Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          QyJIjNLMdNXsWQAdj3qiqTX5ZwtjZFD/vZsbONrThdg=
Subject key identifier:   51:14:E7:91:62:53:E0:C2:26:48:36:06:F7:A4:87:07:71:C5:00:8D
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       01994850B0198BD59F0CA9156B4322226C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          0260
Signing time:             Sun 14 Sep 2025 13:01:11 +0000
Manifest this update:     Sun 14 Sep 2025 13:01:11 +0000
Manifest next update:     Mon 15 Sep 2025 13:01:11 +0000
Files and hashes:         1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=)
                          2: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
                          3: EY-GYc_OgBsb1UIfjvb41Bwimi4.roa (hash: oR/jgqozL9leyl3DMc7LefEzsfH3jn7fBo/d5r37udY=)
                          4: WUcwdVxjGm9MT5dj0KuN5kY8fc0.roa (hash: Va0HPLXWY6KmecVQh7TSAW6BzjPwycNZWbVEYlVLjHk=)
                          5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: C6X5v+1epkoOtwWKMlSAh4+UTAq+G1moXEaZ36j3GQ8=)
                          6: poqG69mPnb95YSUs8FdptFbAqUw.roa (hash: mqMSlTGBPTy+EqcBaFtlD8JVQdwDJPdpMrV37KzvxOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:48:50:b0:19:8b:d5:9f:0c:a9:15:6b:43:22:22:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Sep 14 13:01:11 2025 GMT
            Not After : Sep 15 13:01:11 2025 GMT
        Subject: CN=5114e7916253e0c226483606f7a4870771c5008d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:5f:f8:57:22:b1:7a:aa:27:1e:ce:8d:e2:
                    ba:3f:ef:b9:d6:79:68:3d:b2:02:de:98:b6:60:b9:
                    b5:a5:5b:93:56:74:d8:ab:39:4b:73:86:5b:f6:8d:
                    9e:16:8b:f6:49:e2:ed:28:e0:92:91:7c:a2:cf:bb:
                    35:3d:0c:c3:3a:71:52:82:3f:f4:18:60:cd:28:9a:
                    b2:ee:f8:21:04:ab:b0:eb:7c:e2:49:54:fe:2a:aa:
                    83:34:88:62:41:1c:dc:bd:e7:a8:d4:05:94:03:dd:
                    3f:b6:2b:a9:17:3c:e1:34:e0:63:2e:38:9c:a8:e9:
                    d4:ca:13:36:e0:26:3d:5f:8f:a7:f6:75:43:6b:6f:
                    a2:65:bf:57:97:8c:18:8b:30:1e:4d:15:d5:51:4f:
                    1d:7b:29:cf:44:6b:f6:ca:aa:46:16:3e:ca:80:06:
                    59:59:b4:71:73:8b:61:d9:74:97:fd:11:95:cb:99:
                    c6:9e:6b:eb:a3:79:60:09:24:0c:78:0e:1d:cb:c2:
                    2a:d1:ca:31:f9:8b:26:f1:38:8e:7f:b9:9c:d6:05:
                    d8:f2:8b:2b:36:73:04:d9:d6:7b:ad:59:be:38:5e:
                    a2:85:e8:6c:24:9c:df:ec:e1:eb:28:b8:c5:c2:eb:
                    f9:c3:24:17:2e:10:e6:f2:9f:d1:4f:2c:b9:0e:94:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:14:E7:91:62:53:E0:C2:26:48:36:06:F7:A4:87:07:71:C5:00:8D
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:04:66:0f:59:f1:dd:3e:1f:39:e2:1d:59:93:1b:90:7f:
         1f:76:d0:d1:80:b4:f0:80:04:e9:13:f5:7a:39:4b:51:dc:aa:
         f9:d5:09:13:c0:7b:58:97:59:40:dd:b7:dc:a5:ed:29:85:b1:
         4d:ad:bf:25:3d:27:89:ea:b8:10:5a:ff:50:43:de:dd:65:e3:
         75:6e:1a:1c:53:cb:e2:39:4d:9e:86:d5:2b:99:a9:c3:4c:81:
         f7:48:bc:70:78:93:43:f1:75:09:21:81:97:1e:25:d9:7d:fa:
         4a:7c:cf:de:78:1c:9f:05:32:6b:f6:26:97:3d:ac:5b:19:89:
         3c:e9:33:88:11:be:7f:20:eb:8b:dc:04:69:b1:82:18:46:a3:
         dc:9f:09:ee:c1:59:e8:62:4c:9c:cc:49:4d:44:bd:de:b6:ff:
         03:aa:dc:1e:cc:16:d5:cf:56:f8:65:d5:66:64:7b:ea:1b:5f:
         e4:62:11:23:06:b9:d4:31:c6:af:9b:e1:43:53:34:c7:ac:89:
         df:ed:dc:36:b1:28:f5:8c:35:80:b1:01:ea:e3:96:ac:b3:56:
         de:11:d6:61:cd:3d:99:05:4d:5d:b0:82:54:a3:de:de:35:bf:
         65:4e:43:40:c8:ae:17:81:42:19:f3:ff:47:fc:ca:57:bd:19:
         78:02:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 15:32:14 2025 by rpki-client