35:39:0f:6f:e3:19:43:42:48:
                    1a:5d:43:6f:13:3f:0a:e2:fb:3a:e8:aa:5c:c6:ce:
                    71:af:17:1f:b1:c9:b2:25:7a:e9:0d:86:9e:96:7e:
                    61:46:df:06:98:ad:e8:de:8c:55:05:7e:e2:71:0c:
                    47:68:bb:b3:42:7b:34:d3:7b:7a:9c:2f:88:f0:17:
                    e4:60:53:90:51:72:32:f2:76:93:0d:db:11:de:71:
                    7d:a5:4b:49:89:ae:9c:9d:6a:8b:7c:b3:1c:e1:a3:
                    5a:f8:dc:8d:39:a4:00:0e:4b:0a:68:5d:ee:ef:ac:
                    a8:b3:7c:dd:93:77:09:c5:9a:cc:7a:04:09:33:83:
                    83:9a:83:7f:b6:77:5e:df:65:d7:32:da:7e:4f:24:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B1:27:15:14:8A:15:41:1B:D6:CC:BA:0F:FC:05:23:27:B0:B9:17
            X509v3 Authority Key Identifier:
                keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2a:7e:64:dd:8e:84:c6:e9:42:3b:1b:6e:44:0e:c0:12:6a:
         f3:1f:3e:dd:11:a2:bf:69:9e:cf:bf:ca:6f:48:12:45:e7:98:
         a8:f7:9d:e3:3b:67:a7:e1:84:1e:aa:f7:79:a7:d2:a5:4a:a0:
         a7:6e:05:60:2d:47:c9:e5:0f:13:6a:27:75:c4:12:47:af:a5:
         42:b9:20:53:42:56:66:b5:e3:76:d7:2b:ff:26:44:e5:d3:60:
         18:bd:cd:45:9e:94:60:71:81:9c:ed:86:77:3a:c2:d1:b5:04:
         0c:a7:92:67:6d:16:a8:98:03:dd:0a:d3:80:8d:2c:ff:6d:ee:
         aa:a9:1a:b6:33:d3:8a:55:3c:79:3a:08:ee:78:2c:ed:3a:20:
         41:f1:ae:3c:24:ad:4b:70:8e:02:50:b9:64:14:f0:4a:29:9b:
         38:a1:4b:b7:03:74:a6:b6:7c:cc:ab:c5:8e:f3:58:a4:2e:03:
         63:6d:c2:11:a8:3c:70:97:87:22:43:68:e9:30:dc:2f:ab:15:
         0b:14:69:6d:00:66:03:67:11:23:af:01:c4:78:13:49:5d:d7:
         01:0d:04:ec:35:ac:a4:ac:01:11:1a:71:b2:34:76:c6:01:42:
         9e:68:0b:57:49:af:e4:b0:64:0c:40:25:5b:17:c3:57:5e:a3:
         6a:a8:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:29 2025 by rpki-client