Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File:                     KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier:          HObyd/P1t/4Bmgkfp4hHSYM2E3pwF+RhT4JPAQcqZxk=
Subject key identifier:   01:BD:0A:EF:11:19:3A:05:D8:D2:90:1C:31:80:53:65:61:F0:3A:3F
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer:       /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial:       0198D7E17DDD1AD6F5D8C8C2BBAF8808C79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number:          0A56
Signing time:             Sat 23 Aug 2025 17:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:15 +0000
Files and hashes:         1: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: hU43pO/yBwyfKL5VAuw5pUbdp40zLEYxD9In2ZZT/YU=)
                          2: OC0sSBHJnP4b0J24Htst-_z21z0.roa (hash: 5sfWgno4pC4HGZPsmImbzu6t/5UjdQSe45jxPoavsl8=)
                          3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
                          4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
                          5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:7d:dd:1a:d6:f5:d8:c8:c2:bb:af:88:08:c7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
        Validity
            Not Before: Aug 23 17:02:15 2025 GMT
            Not After : Aug 24 17:02:15 2025 GMT
        Subject: CN=01bd0aef11193a05d8d2901c3180536561f03a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:d5:5a:39:f2:eb:b3:75:da:84:fb:cd:f0:
                    0c:6e:a9:c6:f6:d7:77:77:ff:dd:22:71:66:bd:ac:
                    31:f7:27:51:4a:15:15:5a:91:f9:4f:f7:99:0c:75:
                    85:ae:84:fe:3c:e8:b1:52:2f:90:94:a5:c8:12:f1:
                    84:e2:ae:bd:23:e1:ce:42:21:c6:b2:0f:b9:fa:ae:
                    d1:27:69:df:a6:9b:3e:d5:6b:60:10:24:27:2b:f7:
                    8f:b3:cb:16:66:d1:f9:1a:28:9c:88:75:f9:12:64:
                    63:d7:8e:44:bd:aa:08:d6:f5:2b:41:ed:4b:59:fc:
                    41:62:3d:d9:51:8c:f9:5a:c8:44:c6:f2:c6:14:50:
                    14:2f:9c:e5:47:81:0e:1d:56:f1:8a:5e:a8:5c:d7:
                    09:2c:d4:49:da:fa:e5:fc:67:6b:32:6a:d2:dd:fe:
                    60:fa:3c:e4:43:bb:c9:50:94:cd:96:d2:c9:4a:ff:
                    0b:3e:ba:dc:1e:81:85:73:bb:cc:9c:10:53:2f:e0:
                    00:b2:60:8d:41:57:73:ed:87:62:49:a8:71:69:fd:
                    e8:b7:9d:6e:5a:ff:94:06:0c:b6:d6:43:5f:34:ac:
                    f7:3f:fc:04:56:66:5b:cc:fc:55:88:a3:ac:0b:f1:
                    d1:b8:32:68:23:91:45:40:5c:25:ab:16:81:66:85:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BD:0A:EF:11:19:3A:05:D8:D2:90:1C:31:80:53:65:61:F0:3A:3F
            X509v3 Authority Key Identifier:
                keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f4:01:cc:81:07:c2:95:dc:54:3c:c5:7a:ef:df:41:cb:ee:
         be:6f:68:e0:b1:8d:a2:42:61:47:3f:78:66:60:e7:c6:5c:dc:
         5e:09:f0:cf:da:d8:9b:b4:d2:54:47:0b:94:91:b7:14:7d:1c:
         03:d5:91:f4:7f:e7:b2:bd:e3:3f:32:82:63:61:05:dd:43:0a:
         dd:bb:5b:1b:f3:fb:dc:69:c7:a5:9b:39:ad:91:90:97:73:70:
         81:61:c3:21:af:57:c7:84:2c:d3:6a:36:37:d4:db:bf:a9:1d:
         1e:59:82:60:ce:e6:b0:8c:a9:7f:41:a8:37:43:33:cd:c7:5a:
         e8:d8:c2:11:51:df:7d:e2:f5:a2:63:36:27:7e:29:8d:f7:ab:
         85:1e:60:6a:05:6b:e9:bd:c5:00:b9:51:22:e0:ad:6f:ff:2a:
         22:0d:49:76:49:c1:be:b1:56:61:5d:84:71:d5:60:6f:e9:e6:
         f1:e7:10:f2:d5:53:48:b7:2b:13:25:d2:32:8d:f4:ce:6b:e8:
         6d:fa:b4:65:b0:61:70:e5:50:35:4b:f1:9f:75:b8:e7:bc:a5:
         69:b6:e8:dd:ca:46:d8:ad:27:a5:52:e5:33:c1:d2:a7:08:a3:
         ae:1d:70:2e:b4:49:19:f7:c3:e3:11:e9:10:15:8b:f2:5f:df:
         71:85:b5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:41 2025 by rpki-client