Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          HD+QtLQpjr04df1azbp8/x9jKI1vBKOvNxiYISd+uQ8=
Subject key identifier:   6E:3F:29:D3:EC:76:19:95:7C:F4:0B:8A:CA:DF:88:2F:46:E1:2F:82
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       019927E9EAFCDA7E5ADC9F50FEFCD759D5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0BD4
Signing time:             Mon 08 Sep 2025 06:01:05 +0000
Manifest this update:     Mon 08 Sep 2025 06:01:05 +0000
Manifest next update:     Tue 09 Sep 2025 06:01:05 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: UxNHLHioo2alWreU2JeOYLkouxvVEcS22U7pdnf522c=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:e9:ea:fc:da:7e:5a:dc:9f:50:fe:fc:d7:59:d5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Sep  8 06:01:05 2025 GMT
            Not After : Sep  9 06:01:05 2025 GMT
        Subject: CN=6e3f29d3ec7619957cf40b8acadf882f46e12f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:87:74:3b:bb:de:ee:9a:ed:65:84:b9:9c:
                    6a:96:b7:0b:ec:99:85:ff:d4:e4:74:53:f6:24:c8:
                    e3:8a:d3:fe:75:93:42:64:31:76:eb:69:2e:c1:9d:
                    b8:a7:cc:ce:5a:38:56:ff:0a:33:7a:eb:9c:c0:66:
                    fa:1d:dc:83:9f:59:8d:48:3e:e1:42:62:c0:61:8e:
                    8e:de:bc:4a:13:7a:fb:9e:ab:37:05:78:27:b8:56:
                    96:db:a5:93:e5:9c:d3:c3:60:5d:53:ec:47:c5:9c:
                    6a:de:c9:99:23:0e:2d:96:45:1c:75:09:06:7d:09:
                    43:e3:e3:45:dc:d0:eb:7a:39:0a:0c:ab:f7:48:92:
                    49:3a:17:07:27:e6:0d:af:de:ee:29:e2:e3:6c:a4:
                    7e:6a:22:bb:b5:a0:21:56:98:3e:d1:3d:25:63:67:
                    ad:83:9c:08:bd:ab:c7:d5:63:63:4f:31:78:4d:28:
                    3b:56:f2:df:a5:ec:17:7b:30:4f:f5:a2:91:01:74:
                    e3:9d:97:52:be:be:46:46:e1:19:d0:61:a4:84:b0:
                    ce:b4:3e:3f:09:b7:31:dc:a5:57:53:fa:f5:6b:7a:
                    e2:1b:e8:e2:c4:8f:2e:35:0a:9b:74:08:b2:b6:7f:
                    e7:fc:3c:c9:9e:6f:d3:cb:15:a1:ac:b2:91:b3:4e:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3F:29:D3:EC:76:19:95:7C:F4:0B:8A:CA:DF:88:2F:46:E1:2F:82
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:23:5d:41:0f:63:f4:13:78:b8:2a:88:1f:b3:6c:1f:24:fb:
         f7:db:be:31:ac:3e:c0:8c:a8:f2:96:8f:0c:7a:5b:32:ee:f0:
         5f:fc:b8:77:c2:12:e9:a9:9d:26:7a:e5:f7:16:b3:04:4e:b7:
         2e:b7:3b:85:84:4a:11:ed:90:f2:50:9c:f7:02:2f:c6:5c:50:
         75:09:a8:b2:a2:98:9e:41:c8:02:40:c1:62:bc:1e:26:7a:2d:
         2b:12:07:93:da:ec:fc:8d:5b:f1:21:1c:75:15:b1:f1:a2:bb:
         7d:10:67:8a:3a:53:ce:c4:d9:ce:24:fb:3d:1b:11:6f:21:a0:
         f8:4e:1d:a7:77:7d:cf:c9:27:22:ec:f7:b5:b7:0d:eb:21:d8:
         72:96:48:9b:71:93:ad:f3:bc:0b:6a:b1:aa:71:3a:c8:91:88:
         55:fc:80:6c:93:4b:c5:a2:e9:9f:1e:8a:c8:85:38:3d:dc:f6:
         35:b4:ba:79:79:e3:7d:7b:52:3a:2d:d5:d3:46:e6:6a:b6:d8:
         2a:72:de:bb:02:be:91:77:32:2e:17:cb:17:74:4f:6a:e9:a6:
         2b:22:6d:53:c4:4b:e2:dc:c6:b7:b6:0b:d1:15:14:dc:9d:0e:
         86:1b:27:d8:6c:21:ff:f1:fb:b0:77:22:4f:a6:e7:67:b9:8f:
         43:ae:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:37:00 2025 by rpki-client