Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File:                     kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier:          +Q3yYGckkgE1Sckbh97QLkNKpqs4iACAGSzcoUtFsh8=
Subject key identifier:   29:4D:B7:0C:17:FC:B8:95:89:43:F5:C7:6B:96:F9:E7:68:C6:22:75
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer:       /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial:       01974AE85F4C133CD5A0F77453F465E45837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number:          091A
Signing time:             Sat 07 Jun 2025 15:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:31 +0000
Files and hashes:         1: 0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa (hash: +84Jtnm8y8lyPSa7rwRGvIOVFxMyvRwy6vUQccu0gmY=)
                          2: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
                          3: XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa (hash: 1W1CVZL0BwZJqQJ2Az9Lw99cQ4qD2ObuWZrSKPc6/mA=)
                          4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: 1QWOL6iuu2Qd2fKk6QKSX/mUMXoS++W+cat8JmnJ0NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:5f:4c:13:3c:d5:a0:f7:74:53:f4:65:e4:58:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
        Validity
            Not Before: Jun  7 15:00:31 2025 GMT
            Not After : Jun  8 15:00:31 2025 GMT
        Subject: CN=294db70c17fcb8958943f5c76b96f9e768c62275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:f4:0c:49:b1:2c:e9:64:ec:7e:69:dd:f8:
                    7d:b9:27:13:d7:2c:e2:95:8b:bd:f8:72:30:da:99:
                    99:07:d8:4b:1e:bc:ba:ea:dd:a0:15:41:34:ed:13:
                    bd:c9:c6:62:f1:3c:13:51:ad:58:5a:ec:02:e5:c4:
                    62:86:ee:07:96:8f:6a:a5:ac:d0:33:0d:d3:13:38:
                    1a:e7:bb:85:b1:bb:b7:a9:b3:c8:dc:00:2c:0c:08:
                    5d:98:9d:8a:d0:20:53:32:79:1d:22:ca:dd:db:f4:
                    0a:26:07:db:c0:22:c0:cc:71:65:b6:d8:da:9e:05:
                    e3:2a:5f:ee:f4:a9:52:20:bb:fc:86:b1:83:62:72:
                    ff:e6:ee:0e:fb:96:da:31:1c:6c:cf:f8:86:4c:7d:
                    ef:b0:dd:1e:9d:e5:d1:b6:6e:83:da:46:85:fe:78:
                    ba:3e:97:dd:11:97:0b:e0:6a:c7:ea:81:4f:cf:4c:
                    58:de:b1:0e:1e:8a:7a:6a:aa:b7:a1:98:c4:23:1b:
                    50:c4:a4:74:84:84:b3:c4:c4:a0:33:3c:1e:11:f4:
                    32:c6:15:99:b8:f5:1c:2d:75:dd:be:f6:5e:e2:ec:
                    25:8d:2e:d8:65:6a:bb:8d:ab:50:2f:dd:d0:7a:b6:
                    8d:c6:78:d0:d4:a8:54:6f:82:bd:81:0b:89:26:d2:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4D:B7:0C:17:FC:B8:95:89:43:F5:C7:6B:96:F9:E7:68:C6:22:75
            X509v3 Authority Key Identifier:
                keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d8:61:46:97:5c:76:1a:1d:78:1e:a6:52:c8:21:6a:88:33:
         df:ac:54:94:36:1f:76:e6:47:d1:27:3f:b3:9a:6a:9f:27:8c:
         d2:c4:c0:7d:dc:a9:a7:b5:e6:db:9a:b6:4e:77:df:9c:20:e0:
         7b:cc:49:95:67:07:41:bf:6c:0c:70:11:9d:e0:11:d6:3f:b8:
         d3:01:70:34:cb:81:01:12:98:2b:fa:3a:b3:dd:f7:b2:7f:76:
         13:8e:c3:db:d5:bc:bb:38:2f:9f:cd:61:10:93:10:8a:86:83:
         a4:7d:db:1e:cc:f5:44:b5:eb:30:19:94:75:08:ac:92:d5:aa:
         ff:6e:ed:8f:91:68:1c:07:2c:39:6a:2b:fc:5e:37:09:b8:bf:
         af:23:32:a8:0a:32:23:f5:91:e5:e8:aa:d0:4f:8f:d9:1b:ee:
         7b:9f:ad:91:e9:7b:e2:88:8f:c7:13:49:98:f1:6b:d3:2b:b5:
         b8:86:90:0c:31:4e:31:d0:0e:fd:7a:55:bc:43:3d:ee:d2:0c:
         eb:82:51:bb:ed:63:38:31:ad:1a:f4:ea:7f:e0:fc:9d:83:4d:
         a6:c4:02:68:ac:3d:ae:22:dc:00:29:37:21:6b:b0:cd:b5:d9:
         1b:08:28:42:51:ce:af:1c:7e:79:49:c7:71:fc:bf:e3:2a:4d:
         20:58:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:45 2025 by rpki-client