Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File:                     kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier:          RHucMJrt7bGq0zyVUcq/JLTKMwl2bm8p6692hGYUmWE=
Subject key identifier:   AB:AC:D3:61:26:8C:79:F4:BA:DA:09:C4:18:20:F7:BA:E9:3F:DB:E1
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer:       /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial:       01991B09D9784056B7C2AC6BDAE1AE70F639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number:          1671
Signing time:             Fri 05 Sep 2025 18:00:54 +0000
Manifest this update:     Fri 05 Sep 2025 18:00:54 +0000
Manifest next update:     Sat 06 Sep 2025 18:00:54 +0000
Files and hashes:         1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
                          2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
                          3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
                          4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
                          5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
                          6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
                          7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
                          8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: 49e1+aIIZMraiWJ9sdc94qveppwtj1xriTQ3R7Ae7GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 17:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1b:09:d9:78:40:56:b7:c2:ac:6b:da:e1:ae:70:f6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
        Validity
            Not Before: Sep  5 18:00:54 2025 GMT
            Not After : Sep  6 18:00:54 2025 GMT
        Subject: CN=abacd361268c79f4bada09c41820f7bae93fdbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:5e:24:16:d2:5a:e7:1a:9a:a6:8e:46:23:
                    75:e7:d6:56:a3:0e:4d:da:7c:b9:e0:3f:85:9c:9a:
                    a3:a8:b7:0c:28:88:7a:6f:5b:a9:ab:d7:9b:e1:af:
                    ce:c6:46:ca:13:2f:4a:5c:1a:4e:aa:13:81:15:bc:
                    88:bb:f2:78:a2:da:98:d1:d8:bb:66:3c:14:d2:cf:
                    f3:17:16:64:22:f9:b8:3e:44:48:64:99:ad:90:dd:
                    e9:8c:2b:21:29:42:57:36:67:d8:37:35:61:eb:5d:
                    71:7b:5b:c1:99:e8:2c:16:16:bc:46:58:6b:9a:a1:
                    a1:ac:38:42:8f:9e:dd:b9:0f:7e:80:79:05:43:b2:
                    9e:08:90:86:3f:73:18:46:34:51:4c:ec:05:cb:da:
                    e0:5c:62:db:77:62:ea:42:81:a6:74:fc:2f:b0:44:
                    79:55:58:c4:bd:1c:f1:d2:85:89:7e:be:a5:08:51:
                    59:80:8a:82:ed:43:ae:09:7c:ae:1e:5e:3e:da:fc:
                    96:10:ab:65:55:09:0c:f1:60:4b:c7:af:e2:f2:cd:
                    d4:f7:62:40:c3:c0:cd:48:37:2c:d4:9a:56:4f:86:
                    09:e3:2e:86:f3:5f:5c:db:02:58:08:e5:fa:8e:60:
                    fc:b6:b0:5b:f7:fc:0a:fb:e6:44:f6:eb:12:14:48:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AC:D3:61:26:8C:79:F4:BA:DA:09:C4:18:20:F7:BA:E9:3F:DB:E1
            X509v3 Authority Key Identifier:
                keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:ac:44:7b:7c:44:8b:67:bb:ba:d6:15:4d:87:7a:92:4d:
         13:93:8c:9e:f8:56:ee:a1:93:b7:68:d8:d8:51:f1:50:e1:81:
         d2:db:75:d9:1f:9d:89:2e:e6:e4:ba:5c:e1:24:bf:fa:f8:5b:
         37:ca:b2:fe:f5:f2:1d:52:6e:16:36:00:de:66:6a:f7:96:09:
         b9:e1:96:1f:3c:83:34:43:cf:59:83:49:4e:25:25:4f:90:47:
         9a:19:c0:e0:c7:ce:ec:7c:13:e7:32:e7:5f:32:2c:a7:94:2d:
         cc:33:5e:11:64:ef:b4:8c:b4:cd:10:82:d7:fd:05:5f:df:59:
         77:55:cb:ea:90:dd:45:46:28:b6:d8:87:fb:e8:6a:e8:d2:36:
         69:3c:7d:86:c6:6a:a5:59:fd:fb:f0:68:fe:b1:39:a3:0f:c5:
         e4:43:c2:37:9d:e4:8e:1c:2d:e6:85:5f:3c:10:06:56:6a:bd:
         7e:a6:3d:74:42:b8:92:a4:49:97:94:49:2b:b1:22:b0:5e:9e:
         f5:af:47:fb:12:80:db:a6:cb:af:f5:12:77:b5:3f:3c:28:2f:
         bb:06:8e:4d:e0:4a:38:ef:d1:db:53:68:5b:cc:4e:98:c6:fd:
         f1:cc:bd:75:cf:3c:d2:f8:a3:c5:e5:92:6f:29:dc:64:82:8c:
         02:ca:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:57:16 2025 by rpki-client