Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File:                     KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier:          xhdChqbl+WrPAjBc4pXlKUDkOPFepbP9yQtB3f8AC2s=
Subject key identifier:   21:6C:F4:E2:FA:B0:8E:91:E2:B5:27:30:E1:C6:8A:D0:CB:65:68:CA
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer:       /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial:       019848F7144F5D680846FFAA0CB6BEC57DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number:          0A0C
Signing time:             Sat 26 Jul 2025 23:00:08 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:08 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:08 +0000
Files and hashes:         1: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: nlLvaZlDx9w5Mps34perZkXIursXEYtBrb8NPDf4Dv0=)
                          2: OC0sSBHJnP4b0J24Htst-_z21z0.roa (hash: 5sfWgno4pC4HGZPsmImbzu6t/5UjdQSe45jxPoavsl8=)
                          3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
                          4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
                          5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:14:4f:5d:68:08:46:ff:aa:0c:b6:be:c5:7d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
        Validity
            Not Before: Jul 26 23:00:08 2025 GMT
            Not After : Jul 27 23:00:08 2025 GMT
        Subject: CN=216cf4e2fab08e91e2b52730e1c68ad0cb6568ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:28:e2:ce:b5:78:a7:70:83:62:7b:ee:0d:
                    42:36:d1:ce:8a:5f:30:25:52:63:bb:03:d0:c1:45:
                    c6:d4:52:26:a0:ee:14:8d:ac:c0:bb:bf:22:90:33:
                    c5:d2:66:8c:b3:1e:27:31:4e:fe:66:bd:5f:2e:63:
                    56:ac:a6:9e:5b:98:dc:88:cc:b4:bb:c3:65:e1:3f:
                    2f:d6:31:0e:0f:d8:cf:97:40:7f:95:1e:61:b5:4b:
                    f3:a0:2f:01:ed:ec:f6:b3:82:6c:63:4f:af:d5:27:
                    6e:bb:d7:09:8e:45:b4:bb:7e:58:40:5d:0b:ab:15:
                    ae:d3:9b:f7:2a:ad:e2:3e:b5:e2:f8:a1:0f:d4:22:
                    96:3a:6b:7d:d9:52:7c:51:8d:96:6c:46:a7:90:29:
                    3e:a1:c3:af:54:32:af:f6:44:9d:0b:5f:0d:ce:da:
                    00:62:c3:9c:7c:52:57:6f:91:f6:77:d1:e6:1a:82:
                    fc:ac:0b:a1:3f:70:3b:2b:0b:13:04:8c:0c:7c:50:
                    66:3e:ee:4d:e1:44:de:de:31:1e:29:45:31:0c:51:
                    97:2e:e2:2a:76:dd:a0:a6:0e:2d:80:39:bc:86:b5:
                    04:65:b1:31:7c:12:11:b0:dd:b7:78:76:64:dd:c0:
                    25:85:a3:5f:f0:f8:60:68:d7:62:ef:8f:41:ff:b7:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6C:F4:E2:FA:B0:8E:91:E2:B5:27:30:E1:C6:8A:D0:CB:65:68:CA
            X509v3 Authority Key Identifier:
                keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:de:75:12:ee:40:fb:1a:65:ef:99:1f:6b:6d:d6:e7:10:
         cf:bc:1d:e8:92:64:93:1e:a0:cd:33:32:9f:96:d3:09:c4:e6:
         79:52:fa:0d:0b:71:71:02:07:d2:50:27:9d:ee:64:45:be:cc:
         1f:c5:8b:84:7f:d0:ae:32:df:d5:f1:14:1b:50:bb:0b:bf:ba:
         7c:d2:ae:f6:6b:5d:27:e1:9a:f1:d0:37:99:ba:bc:42:3b:5e:
         ae:1d:eb:36:54:7d:af:09:71:60:6c:3c:0e:b0:31:16:4d:00:
         1e:5c:42:fa:ea:2b:6a:96:b6:e2:e5:f0:66:06:78:52:80:b5:
         56:c7:fb:20:5f:c2:11:eb:39:9d:e3:41:f5:d6:9d:2f:79:16:
         65:cd:4d:22:8d:85:00:5b:84:05:dd:d2:14:7e:d5:f8:e3:92:
         12:ef:b6:9e:58:e2:e0:20:c4:a4:b9:01:a9:2e:06:b6:2f:39:
         c8:85:82:da:cf:b8:78:ae:48:14:a0:f1:6c:22:b9:e3:e1:2c:
         c5:48:f4:4a:db:16:a8:bd:dd:0d:98:b9:98:79:14:d9:a8:2c:
         ac:c1:dc:85:2b:c8:c7:31:67:d5:47:55:b3:25:46:6a:a3:a0:
         1e:77:f2:31:88:6b:10:73:6e:43:4a:96:53:fa:c4:67:58:b2:
         3b:54:6b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9xRPXWgIRv+qDLa+xX3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGJlMjI2MjMwZDQwOTljZWVhMGE0YTZjZjRlZDhiOTAy
MDEzNTAwHhcNMjUwNzI2MjMwMDA4WhcNMjUwNzI3MjMwMDA4WjAzMTEwLwYDVQQD
EygyMTZjZjRlMmZhYjA4ZTkxZTJiNTI3MzBlMWM2OGFkMGNiNjU2OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wQo4s61eKdwg2J77g1CNtHOil8w
JVJjuwPQwUXG1FImoO4UjazAu78ikDPF0maMsx4nMU7+Zr1fLmNWrKaeW5jciMy0
u8Nl4T8v1jEOD9jPl0B/lR5htUvzoC8B7ez2s4JsY0+v1Sduu9cJjkW0u35YQF0L
qxWu05v3Kq3iPrXi+KEP1CKWOmt92VJ8UY2WbEankCk+ocOvVDKv9kSdC18NztoA
YsOcfFJXb5H2d9HmGoL8rAuhP3A7KwsTBIwMfFBmPu5N4UTe3jEeKUUxDFGXLuIq
dt2gpg4tgDm8hrUEZbExfBIRsN23eHZk3cAlhaNf8PhgaNdi749B/7dZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFs9OL6sI6R4rUnMOHGitDLZWjKMB8GA1UdIwQY
MBaAFCsL4iYjDUCZzuoKSmz07YuQIBNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTct
ODFmNTY2MTg1YjA2LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTctODFmNTY2MTg1YjA2
LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAun/edRLu
QPsaZe+ZH2tt1ucQz7wd6JJkkx6gzTMyn5bTCcTmeVL6DQtxcQIH0lAnne5kRb7M
H8WLhH/QrjLf1fEUG1C7C7+6fNKu9mtdJ+Ga8dA3mbq8Qjterh3rNlR9rwlxYGw8
DrAxFk0AHlxC+uorapa24uXwZgZ4UoC1Vsf7IF/CEes5neNB9dadL3kWZc1NIo2F
AFuEBd3SFH7V+OOSEu+2nlji4CDEpLkBqS4Gti85yIWC2s+4eK5IFKDxbCK54+Es
xUj0StsWqL3dDZi5mHkU2agsrMHchSvIxzFn1UdVsyVGaqOgHnfyMYhrEHNuQ0qW
U/rEZ1iyO1RruQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:37 2025 by rpki-client