Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File:                     KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier:          S0p5fRBoY9JS/ff+0aqYPPaoE1Y39umC4H4OXNGNayI=
Subject key identifier:   96:9D:B8:D5:3F:62:9A:DF:BF:16:AA:F5:A8:01:FE:CF:6C:9A:9D:60
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer:       /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial:       01976FD1138C30798EE680FA6031EFE61C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number:          036C
Signing time:             Sat 14 Jun 2025 19:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:02 +0000
Files and hashes:         1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: 9NZWY4fn7mER+Sm7OC1S91MkufSpJ8NTaIjKQ+DlIoE=)
                          2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:13:8c:30:79:8e:e6:80:fa:60:31:ef:e6:1c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
        Validity
            Not Before: Jun 14 19:01:02 2025 GMT
            Not After : Jun 15 19:01:02 2025 GMT
        Subject: CN=969db8d53f629adfbf16aaf5a801fecf6c9a9d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:14:4c:1f:21:93:d5:68:d4:26:a2:41:01:
                    db:ae:49:6c:3b:e9:5e:78:76:eb:d4:91:07:2c:a7:
                    9d:62:ee:2d:c5:dd:e6:8a:62:19:b8:69:31:59:c7:
                    9b:20:80:84:fe:9c:4e:d9:ca:97:80:2c:40:f5:fa:
                    17:0a:c0:2d:6d:70:ff:2f:86:69:8e:0c:af:30:09:
                    82:ff:cf:38:4b:e9:ac:43:1b:dc:86:01:4f:98:78:
                    ca:33:1a:97:43:0e:90:11:d0:49:6d:46:df:9b:35:
                    69:09:de:b0:33:58:cc:cd:19:42:d2:d3:18:6a:73:
                    20:27:60:25:d4:dd:af:1d:68:c6:8a:54:ee:ac:3f:
                    fa:de:70:31:6b:b2:52:2a:6c:ed:28:9e:6b:cb:fe:
                    08:71:f8:29:eb:cd:d3:d4:f6:57:fa:29:e7:c9:dc:
                    d7:b1:fb:7d:cd:8e:3a:68:1b:33:b8:c7:4e:4c:44:
                    10:66:6d:8a:54:ed:b6:bb:7b:9b:42:40:26:fc:9d:
                    40:32:7a:7f:09:bc:27:67:e2:08:45:90:93:ac:2c:
                    c4:d2:84:e8:7b:fa:f4:15:9c:d7:00:4a:35:8f:b2:
                    3d:d1:16:51:0d:09:97:1a:78:93:fe:c5:27:59:6a:
                    08:dc:2f:ec:d5:c3:fe:1c:8d:29:cc:d5:8c:6b:e9:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9D:B8:D5:3F:62:9A:DF:BF:16:AA:F5:A8:01:FE:CF:6C:9A:9D:60
            X509v3 Authority Key Identifier:
                keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:70:4f:e0:ff:88:1d:0d:39:89:0e:73:07:c7:9d:96:6f:df:
         77:12:e4:f6:5d:d1:74:36:2c:71:04:40:7b:c1:d7:07:42:ad:
         35:5f:34:62:b0:fa:ed:53:69:26:73:06:dc:bd:42:94:98:d7:
         5d:b7:f3:d7:17:ae:0d:ec:40:3c:a3:3c:86:e0:87:7e:30:06:
         d4:dc:5e:79:89:d0:a5:a6:89:8c:5c:bf:60:30:6e:1a:f2:23:
         3b:6a:33:99:64:f7:63:88:ea:45:3a:fb:94:56:fa:9d:78:b9:
         b2:3e:63:65:35:93:35:f8:5f:0f:2f:00:57:33:58:7c:fb:aa:
         cb:92:61:56:fb:e7:19:98:c9:ce:31:c5:53:6e:98:ea:22:75:
         ea:cc:a5:ee:65:78:f8:12:93:22:1c:44:a4:0a:48:44:d2:e0:
         a7:08:8b:4f:d4:5e:ae:7b:1e:c9:20:d1:59:0a:fa:8a:1d:0c:
         97:45:d8:04:2a:3d:01:86:3f:d4:dd:15:1b:f1:3d:ba:fe:99:
         48:22:c7:0c:2b:3c:c4:6a:75:53:b6:c8:e7:81:b9:3c:58:ea:
         e1:48:a3:8d:42:92:50:7f:d1:24:99:b7:eb:b6:08:52:17:83:
         7d:fe:58:f9:bf:72:73:4d:ad:b8:1f:6e:c7:7c:64:e0:36:42:
         cf:ad:88:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0ROMMHmO5oD6YDHv5hyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx
ZDliYjQwHhcNMjUwNjE0MTkwMTAyWhcNMjUwNjE1MTkwMTAyWjAzMTEwLwYDVQQD
Eyg5NjlkYjhkNTNmNjI5YWRmYmYxNmFhZjVhODAxZmVjZjZjOWE5ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdMUTB8hk9Vo1CaiQQHbrklsO+le
eHbr1JEHLKedYu4txd3mimIZuGkxWcebIICE/pxO2cqXgCxA9foXCsAtbXD/L4Zp
jgyvMAmC/884S+msQxvchgFPmHjKMxqXQw6QEdBJbUbfmzVpCd6wM1jMzRlC0tMY
anMgJ2Al1N2vHWjGilTurD/63nAxa7JSKmztKJ5ry/4Icfgp683T1PZX+innydzX
sft9zY46aBszuMdOTEQQZm2KVO22u3ubQkAm/J1AMnp/CbwnZ+IIRZCTrCzE0oTo
e/r0FZzXAEo1j7I90RZRDQmXGniT/sUnWWoI3C/s1cP+HI0pzNWMa+ll/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaduNU/Yprfvxaq9agB/s9smp1gMB8GA1UdIwQY
MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt
OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3
LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHBP4P+I
HQ05iQ5zB8edlm/fdxLk9l3RdDYscQRAe8HXB0KtNV80YrD67VNpJnMG3L1ClJjX
Xbfz1xeuDexAPKM8huCHfjAG1NxeeYnQpaaJjFy/YDBuGvIjO2ozmWT3Y4jqRTr7
lFb6nXi5sj5jZTWTNfhfDy8AVzNYfPuqy5JhVvvnGZjJzjHFU26Y6iJ16syl7mV4
+BKTIhxEpApIRNLgpwiLT9RernseySDRWQr6ih0Ml0XYBCo9AYY/1N0VG/E9uv6Z
SCLHDCs8xGp1U7bI54G5PFjq4UijjUKSUH/RJJm367YIUheDff5Y+b9yc02tuB9u
x3xk4DZCz62Ikw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:05 2025 by rpki-client