Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File:                     KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier:          mTrV7JpxwblJH+3zBx9xxsnwQi9cUpIqU6xELcfSJaY=
Subject key identifier:   54:DB:B1:31:E0:65:A5:A6:6B:03:48:6B:B1:C2:47:39:44:A2:1E:DD
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       019739BDC17FB99E2E8C75758D301EB46206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number:          0714
Signing time:             Wed 04 Jun 2025 07:00:26 +0000
Manifest this update:     Wed 04 Jun 2025 07:00:26 +0000
Manifest next update:     Thu 05 Jun 2025 07:00:26 +0000
Files and hashes:         1: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
                          2: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: EJHkLlaaRhgAxW+fLBwvSlXGQ2gIXsB8elbpcgwX1HE=)
                          3: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
                          4: Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (hash: IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=)
                          5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
                          6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
                          7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
                          8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
                          9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:bd:c1:7f:b9:9e:2e:8c:75:75:8d:30:1e:b4:62:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Jun  4 07:00:26 2025 GMT
            Not After : Jun  5 07:00:26 2025 GMT
        Subject: CN=54dbb131e065a5a66b03486bb1c2473944a21edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:d4:5a:ae:81:7f:6a:39:86:39:34:d1:2f:
                    f9:7a:fb:d6:f5:19:48:ee:c4:57:d8:94:95:f7:b8:
                    f5:10:02:4b:0c:da:29:fa:ab:49:d0:eb:39:87:8e:
                    cd:c0:eb:68:a4:60:a5:62:2c:be:83:c4:35:79:78:
                    b4:3a:80:0b:29:d8:54:00:02:69:a7:9e:3e:61:3a:
                    ed:c3:a8:13:77:e2:3d:c1:55:04:f8:70:0b:46:70:
                    54:ba:62:04:39:4c:7a:ee:fc:b9:c3:2b:1c:be:c7:
                    f2:44:d3:28:94:1a:38:61:36:c9:43:83:2c:f8:2e:
                    97:7e:09:45:d0:dd:61:c2:f8:8d:86:88:c2:f8:70:
                    ee:3c:ef:07:86:59:b7:87:21:a4:82:c4:01:aa:d5:
                    b3:7c:6a:c4:35:7f:61:d7:b0:cb:3a:2e:ea:3e:16:
                    43:ce:e7:4b:96:a4:24:8a:88:97:26:39:ba:7b:70:
                    17:dd:bd:17:da:8d:9c:e1:6c:49:5a:91:60:8c:76:
                    e0:6f:63:0b:a3:b4:25:b1:d2:fb:b7:66:8e:eb:a1:
                    2f:34:b8:c1:55:34:78:e6:2f:49:9a:b1:b0:01:5a:
                    1d:d0:06:9f:fa:8d:c1:45:18:29:7d:28:b3:5f:b4:
                    bf:7f:8b:81:2a:85:fa:e4:74:6c:43:3a:bf:fd:96:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DB:B1:31:E0:65:A5:A6:6B:03:48:6B:B1:C2:47:39:44:A2:1E:DD
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:2f:e0:49:7d:e4:b7:8b:e3:95:30:a2:5b:bb:cd:44:ee:
         74:d6:f3:92:af:da:80:9a:bb:62:9e:07:b3:07:a4:27:9f:51:
         24:81:1a:ba:65:2c:70:eb:1d:4f:85:99:4d:dd:8f:da:cf:01:
         db:1d:8e:00:93:52:25:50:94:34:86:98:8e:48:a4:e9:53:39:
         84:97:96:52:19:21:49:54:65:51:3e:92:5c:ce:46:86:60:f4:
         3e:be:d5:91:06:29:36:d5:a6:2d:26:0f:46:66:8b:c0:53:0f:
         c4:e0:71:42:9a:98:98:ef:36:d0:82:31:95:50:26:ad:79:7f:
         4b:3b:44:ba:3e:1d:59:eb:1f:37:87:37:b1:1d:7b:cb:c8:f7:
         44:73:04:17:55:34:c6:87:03:c1:b6:86:c3:b9:7c:0a:db:2a:
         79:9a:ef:57:1e:35:5a:23:1d:6c:b3:3b:59:3e:e6:f4:18:eb:
         3e:60:ca:42:24:8b:23:dc:e3:4c:68:35:33:05:51:0e:0a:b8:
         3d:a2:f1:b4:9a:23:35:46:ba:53:ca:0a:c7:d7:12:6f:7c:0e:
         22:08:85:74:03:6f:3a:a7:fb:ba:04:c0:24:cd:69:e9:21:f7:
         92:36:33:6f:8e:c5:71:01:9b:1b:45:c0:d1:9e:b5:8b:27:14:
         6d:68:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:28:35 2025 by rpki-client