Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File:                     KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier:          AI7TJehGLbrFv5bgMYdWKdUMLBHmp35c+9LMIXMtESk=
Subject key identifier:   E3:F1:21:94:EC:27:4E:36:57:C1:8E:8B:3A:7E:72:8E:F9:3C:58:51
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer:       /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial:       01964CD936FC06BE828D44B26DE96EE23023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number:          148A
Signing time:             Sat 19 Apr 2025 07:00:25 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:25 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:25 +0000
Files and hashes:         1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
                          2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: Uvl3xUdTgkQc1zMKCV67nUPc/+YzOdLr14rQWbrOOGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:36:fc:06:be:82:8d:44:b2:6d:e9:6e:e2:30:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
        Validity
            Not Before: Apr 19 07:00:25 2025 GMT
            Not After : Apr 20 07:00:25 2025 GMT
        Subject: CN=e3f12194ec274e3657c18e8b3a7e728ef93c5851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:c6:4b:31:b9:0d:7d:eb:85:51:32:b1:0d:
                    81:5b:d6:70:23:f2:d3:d2:0c:f8:87:0f:66:15:fe:
                    30:f1:4f:09:54:ac:31:c7:c3:cb:7e:ff:ea:ae:b4:
                    14:6b:ae:08:da:d6:d5:48:57:33:98:93:d0:ef:3f:
                    96:5f:32:b7:b1:18:c0:be:25:32:a6:77:e9:08:3c:
                    50:f1:98:c1:f1:50:7f:08:b7:37:e9:9c:d8:88:5c:
                    ab:bc:2e:d3:73:59:87:97:50:71:a5:e7:d5:f3:8d:
                    3a:b6:90:54:1e:c2:31:84:8d:49:0c:d1:bd:c6:26:
                    0f:2a:b9:77:e8:79:1f:e7:bb:9b:46:db:86:a4:4c:
                    0d:ff:39:64:8d:76:00:f2:3e:b0:88:42:3d:db:79:
                    4b:3e:6f:2e:cc:97:b0:9b:b0:a4:46:df:76:a3:8e:
                    43:e5:e0:c1:ec:19:03:3e:88:a2:8c:f1:77:bb:65:
                    29:ae:87:39:73:92:7d:3c:72:7c:61:d7:b3:01:14:
                    bd:ca:b0:76:cc:c2:af:ca:c0:00:8f:a9:4f:26:c8:
                    7b:e6:7c:c7:ad:80:9c:18:e4:98:8d:4c:58:74:d9:
                    92:ae:d5:86:e6:13:67:d2:e4:3f:d8:2c:05:05:d7:
                    c4:b6:ef:26:85:21:61:1e:f7:a4:cb:d9:21:86:ae:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:21:94:EC:27:4E:36:57:C1:8E:8B:3A:7E:72:8E:F9:3C:58:51
            X509v3 Authority Key Identifier:
                keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:77:db:48:82:37:61:2b:0c:72:49:08:36:5c:ba:a9:6f:3b:
         02:e0:9e:16:3f:af:77:59:07:18:55:ec:a3:57:b2:1a:4c:9a:
         40:3e:dd:ee:f7:2d:90:3c:6c:34:44:b0:80:42:7d:e4:fd:07:
         9a:08:2a:78:ab:7e:28:f9:2a:e4:17:75:9b:38:7c:20:ea:95:
         ec:99:86:1d:27:74:f8:eb:c4:85:9b:06:3a:8c:b3:70:f0:03:
         e1:84:46:83:2d:2a:84:a5:01:45:c6:73:c8:e7:ca:51:99:ef:
         b6:bf:69:b9:9b:1f:b7:bf:06:9b:ea:cd:82:71:3d:19:91:e3:
         22:4e:40:7a:80:8d:c4:18:0c:7d:3d:1a:a0:90:00:43:35:f0:
         2c:c1:a8:4a:d4:22:5d:b4:53:cc:f0:50:d9:c1:05:b3:69:fb:
         09:1d:37:78:21:c4:a6:01:b8:c3:46:83:49:78:88:b3:fb:0c:
         b4:a9:3a:4b:b1:73:45:93:97:40:d7:e7:0e:f0:a3:b8:93:33:
         32:9d:d3:f9:20:45:e3:e3:9d:fb:48:b9:3d:0e:2e:21:1b:d5:
         f0:d4:34:9a:89:96:4e:2e:04:98:04:ca:41:48:f1:e3:d4:c8:
         a6:fa:1b:fc:be:7a:4e:b4:ec:f2:30:d2:17:1d:49:06:31:24:
         66:9f:17:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2Tb8Br6CjUSybelu4jAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjI0Nzg1NDlkOGNjMjY0YzJjYzU3ZGNlNzE5MDVkMTc2
ZmI4OGEwHhcNMjUwNDE5MDcwMDI1WhcNMjUwNDIwMDcwMDI1WjAzMTEwLwYDVQQD
EyhlM2YxMjE5NGVjMjc0ZTM2NTdjMThlOGIzYTdlNzI4ZWY5M2M1ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPTGSzG5DX3rhVEysQ2BW9ZwI/LT
0gz4hw9mFf4w8U8JVKwxx8PLfv/qrrQUa64I2tbVSFczmJPQ7z+WXzK3sRjAviUy
pnfpCDxQ8ZjB8VB/CLc36ZzYiFyrvC7Tc1mHl1BxpefV8406tpBUHsIxhI1JDNG9
xiYPKrl36Hkf57ubRtuGpEwN/zlkjXYA8j6wiEI923lLPm8uzJewm7CkRt92o45D
5eDB7BkDPoiijPF3u2Uproc5c5J9PHJ8YdezARS9yrB2zMKvysAAj6lPJsh75nzH
rYCcGOSYjUxYdNmSrtWG5hNn0uQ/2CwFBdfEtu8mhSFhHveky9khhq6irQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPxIZTsJ042V8GOizp+co75PFhRMB8GA1UdIwQY
MBaAFCliR4VJ2MwmTCzFfc5xkF0Xb7iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWIt
YzhkZjg0ZTdhZTI5LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWItYzhkZjg0ZTdhZTI5
LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2HfbSII3
YSsMckkINly6qW87AuCeFj+vd1kHGFXso1eyGkyaQD7d7vctkDxsNESwgEJ95P0H
mggqeKt+KPkq5Bd1mzh8IOqV7JmGHSd0+OvEhZsGOoyzcPAD4YRGgy0qhKUBRcZz
yOfKUZnvtr9puZsft78Gm+rNgnE9GZHjIk5AeoCNxBgMfT0aoJAAQzXwLMGoStQi
XbRTzPBQ2cEFs2n7CR03eCHEpgG4w0aDSXiIs/sMtKk6S7FzRZOXQNfnDvCjuJMz
Mp3T+SBF4+Od+0i5PQ4uIRvV8NQ0momWTi4EmATKQUjx49TIpvob/L56TrTs8jDS
Fx1JBjEkZp8Xgg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:52:17 2025 by rpki-client