Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File:                     kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier:          iN/cyulxPhJOmLkdasDAAFL2aUg5cIsLyUdt0VpGRiQ=
Subject key identifier:   81:A9:73:D2:A6:42:A8:4C:ED:EA:7A:A8:B5:46:98:E5:13:60:C1:4D
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer:       /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial:       019921E7CFADF6B2B847C20CD547CB6CC59E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number:          13C3
Signing time:             Sun 07 Sep 2025 02:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 02:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 02:01:04 +0000
Files and hashes:         1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: L9iPxUAwxIhNbGmAsuV0oraRunZLhmHtp5nxY6F0bzY=)
                          2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:cf:ad:f6:b2:b8:47:c2:0c:d5:47:cb:6c:c5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
        Validity
            Not Before: Sep  7 02:01:04 2025 GMT
            Not After : Sep  8 02:01:04 2025 GMT
        Subject: CN=81a973d2a642a84cedea7aa8b54698e51360c14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:1e:56:6c:67:f3:1d:0c:2f:91:12:38:a3:
                    6a:d0:68:1c:6f:bc:5a:73:95:48:a0:4a:16:18:7a:
                    87:58:ec:23:c0:6d:6a:b3:e5:1a:5d:6a:21:a9:59:
                    31:b3:f4:47:f2:a0:1f:15:4a:30:85:ad:40:a1:c8:
                    ce:5f:16:71:97:19:4e:f2:f6:38:2b:d3:c9:e6:f8:
                    d9:ad:84:c2:fe:79:83:b8:ca:7c:d6:72:7a:e6:9e:
                    5a:04:ee:f9:37:fd:de:b5:58:1f:65:d9:f1:a3:4f:
                    b1:7c:98:17:7c:3e:61:36:41:3b:45:af:05:e2:82:
                    e4:d3:10:07:c8:a3:a3:1b:1d:ae:f6:53:a5:32:bf:
                    04:6b:6a:04:8e:82:37:59:c2:56:42:6f:69:a7:73:
                    33:cb:c8:4b:3e:5e:e6:8f:26:de:e1:c0:8e:31:b0:
                    09:75:c8:cf:60:cf:16:1a:ce:69:d6:aa:cf:67:b3:
                    01:eb:0e:80:ab:5f:70:b3:8e:25:65:85:07:ac:b6:
                    2b:f2:e8:b9:96:b7:e7:69:5c:bd:6c:8e:e3:40:ae:
                    84:2a:af:5b:40:6a:b0:a7:78:cf:a0:ec:7c:3a:b0:
                    7d:32:94:2e:77:03:1c:9a:83:48:1a:c5:05:92:e4:
                    29:ea:c8:71:05:36:43:dc:ed:9c:26:c5:0b:73:2e:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:73:D2:A6:42:A8:4C:ED:EA:7A:A8:B5:46:98:E5:13:60:C1:4D
            X509v3 Authority Key Identifier:
                keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d3:43:bb:44:7a:74:82:fd:9e:07:d3:3a:2f:07:58:a5:22:
         78:ee:17:5d:e6:1e:5e:74:78:b1:09:04:1d:5f:2b:95:82:1f:
         ba:97:32:39:96:69:ec:8f:77:e6:2b:cb:7b:2c:47:80:8d:1d:
         7f:62:2a:d1:12:a9:dd:ba:b5:11:c2:c8:5d:01:5e:08:ca:e5:
         f5:42:e3:f8:8c:11:6a:9c:8a:7b:dc:79:55:0e:c9:c8:30:28:
         0a:90:be:af:fc:35:fb:4c:dc:32:f3:34:3c:6b:ff:fa:f3:68:
         66:c6:03:c1:37:0c:3a:86:f4:98:b9:aa:cf:ab:1e:84:0d:b4:
         6c:52:c0:8a:2f:1d:b2:f9:0b:ca:f7:de:0f:c6:dc:3a:5b:65:
         bf:17:c8:02:87:4f:64:9e:63:36:70:27:2c:2b:59:27:9c:1a:
         c1:a0:3c:b5:19:38:9f:ce:db:65:d4:79:ca:0a:cd:ea:2d:39:
         d4:ca:30:ae:0f:46:85:8a:38:0f:4f:cc:4b:77:87:d1:38:8c:
         c8:b7:43:33:4a:d1:ef:18:03:37:e6:76:a6:f0:1e:66:9d:b4:
         a1:5d:f9:ac:32:e0:85:3d:96:c9:cd:37:b4:21:03:be:46:6d:
         68:2a:84:ee:de:c3:41:c4:e8:24:4e:ed:9c:db:03:a3:e4:dc:
         e6:0d:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:06 2025 by rpki-client