Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          Cuw8Zdzi/g9I20fq7f7p/3v0RrU/yAacNhBNUG+zAiA=
Subject key identifier:   F9:20:C1:2F:47:B0:7C:46:E4:01:E0:52:24:E8:9D:57:6E:07:2B:D5
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01991F8AF4419B692F95BC116A54AB3F0D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          0427
Signing time:             Sat 06 Sep 2025 15:00:24 +0000
Manifest this update:     Sat 06 Sep 2025 15:00:24 +0000
Manifest next update:     Sun 07 Sep 2025 15:00:24 +0000
Files and hashes:         1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: Jbq2u863Kj8JVkDTFjOqy0hhKqrGP8fU9SqyRd8+pUw=)
                          3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
                          4: ht_JyDW5SHb_fGBhQyUDtshRG0E.roa (hash: Z6WBdYQ46aWUfuhec+LPbx2Hp5R+pjpCIAS0/BT2vi4=)
                          5: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:8a:f4:41:9b:69:2f:95:bc:11:6a:54:ab:3f:0d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Sep  6 15:00:24 2025 GMT
            Not After : Sep  7 15:00:24 2025 GMT
        Subject: CN=f920c12f47b07c46e401e05224e89d576e072bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:24:86:13:ad:8f:a9:76:0d:05:f4:02:5c:
                    57:34:83:95:3a:36:51:d1:70:56:07:bf:56:cd:bf:
                    34:2c:60:08:43:52:bd:46:46:66:63:b9:01:64:2f:
                    b8:f1:53:84:b8:30:e9:76:4a:94:96:9f:51:1c:a2:
                    a0:a3:a4:b4:14:0d:04:ed:5b:84:b0:68:b1:01:07:
                    b1:ab:ab:63:5f:af:2a:a4:31:cd:45:8f:69:0a:45:
                    c1:7d:80:08:4b:b1:69:dd:98:12:4e:1d:c1:65:d5:
                    96:2b:c9:aa:41:a6:e0:77:9f:a2:37:64:88:ed:b0:
                    5b:ff:97:3f:dd:48:cf:4c:ca:f4:af:ce:7c:33:f6:
                    62:95:92:90:2a:f1:dd:40:d2:ff:68:fe:ac:bc:df:
                    5a:cc:d3:61:79:18:b9:fa:d9:3f:2a:ee:98:55:c3:
                    b6:b9:ef:36:9f:83:dd:c1:c5:30:d8:3e:af:3e:95:
                    67:8c:dd:97:98:0c:72:54:9a:0e:1c:4c:6a:4a:e9:
                    9c:e3:64:27:2d:ae:a4:a5:1e:22:ce:ad:c5:99:d4:
                    42:07:5a:76:21:b5:e5:21:1c:19:0f:43:c3:1a:2f:
                    68:ff:ac:2a:ca:30:e9:13:b7:18:e1:cd:33:24:15:
                    8d:53:78:fe:70:45:d1:05:b8:b6:6c:0e:b7:97:67:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:20:C1:2F:47:B0:7C:46:E4:01:E0:52:24:E8:9D:57:6E:07:2B:D5
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e1:ec:3a:fc:6b:bd:76:26:de:60:65:f9:62:c1:9a:5e:be:
         7c:fd:0a:25:25:ac:8d:da:01:9d:c3:22:b1:96:8e:2b:59:69:
         b9:7c:e7:11:3e:d8:8d:17:6d:a9:c4:b3:06:e3:a1:26:a9:3e:
         f5:36:d3:91:f8:6e:5e:75:7b:64:7e:63:39:2b:ee:86:c4:ce:
         cb:17:34:44:c3:27:bd:20:f0:3e:74:f5:33:4b:ab:7c:86:a5:
         76:65:ac:4f:99:31:34:56:1f:3b:c4:6d:9e:bf:78:b1:70:53:
         21:df:a4:c3:03:d8:8b:78:68:74:45:ee:8d:d9:70:9a:8b:92:
         4d:7d:7f:67:5d:1c:ec:f1:46:ab:ea:bd:4a:f8:e2:35:20:df:
         36:b9:7a:fe:47:67:c4:2e:ef:ec:8b:42:a2:15:6c:77:30:58:
         44:98:82:ae:17:2c:33:ef:ed:3b:24:e0:36:d3:9c:a0:67:3b:
         a4:bf:31:7c:8f:1f:c3:c9:b2:23:df:ce:e2:6e:cf:71:dc:d1:
         b0:08:32:68:82:15:4c:c4:fe:20:d2:e9:44:27:ae:87:2e:82:
         44:4a:13:07:31:6f:10:8b:f4:ce:5f:dd:c6:48:05:ee:a9:ec:
         04:07:ca:64:d7:f5:d1:a4:46:64:da:e5:01:c5:bf:3c:04:44:
         ce:f6:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:54:28 2025 by rpki-client