Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File:                     KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier:          Ej9JQRD/cI1BVuo54uTdrKRyqQWwGXKgMWs/GUh87Wg=
Subject key identifier:   29:44:7F:8B:31:6D:31:F1:A5:3C:15:62:E8:2E:5C:50:C9:ED:AC:37
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer:       /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial:       019A1F88E6FA89385161F40C7D908A305889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number:          1434
Signing time:             Sun 26 Oct 2025 08:00:56 +0000
Manifest this update:     Sun 26 Oct 2025 08:00:56 +0000
Manifest next update:     Mon 27 Oct 2025 08:00:56 +0000
Files and hashes:         1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
                          2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
                          3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: W1l+AFK5CWLMkM89qBcpl9Y14YiEQJDiQwVf3H1/Jus=)
                          4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
                          5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
                          6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:88:e6:fa:89:38:51:61:f4:0c:7d:90:8a:30:58:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
        Validity
            Not Before: Oct 26 08:00:56 2025 GMT
            Not After : Oct 27 08:00:56 2025 GMT
        Subject: CN=29447f8b316d31f1a53c1562e82e5c50c9edac37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:d7:b0:0a:83:54:57:74:14:d3:89:78:71:
                    c6:97:4b:8a:56:62:76:a4:a0:19:29:9b:1d:8b:dc:
                    ee:e0:db:c7:8b:2c:4c:b2:3c:38:eb:2d:95:d8:bc:
                    f7:ae:5e:0a:8a:8a:c0:02:04:a7:e4:57:dc:46:c3:
                    fd:f3:83:58:05:cd:35:6b:bd:0d:5d:67:c6:43:eb:
                    bd:4e:e7:ee:24:2e:f9:ae:dd:cf:11:9c:b9:7b:f2:
                    9d:a4:a0:99:bf:12:12:ca:ce:04:53:ae:98:ba:04:
                    0b:e3:cf:41:20:b3:e7:29:85:bc:af:a1:4f:5e:1d:
                    f0:17:0e:61:59:0c:e3:fb:e4:ff:bb:d8:71:83:d1:
                    c5:30:d4:8d:ed:4f:58:a2:4d:55:d2:32:e5:24:cc:
                    01:51:5b:27:96:2a:ea:b4:50:c2:b0:44:57:91:46:
                    e7:bc:a3:f7:a1:bc:15:b2:3b:8e:27:7e:37:0f:f8:
                    cf:59:d7:cb:21:09:23:5b:c2:a2:4d:ad:31:c3:8b:
                    78:de:4d:bb:6e:32:88:f9:3f:63:64:a3:29:83:db:
                    af:19:d8:10:7f:29:a5:8b:55:1b:63:ed:8f:3f:46:
                    51:7e:90:44:44:e8:82:d1:b6:6f:a9:b1:1d:b6:30:
                    eb:d0:cf:cb:79:af:85:85:82:27:07:6c:10:3a:c3:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:44:7F:8B:31:6D:31:F1:A5:3C:15:62:E8:2E:5C:50:C9:ED:AC:37
            X509v3 Authority Key Identifier:
                keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:55:e7:2e:2b:0c:88:96:ea:16:3a:fb:28:68:ae:68:94:39:
         e8:96:b6:ad:2d:03:59:cb:88:52:a3:1c:a4:02:05:45:f0:dc:
         29:70:9a:86:0a:93:89:ad:cf:c6:c9:8c:d7:fe:c8:92:d9:0c:
         5a:f9:84:28:86:8a:5d:2d:4d:09:92:d0:3d:c3:bb:4e:6a:ef:
         05:f2:8c:78:91:21:db:87:30:1e:d2:ec:af:c9:cb:de:70:c7:
         b5:8f:b4:0d:3f:59:cc:60:53:c9:4f:25:62:32:56:41:3e:0a:
         80:2b:25:c6:86:f0:b2:4c:83:ce:d4:ad:30:34:e8:20:39:bd:
         ab:34:a7:cc:0c:87:0a:61:cc:18:31:22:60:24:4e:88:e2:04:
         6a:bd:e6:d7:1d:2f:85:e5:26:61:0b:ad:94:81:f9:f4:1a:19:
         8a:1e:16:b2:67:45:44:88:67:a2:d0:13:56:4f:8d:22:0c:e5:
         5a:af:69:8b:5d:09:e5:03:a2:c6:fd:aa:fb:4d:4b:72:52:64:
         ca:a1:3b:ff:83:63:eb:42:cd:03:0d:2b:66:b5:ec:64:43:67:
         c4:03:85:e9:90:91:32:ba:5a:16:53:7a:b9:bf:fe:a7:73:a9:
         54:3b:bb:54:52:f5:9e:05:8f:3e:96:7e:80:76:a8:a8:b0:fa:
         36:9b:48:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofiOb6iThRYfQMfZCKMFiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1
NDE5OTUwHhcNMjUxMDI2MDgwMDU2WhcNMjUxMDI3MDgwMDU2WjAzMTEwLwYDVQQD
EygyOTQ0N2Y4YjMxNmQzMWYxYTUzYzE1NjJlODJlNWM1MGM5ZWRhYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzLXsAqDVFd0FNOJeHHGl0uKVmJ2
pKAZKZsdi9zu4NvHiyxMsjw46y2V2Lz3rl4KiorAAgSn5FfcRsP984NYBc01a70N
XWfGQ+u9TufuJC75rt3PEZy5e/KdpKCZvxISys4EU66YugQL489BILPnKYW8r6FP
Xh3wFw5hWQzj++T/u9hxg9HFMNSN7U9Yok1V0jLlJMwBUVsnlirqtFDCsERXkUbn
vKP3obwVsjuOJ343D/jPWdfLIQkjW8KiTa0xw4t43k27bjKI+T9jZKMpg9uvGdgQ
fymli1UbY+2PP0ZRfpBEROiC0bZvqbEdtjDr0M/Lea+FhYInB2wQOsOnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClEf4sxbTHxpTwVYuguXFDJ7aw3MB8GA1UdIwQY
MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt
YzMyMGU1MGEzYzc5LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5
LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlXnLisM
iJbqFjr7KGiuaJQ56Ja2rS0DWcuIUqMcpAIFRfDcKXCahgqTia3PxsmM1/7IktkM
WvmEKIaKXS1NCZLQPcO7TmrvBfKMeJEh24cwHtLsr8nL3nDHtY+0DT9ZzGBTyU8l
YjJWQT4KgCslxobwskyDztStMDToIDm9qzSnzAyHCmHMGDEiYCROiOIEar3m1x0v
heUmYQutlIH59BoZih4WsmdFRIhnotATVk+NIgzlWq9pi10J5QOixv2q+01LclJk
yqE7/4Nj60LNAw0rZrXsZENnxAOF6ZCRMrpaFlN6ub/+p3OpVDu7VFL1ngWPPpZ+
gHaoqLD6NptIZw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:39:54 2025 by rpki-client