Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
File:                     KseP1RenX3fz9P0imsXmcyVgxuE.mft (raw, json)
Hash identifier:          itwU7kcx4/9Vp/Ss8c+gswf9b0qnm8lmtOMwmi9APfo=
Subject key identifier:   CE:E9:4C:BC:E2:7E:3A:CA:16:A0:B0:51:26:66:E3:BB:16:F2:4E:51
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Certificate issuer:       /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial:       01992255529FB3F0D5D976670E6F9A0F4007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 04:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:40 +0000
Files and hashes:         1: IgyiZQsGF35ZpqMjFvvmpe-Uiy0.roa (hash: pAyIL1yLWM74WtAtlIRzPUKtL/NRSv2opfBvsE4P7Hg=)
                          2: KseP1RenX3fz9P0imsXmcyVgxuE.crl (hash: mNIYFAF8qExSgnmdBBOFExB/iyS8yDsLRudu+T8FDig=)
                          3: LQeosQtAPfSnVgSVDz2OO819_2c.roa (hash: Tkr19vAUAWlnJvYoR9UT3slqIpIAZEXQA2P0LTiz6vk=)
                          4: RCGJFAFAV6aiMpIUxmySWlcVGcg.roa (hash: QvC8yM0b6tNvgcZ8K0setdROoeG+A+pCENVWYJBxdUY=)
                          5: TG0C9piKaVRjDBAoOKXP984iuIo.roa (hash: EaPKdJGvcjOx3gx7VBDHr9Ib+3e6fswqULU49tGRtHE=)
                          6: W8cH_RfNNK2PVtZ4dkQnNuqrxnc.roa (hash: 7tsNb5ZcCAlwiASwz40Hk6RbBRk52zjaoiAuvE/+RQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:52:9f:b3:f0:d5:d9:76:67:0e:6f:9a:0f:40:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
        Validity
            Not Before: Sep  7 04:00:40 2025 GMT
            Not After : Sep  8 04:00:40 2025 GMT
        Subject: CN=cee94cbce27e3aca16a0b0512666e3bb16f24e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:92:ff:6b:a9:c1:63:3c:a1:34:58:4d:42:
                    31:1d:47:4f:5b:89:0c:d1:68:1b:73:f3:1e:81:77:
                    44:e8:d6:58:91:ee:81:67:87:5b:9d:8f:02:78:db:
                    ce:f9:47:5a:ae:9c:5e:85:2c:82:f8:00:c9:ab:d2:
                    05:ba:24:d7:a5:dd:0f:40:c6:e0:8d:db:f1:82:99:
                    b6:ce:0f:90:97:8c:cb:a3:1c:bf:c3:52:33:01:2a:
                    ee:98:aa:d6:10:76:71:36:34:6f:5e:7d:2f:dc:c3:
                    6a:93:5c:56:21:10:ad:3e:f2:e4:6e:bc:fd:e5:fd:
                    93:b0:13:54:01:7b:09:d4:b6:d1:17:f9:dd:8f:59:
                    fb:4a:bd:86:88:72:5c:3d:89:c1:7d:9b:e2:d6:ff:
                    55:ac:3c:6f:ee:a9:b6:ab:20:e2:01:c0:f8:6a:b5:
                    15:53:d1:69:1e:f7:e8:86:4f:84:36:f7:ef:06:36:
                    3a:e4:f1:0e:8b:a2:9f:bf:71:db:b3:b7:30:cf:27:
                    3e:69:06:6e:cc:74:06:59:64:21:8d:39:39:4e:05:
                    cb:2f:cf:48:28:39:82:3f:24:41:d1:c9:70:06:fd:
                    91:5c:f1:55:5a:aa:dd:8e:54:41:54:7a:ee:f3:7d:
                    88:e0:6c:88:36:77:d2:47:50:8d:ee:b8:06:25:80:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E9:4C:BC:E2:7E:3A:CA:16:A0:B0:51:26:66:E3:BB:16:F2:4E:51
            X509v3 Authority Key Identifier:
                keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:b8:49:17:58:a6:35:f0:34:c6:15:a3:d4:d7:0e:1e:99:
         33:c6:7c:0e:c4:f7:79:93:72:ca:00:55:f5:89:45:cc:30:8e:
         5b:0c:9a:ce:2b:68:d8:af:ef:8a:72:27:af:33:14:dc:96:ea:
         f9:92:7e:2f:c4:33:a7:fb:ef:29:8a:dc:72:71:e6:21:03:e3:
         79:8b:b6:8d:e6:19:24:4a:59:3e:dc:c7:35:49:97:43:9f:bb:
         87:31:5d:5c:64:e5:83:fa:99:cc:e6:1f:4d:98:79:65:c3:d3:
         cb:ed:41:93:22:fb:96:0d:bd:ea:8a:72:d9:9b:80:29:32:54:
         77:d7:11:36:32:be:ed:a5:9d:30:1b:83:4a:1f:1c:c6:7c:0f:
         db:ac:e6:ef:bf:1b:fd:75:9d:ab:87:a2:f8:10:30:b3:2d:b8:
         5d:cd:88:a2:ae:32:28:a6:84:cc:44:32:66:71:b4:37:92:be:
         b2:8e:80:da:fd:ff:21:ba:45:76:e9:61:75:26:ac:98:b2:62:
         0a:b8:99:85:f2:cb:c4:09:d0:28:d6:d3:34:c0:61:4e:07:37:
         d3:98:57:16:c6:9a:b8:00:58:27:be:66:fc:a7:08:76:8a:a5:
         36:e8:ae:0e:e1:f7:17:69:52:5f:1b:c6:61:d1:1f:9d:08:29:
         ff:d5:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:39 2025 by rpki-client