Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File:                     kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier:          VRZoWQsiSiURG2d0RuAjQNEQQ8cN8sPfScxxU77RQZo=
Subject key identifier:   74:A3:51:A0:60:DD:9C:24:87:8A:14:E6:23:C2:EB:81:5E:A3:CF:C1
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer:       /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial:       0199247A88F11F720C5EFEC9898A4AAE5181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number:          1673
Signing time:             Sun 07 Sep 2025 14:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 14:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 14:00:34 +0000
Files and hashes:         1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=)
                          2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: qh0r34f8FLjAmUKk19X3r2isTe6+4SiZsQm9vuozVZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:7a:88:f1:1f:72:0c:5e:fe:c9:89:8a:4a:ae:51:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
        Validity
            Not Before: Sep  7 14:00:34 2025 GMT
            Not After : Sep  8 14:00:34 2025 GMT
        Subject: CN=74a351a060dd9c24878a14e623c2eb815ea3cfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:f1:06:55:ab:c4:4f:57:27:fb:dd:e0:a9:
                    ed:00:86:96:df:49:db:06:88:d7:11:67:a3:54:67:
                    e8:80:0d:c7:c7:a3:ca:f8:df:b6:ff:f1:55:5f:f5:
                    63:f4:de:13:0b:b4:c9:4c:20:b9:b8:e1:a2:83:af:
                    a2:ec:b7:c9:2d:5f:e7:2c:36:72:3e:97:96:dc:f6:
                    9d:50:4f:9e:06:5d:d9:20:bf:cb:b1:b7:69:b9:76:
                    7d:ff:a7:9d:29:fd:47:34:89:9a:b6:3d:de:17:d7:
                    a2:d9:40:69:ea:3f:53:14:07:1c:92:07:6c:f3:1f:
                    0d:41:f3:13:2a:7b:c2:90:23:e6:2d:18:f7:28:48:
                    53:c1:c0:8c:b9:8f:68:f0:7e:d9:1d:c8:f7:61:2f:
                    88:83:ba:25:57:d0:5a:d1:90:9a:9c:15:5d:c7:66:
                    3b:20:b5:02:19:e2:1d:b6:cb:db:cc:c6:2f:70:d9:
                    a2:75:a7:59:71:f2:59:5b:8b:21:87:cb:b4:a8:ad:
                    28:6e:03:47:b7:1e:73:45:cb:3d:71:2a:bc:f5:a7:
                    2e:19:90:a0:e7:a0:57:67:46:f4:e1:ad:c8:80:17:
                    27:a3:80:df:c6:61:3b:61:fc:96:4b:e5:64:06:81:
                    eb:fa:c8:c6:8f:79:bb:f4:76:21:93:7f:24:10:e1:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:51:A0:60:DD:9C:24:87:8A:14:E6:23:C2:EB:81:5E:A3:CF:C1
            X509v3 Authority Key Identifier:
                keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:2c:23:a6:2a:c6:30:f8:3e:25:49:3d:7a:d6:1d:4d:f4:db:
         78:8f:b9:27:c5:04:47:82:a5:73:c5:ff:ae:f9:86:96:57:70:
         17:6e:aa:1d:da:66:49:e3:e0:f6:a1:85:05:68:cc:e8:c8:86:
         08:2d:81:e8:07:64:2e:a7:9e:e6:9a:62:8c:b9:eb:1c:ef:10:
         d5:16:b1:2d:48:5d:6d:a2:54:a2:2d:f4:95:94:01:5f:10:7d:
         a3:f7:5e:c6:f7:01:5b:b9:85:d6:ae:c0:8d:0d:f8:10:57:a8:
         50:1f:fe:45:83:cd:72:bf:84:78:e8:3c:5f:76:6a:41:c3:cc:
         57:84:f0:f0:bc:5c:14:14:3b:31:2b:f4:2e:ca:4c:48:27:f7:
         a3:b6:d0:c7:5d:a3:aa:3c:cc:bb:be:24:44:06:bd:93:e0:38:
         d7:88:7d:1e:a9:0a:f3:00:74:21:cf:fd:7a:c8:9e:1f:6a:fc:
         35:f4:25:d6:2e:8b:4f:81:3e:1e:0e:26:2d:95:59:4d:0f:b1:
         8c:fe:ac:e5:4b:4b:98:a9:d3:df:28:2f:2d:56:eb:cd:37:6e:
         3d:9c:bb:71:af:29:cd:f6:be:b5:e0:12:d9:de:fa:61:ae:5b:
         3b:26:e9:93:1f:3e:e8:0f:51:6b:10:b7:7a:19:6e:9a:00:08:
         25:30:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:14 2025 by rpki-client