Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          mHzLJTxVI99xJdD2NklCG6U2du26goyuuPct4CC9UhM=
Subject key identifier:   D9:06:0F:85:EB:24:9F:8C:0A:C0:47:35:0C:FD:C6:32:1D:10:DD:2D
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       0198C5A29B156DE4A82E2ED4B8007C043D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          136D
Signing time:             Wed 20 Aug 2025 04:00:24 +0000
Manifest this update:     Wed 20 Aug 2025 04:00:24 +0000
Manifest next update:     Thu 21 Aug 2025 04:00:24 +0000
Files and hashes:         1: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=)
                          2: UGR0Nm7XgEo_C52g4hZe_Rs5ZcQ.roa (hash: LA6rXbOmVl2jO/KpnJDcjc8gvW16w8N7yWXEbyRFi7Q=)
                          3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=)
                          4: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (hash: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=)
                          5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: 4lRTi7du1EFYIC/xYygbqsUFl5CXDvq4+sBffAukp2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c5:a2:9b:15:6d:e4:a8:2e:2e:d4:b8:00:7c:04:3d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Aug 20 04:00:24 2025 GMT
            Not After : Aug 21 04:00:24 2025 GMT
        Subject: CN=d9060f85eb249f8c0ac047350cfdc6321d10dd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:0c:fa:c0:42:68:d9:da:27:b0:74:ff:ba:
                    39:c1:22:a6:08:61:ff:7b:f2:fa:63:50:46:cc:28:
                    5c:25:f7:8d:33:89:66:8a:f1:16:c6:40:86:68:e9:
                    7c:0e:72:c5:b3:ee:2e:f9:1c:81:37:62:6c:44:e8:
                    86:35:34:2c:d4:37:6d:ea:9b:7a:0b:8b:2e:5e:1a:
                    b9:53:0d:d3:8a:32:3f:ce:a6:13:22:6a:f3:02:9d:
                    00:c0:fe:f1:d4:6b:e7:82:ab:8e:d9:67:e9:5f:1f:
                    ea:f3:82:ea:ec:ab:97:8d:c4:8a:6f:3f:a9:5c:8d:
                    74:63:21:01:2e:bd:df:61:27:9c:a3:ce:3f:51:17:
                    e1:00:3a:cc:d8:7b:9e:a6:3c:c7:e3:40:c9:dc:9d:
                    45:2f:69:24:62:d2:4f:24:a2:89:a7:ad:a6:f7:e7:
                    11:2a:f7:0c:99:cb:64:d8:00:a1:af:bb:50:b3:e5:
                    e9:1f:29:4c:fd:f4:76:97:f3:c3:7f:12:0c:e8:56:
                    e8:39:81:9a:53:83:3d:d5:d7:9d:68:d4:c4:8e:2f:
                    8b:1d:ac:03:2d:d5:8c:7d:86:3b:a6:8d:72:e5:f4:
                    ce:00:94:b5:22:1d:ed:45:d8:1f:6f:03:42:82:d5:
                    3d:c6:06:e8:2d:13:71:c4:90:60:2c:ee:e9:3f:ca:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:0F:85:EB:24:9F:8C:0A:C0:47:35:0C:FD:C6:32:1D:10:DD:2D
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:63:53:e8:31:93:66:14:35:f7:7e:f8:5a:f5:95:c3:61:5a:
         cf:1f:bd:94:12:40:81:9d:0a:13:3d:5b:36:3b:9b:f2:6e:82:
         b2:8c:74:68:d2:55:41:be:bc:98:01:c9:ea:41:04:7a:69:ca:
         b2:c3:eb:37:dc:fe:3e:43:71:4c:cc:93:07:3d:85:a8:9d:db:
         a3:87:90:1a:66:e2:96:d3:c4:2c:4c:a1:96:09:3e:4d:1c:66:
         65:48:a8:ae:5b:0f:70:34:8d:57:22:58:78:31:06:9b:dd:44:
         2b:35:b3:61:a2:df:c2:ee:da:1b:24:3d:5a:ab:0d:cb:87:4a:
         da:54:fa:5b:f1:15:9a:81:35:64:3e:c6:0b:1d:03:eb:0b:b5:
         02:b0:dd:af:93:83:4d:ec:d7:76:bb:34:d7:70:99:b2:c4:02:
         31:88:82:96:1e:8a:6d:4e:2a:c7:50:46:fc:ed:c6:74:a0:3b:
         76:52:da:50:21:77:3b:f4:38:02:5f:5e:c1:93:5e:f2:8a:f7:
         fd:95:d3:2a:cc:49:53:43:ef:d4:41:4c:b4:51:72:49:e0:11:
         6c:56:b7:bd:a7:85:ec:5c:d9:7e:bf:55:cf:1f:36:25:bf:61:
         4d:97:11:3b:75:23:f7:2e:bd:1d:19:8a:4c:76:e4:7c:11:1e:
         e6:38:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:21 2025 by rpki-client