Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
File:                     kYKD14XMiO-FIIYqwWHye1YwvBQ.mft (raw, json)
Hash identifier:          F5NwBboiGgcl9X2qUiQGdr0vsZt6QJveI4qFeu4LRkc=
Subject key identifier:   01:41:4B:0D:45:7B:22:D6:25:19:06:2E:B0:79:D1:5B:FE:B8:50:1D
Authority key identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
Certificate issuer:       /CN=918283d785cc88ef8520862ac161f27b5630bc14
Certificate serial:       01974A7ACCE2C9EE6CBD1D5FDBBC75B2DEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 13:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:51 +0000
Files and hashes:         1: 7BBxm-pOfIQ_PKZVSyNJpMaI0IU.roa (hash: RHWzpm6xp1Dxz5mtJzESRJSHt2NjPD2I75shupyZFg0=)
                          2: kYKD14XMiO-FIIYqwWHye1YwvBQ.crl (hash: hDJkMbp5/6s1QcpT5Hb66Hmolq4faua1mSZhIoBmmTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:cc:e2:c9:ee:6c:bd:1d:5f:db:bc:75:b2:de:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918283d785cc88ef8520862ac161f27b5630bc14
        Validity
            Not Before: Jun  7 13:00:51 2025 GMT
            Not After : Jun  8 13:00:51 2025 GMT
        Subject: CN=01414b0d457b22d62519062eb079d15bfeb8501d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:e2:9d:08:40:d0:37:dc:a1:84:a7:df:97:
                    f8:c3:49:69:c1:e2:d2:53:9a:63:21:74:0e:3c:e7:
                    95:41:38:27:37:61:dc:8f:41:7b:cc:ed:45:49:0c:
                    6b:23:d6:24:df:38:8d:7e:da:a0:bd:52:fc:45:36:
                    af:27:f6:fe:87:c6:b7:8f:48:71:28:15:46:4f:ac:
                    ca:ef:b8:e6:9b:1b:69:9f:b4:70:36:79:83:e1:1b:
                    7a:04:e2:11:1e:54:0b:1a:76:47:89:d5:56:2d:3f:
                    33:cb:c3:1a:c2:cd:24:f4:69:ca:c5:b3:8f:2e:1d:
                    a3:e2:85:0e:df:78:e8:69:de:62:9c:1a:c1:c0:5d:
                    93:7b:a4:ac:6d:05:70:86:93:23:1d:91:db:b7:80:
                    26:b0:3f:dc:c8:b8:66:35:66:a0:96:04:50:0a:75:
                    38:c2:6d:e4:9e:57:22:93:70:88:23:bf:45:26:21:
                    b0:8b:ed:cc:60:25:c4:ed:35:0e:b1:13:ac:4a:e8:
                    71:61:2a:5f:f2:19:c0:27:0a:c4:12:c0:81:ae:c7:
                    a5:d0:cb:53:f4:24:93:c0:65:57:1e:60:86:20:8b:
                    bb:72:11:ac:3e:cc:70:18:d3:b2:bc:2f:15:65:6f:
                    75:ce:c7:28:cd:ee:ca:7c:1a:0f:eb:d3:c8:66:50:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:4B:0D:45:7B:22:D6:25:19:06:2E:B0:79:D1:5B:FE:B8:50:1D
            X509v3 Authority Key Identifier:
                keyid:91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:4f:ad:75:bd:d8:f7:82:62:2b:f5:b0:2e:58:f7:5c:f3:
         50:d3:b3:a3:72:ad:ca:f3:4c:ab:5a:a1:87:d5:da:09:6b:7a:
         0b:3a:b2:18:f4:b5:9a:d5:b6:8c:a8:f8:94:2d:72:6f:a1:07:
         01:4e:63:f0:f1:d8:72:44:f0:87:f7:c6:48:cc:25:23:3a:eb:
         9d:82:2a:ed:52:8f:bc:80:51:44:7d:b3:10:bd:06:17:c7:4d:
         ad:d1:e5:c0:76:ec:93:ab:4e:e3:a2:97:b0:a9:ed:9b:91:a6:
         9e:4f:84:b2:e5:7d:c8:e0:1e:d1:c5:fd:99:21:9f:b5:8a:38:
         09:9d:ae:20:d7:cd:ec:78:5a:3a:e6:1f:8b:78:cb:78:6e:77:
         2e:62:d6:21:5f:9b:e9:b3:dd:f7:3f:cc:23:4a:d3:3e:2e:e5:
         8f:1b:e2:38:91:42:f4:f8:7f:bd:6b:14:55:b7:16:5a:9b:0c:
         49:f9:5d:d6:01:5e:ae:16:eb:7b:d8:29:bf:98:d5:b1:31:32:
         e2:ac:0f:9c:f8:7a:e0:a4:7e:89:f2:46:72:7d:4d:c5:ca:38:
         9e:6b:2f:80:73:fb:ae:7d:0a:8e:5f:c0:f9:f1:e6:41:2f:94:
         2a:9d:8a:14:4e:14:6d:ec:74:68:eb:1f:2e:c5:8d:8e:eb:49:
         7e:91:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:50:58 2025 by rpki-client