Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          qNydCrgnFBFsTmRB2G00YfTNegNSIVHxU17teqIX6m4=
Subject key identifier:   EF:FD:12:14:A1:A6:68:97:3A:1A:0D:AF:91:3A:F8:32:42:78:7F:9D
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       01983683A480797E726023477BCD0CEE6625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0B57
Signing time:             Wed 23 Jul 2025 09:00:53 +0000
Manifest this update:     Wed 23 Jul 2025 09:00:53 +0000
Manifest next update:     Thu 24 Jul 2025 09:00:53 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: sQDUd3b5oBz2S0BOhmyt/VE3fi2R1+1hGmMenWYTbfg=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:83:a4:80:79:7e:72:60:23:47:7b:cd:0c:ee:66:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Jul 23 09:00:53 2025 GMT
            Not After : Jul 24 09:00:53 2025 GMT
        Subject: CN=effd1214a1a668973a1a0daf913af83242787f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:e8:f7:85:6d:ee:4a:30:47:9f:32:dd:d0:
                    96:63:a8:e7:ce:1f:b6:2c:62:6e:c7:c9:64:ab:a0:
                    80:58:6c:38:c1:a5:ff:52:e4:83:6a:be:97:11:8c:
                    89:11:48:d8:ee:1f:a7:7e:bc:7f:74:7e:46:01:60:
                    ef:cc:3a:1c:95:ab:ce:5c:4d:87:ff:67:dd:03:fe:
                    ca:bd:95:1a:e8:3c:de:41:e8:c4:8b:e5:9e:62:70:
                    f4:86:dc:11:f0:4a:53:89:44:39:05:a1:e4:a6:05:
                    05:4f:3a:8d:d8:0b:b6:35:d7:4c:47:be:c3:6c:16:
                    39:2e:fc:71:24:c6:2f:83:71:e2:d8:12:87:2a:de:
                    6d:8b:34:a1:f9:45:68:f6:c7:e0:ec:4f:69:bd:9a:
                    8e:93:f1:3e:2b:6a:44:c5:28:02:a0:e3:00:1c:48:
                    fc:d2:a4:11:f9:a3:50:73:c8:2f:a5:1d:30:a7:f5:
                    10:2f:87:6f:69:bd:96:3b:3f:31:d3:4e:46:42:8a:
                    64:7d:ec:fc:e1:12:a2:28:e9:2b:b2:28:68:8c:81:
                    42:7c:99:e6:01:86:1f:34:ea:2a:c7:51:f3:36:87:
                    c4:0c:9d:d8:dd:f8:c4:93:cc:55:03:bb:f9:e0:51:
                    7a:15:e1:d2:9b:3e:c0:43:bb:c8:ec:fd:96:d3:e6:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:12:14:A1:A6:68:97:3A:1A:0D:AF:91:3A:F8:32:42:78:7F:9D
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:9a:79:2f:17:bd:95:77:fc:11:a2:22:c0:51:b3:e1:ee:
         62:c3:89:5a:64:75:9e:47:24:79:33:8a:b5:b1:0a:fc:c9:b9:
         60:38:41:36:44:8f:81:ef:24:78:fb:ab:e3:00:1e:eb:b6:dc:
         e1:1f:e7:3a:bb:de:d3:86:75:2e:6a:30:a1:fd:8d:70:64:14:
         f5:dd:7b:76:11:5f:de:2b:3f:76:cf:a3:ee:2d:88:a2:da:6f:
         0b:17:7f:e4:1e:1d:5e:f1:77:32:41:b0:d3:3d:8a:67:64:b8:
         70:73:d1:9f:a0:0f:e5:30:2b:67:0d:35:f6:79:2e:45:d7:0c:
         4b:5b:11:74:70:c4:75:ff:ad:07:d7:eb:31:cb:22:83:13:90:
         ca:c5:af:46:4a:dc:60:8e:01:93:8c:f2:ad:40:e7:d1:1f:57:
         c5:9c:6e:a8:ab:f0:8a:f7:bc:97:9a:0b:23:40:f9:f7:7f:56:
         77:c5:a4:32:a7:b8:ed:44:fb:2d:9c:c7:41:94:84:3a:10:fa:
         7d:91:a2:db:6c:25:ba:b3:84:84:6b:3d:b6:16:8f:23:c3:8e:
         e7:01:19:00:a5:66:03:19:0e:15:5d:bb:de:cd:ba:a9:40:1a:
         a9:23:07:37:93:39:15:d5:b2:c2:86:06:a9:1e:e2:b4:42:97:
         3e:bf:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:49:52 2025 by rpki-client