Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File:                     KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier:          MEGUeK1R6Zt5FQBudQw5YUYCkCbjieXU98ObhyeljLY=
Subject key identifier:   4F:AB:79:FA:F3:BF:1B:24:54:4D:9C:0C:4B:61:EE:6E:4D:A2:CD:A8
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer:       /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial:       019846D23878F5F04FEB60F1A9DF6B683DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number:          1590
Signing time:             Sat 26 Jul 2025 13:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:38 +0000
Files and hashes:         1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
                          2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: 12xwFQJpeHtYP/1spoEBR+8BVOuNAAHMWkn75qUFZJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:38:78:f5:f0:4f:eb:60:f1:a9:df:6b:68:3d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
        Validity
            Not Before: Jul 26 13:00:38 2025 GMT
            Not After : Jul 27 13:00:38 2025 GMT
        Subject: CN=4fab79faf3bf1b24544d9c0c4b61ee6e4da2cda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:90:61:60:40:74:61:22:66:53:58:67:c1:
                    c4:60:c2:86:b1:42:67:27:da:9e:ae:0b:1e:d4:42:
                    30:d3:8b:7a:e1:3b:ea:09:c5:10:ed:aa:13:5f:7a:
                    ea:7d:f0:b2:cb:fd:92:13:bd:5b:5a:71:f1:fd:75:
                    37:3c:0b:0e:47:b4:37:46:6a:34:d3:7c:e1:b7:71:
                    4e:78:eb:fa:78:af:63:88:54:3d:c2:84:73:ee:0b:
                    1e:f6:c8:27:59:8b:40:fe:23:7e:4e:fe:69:d8:78:
                    b4:cc:ce:cf:be:41:df:32:e1:fb:55:1e:1a:64:22:
                    61:bb:e3:d9:e1:88:1c:87:a3:e1:ce:a1:dd:8e:a1:
                    45:5b:cd:be:89:0e:47:7b:99:d5:39:a5:d2:53:82:
                    d6:b4:00:a6:96:26:52:73:fa:99:55:49:c8:9a:43:
                    f5:84:38:74:89:c7:62:45:a8:fc:9f:e2:88:b5:e0:
                    7d:15:8c:20:14:62:94:1e:2c:c1:7d:13:0f:e7:b0:
                    22:b3:e6:74:0a:c3:f6:1a:5c:d5:4b:86:35:af:52:
                    70:2d:13:30:97:e7:dc:ac:47:11:dc:40:4b:39:41:
                    a4:bf:92:c7:65:80:fe:db:1d:aa:b2:87:22:fd:d1:
                    8a:c4:7d:cb:bd:80:b3:e8:e6:0c:1a:22:24:20:c1:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:79:FA:F3:BF:1B:24:54:4D:9C:0C:4B:61:EE:6E:4D:A2:CD:A8
            X509v3 Authority Key Identifier:
                keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a9:6d:c3:39:e5:d4:55:2a:11:bc:00:a4:7b:fa:cc:e0:92:
         2b:b3:6b:b8:55:bf:85:54:f5:54:3f:fc:03:30:8b:00:cd:43:
         7d:7e:2d:3b:9c:f7:08:e5:8b:cb:53:99:65:c1:e4:ee:2a:a4:
         17:ad:be:b8:71:f7:4e:05:f0:d9:5b:ac:a7:ca:1d:8e:b5:5a:
         87:24:f8:fd:5b:09:cd:89:64:55:12:b3:77:ba:36:c9:89:83:
         99:c7:76:8d:92:f7:51:49:da:32:55:e7:b3:2f:7e:e1:1f:77:
         66:3f:84:73:42:df:80:9b:db:26:24:22:39:19:fe:00:e3:d5:
         ec:6a:75:02:eb:6e:b0:50:c6:f7:3e:84:f7:f3:73:9a:23:e4:
         49:1a:3f:d6:90:4b:91:19:b1:2c:9c:72:8f:24:95:84:9a:a3:
         5a:74:aa:aa:68:54:fa:69:09:28:48:64:56:29:f4:71:0b:97:
         ad:98:e2:43:3a:1d:aa:f6:b5:4f:51:11:75:e2:a4:ed:22:d4:
         5e:35:bb:e0:87:3c:82:c7:c5:bd:04:1c:13:23:61:30:94:c6:
         eb:a3:7a:76:7b:49:5b:de:f9:5b:24:f3:13:9c:34:9c:c1:b3:
         0c:eb:1a:c1:ae:7f:d7:d6:fb:99:7b:d8:61:c8:c9:13:24:3e:
         57:a1:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:15:17 2025 by rpki-client