Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File:                     KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier:          t41S5oT9d/ml+2uD5nxFp6XzOV2qY7EnhY52wcpPdNY=
Subject key identifier:   47:1A:E7:3D:4C:CA:7E:CA:C8:AC:48:35:2D:D4:A4:39:3D:2B:DA:12
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer:       /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial:       019939B8B76AC313A4F7FE392D5F06A6F4BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number:          167F
Signing time:             Thu 11 Sep 2025 17:00:30 +0000
Manifest this update:     Thu 11 Sep 2025 17:00:30 +0000
Manifest next update:     Fri 12 Sep 2025 17:00:30 +0000
Files and hashes:         1: 0NCBB1EVTJYHifgmM7E7rBOVhWE.roa (hash: xXtvRZ+O4A6Lgj7z0RgWOmE79cvAliXW5idwtaE71is=)
                          2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: 2TyaMdrY8Nbsqhb3qeuJeqsEH6jyFaIgAagVxO1y9qQ=)
                          3: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (hash: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=)
                          4: rrcNnyYoHhtYzKs3plgNVsgCnq0.roa (hash: U0CZhyWrF/GWPNXT51c8u412LDB2x6JjdiyBKZ4mr/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 14:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:39:b8:b7:6a:c3:13:a4:f7:fe:39:2d:5f:06:a6:f4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
        Validity
            Not Before: Sep 11 17:00:30 2025 GMT
            Not After : Sep 12 17:00:30 2025 GMT
        Subject: CN=471ae73d4cca7ecac8ac48352dd4a4393d2bda12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:24:f3:ae:eb:b6:20:41:6b:49:5f:f1:bc:
                    6d:60:1d:eb:96:8b:9f:91:2f:dd:6f:e5:68:76:b6:
                    6d:c3:02:3c:39:17:93:3b:34:8e:3c:30:f0:ad:08:
                    31:0f:b0:20:d8:b4:b6:eb:3a:d2:9d:0c:55:67:2f:
                    fc:08:41:bd:37:37:51:c5:65:2b:e2:2d:59:2b:15:
                    4a:c1:ba:73:5c:88:a0:a4:62:65:6e:8e:43:70:79:
                    57:98:01:0d:bb:4a:9f:3d:80:cc:6a:b9:99:51:ac:
                    60:fa:4e:c4:bd:6e:11:3e:bb:ca:b2:d5:e2:03:5a:
                    51:b9:c1:44:d9:88:bb:6a:47:86:fb:ee:3f:99:59:
                    54:5e:05:30:71:ff:99:7c:89:f2:ef:83:af:ed:60:
                    d1:29:83:79:b9:63:ee:0c:d1:64:58:7c:98:d8:c5:
                    d9:af:31:d9:28:0f:6b:0f:f2:35:64:df:f3:10:05:
                    c0:c2:38:c8:b0:9b:78:31:97:5b:67:4b:27:b9:35:
                    ea:a6:44:c2:de:1c:bc:8f:55:c4:da:20:db:49:03:
                    56:30:da:4c:61:18:e3:e5:6b:65:25:8b:7e:0c:31:
                    9c:ee:60:ec:53:ff:32:b7:a0:56:78:4b:b0:72:00:
                    0b:2f:bb:2f:c5:3b:5d:7a:ee:98:d6:af:ab:a3:7e:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1A:E7:3D:4C:CA:7E:CA:C8:AC:48:35:2D:D4:A4:39:3D:2B:DA:12
            X509v3 Authority Key Identifier:
                keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:19:57:9f:e6:ce:7a:87:ea:e3:a9:98:62:57:4c:13:45:5e:
         51:de:78:5e:31:fe:4e:9e:50:4b:d9:a1:07:78:50:be:93:a4:
         66:f9:39:28:08:8d:be:93:ad:7d:b4:7e:95:c2:20:68:01:f6:
         32:50:93:5c:78:0c:01:14:9f:bc:db:b6:79:10:90:7a:c7:78:
         70:eb:ad:4d:7e:22:ec:7b:7d:40:57:6e:0f:b3:1a:02:26:e1:
         cd:72:ef:ff:3c:6a:02:7f:d5:d2:d6:a6:c5:19:58:36:06:f4:
         69:5d:33:84:03:34:60:45:d1:f9:d9:55:f9:5d:29:70:a1:d0:
         b6:d3:d6:ab:64:b6:00:90:6f:ec:23:34:aa:db:e0:37:4e:2e:
         3c:3f:db:8f:16:88:ce:34:6b:fe:d3:ea:33:f4:e8:98:61:3f:
         ea:a7:f8:30:c0:de:de:a5:f9:68:d7:d6:53:f0:94:58:36:8f:
         d9:b8:e7:1d:07:cf:57:e5:47:bf:b8:b4:ad:f7:ad:a4:6f:13:
         36:45:be:93:69:d9:a2:c9:62:27:5d:c2:69:c9:b9:d3:cd:d5:
         5a:98:85:42:8c:ca:bf:4e:bd:d1:41:d4:18:c1:31:70:7e:de:
         68:ae:9e:ff:ff:29:8d:27:da:6e:60:44:86:7c:b0:36:ab:7a:
         6b:56:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:12:37 2025 by rpki-client