Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
File:                     KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json)
Hash identifier:          BS8mqGsGk4x84uWEEtNzbNqDTRNn+A7m80AtEe+OyK8=
Subject key identifier:   44:A1:7C:2C:A5:6C:B4:43:3D:E1:AE:5F:65:E0:1F:42:10:2F:1A:01
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Certificate issuer:       /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial:       0198D515A8FDB1CA5B049CB53A47BA538620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
Manifest number:          54
Signing time:             Sat 23 Aug 2025 04:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:23 +0000
Files and hashes:         1: 1HqQBJhpRaROMHOezXr8-gOHJ-E.roa (hash: qIvuj3HHmRwp3qhT9RCCOv4MPrrW/PDxkYPz1nz2Hdc=)
                          2: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: ZCzgfIUiNlXL0jAbf79Q9V7w6kP+jjfXySDXQKB1IIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a8:fd:b1:ca:5b:04:9c:b5:3a:47:ba:53:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
        Validity
            Not Before: Aug 23 04:00:23 2025 GMT
            Not After : Aug 24 04:00:23 2025 GMT
        Subject: CN=44a17c2ca56cb4433de1ae5f65e01f42102f1a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:e9:da:fb:ef:52:2b:59:96:c7:00:a5:5d:
                    28:aa:ca:f9:73:0a:81:5b:31:1e:e5:bf:6f:2f:c0:
                    58:d5:40:bc:11:f8:54:51:5f:0f:f5:e6:6e:f4:d8:
                    d1:99:c5:06:e7:4b:d7:48:64:09:ac:0f:b3:13:ab:
                    2b:af:95:01:16:1a:76:c7:f5:95:04:e8:13:6a:e7:
                    57:ea:d7:be:72:66:5e:7d:cf:6a:a2:81:e5:49:e7:
                    5c:0b:44:5b:33:32:93:f9:ab:79:a1:a4:ee:04:64:
                    72:b4:98:17:e6:8a:f0:58:aa:d9:f2:06:28:7b:a7:
                    a9:0e:62:fc:a9:bf:8c:cc:92:40:a1:6b:07:4b:93:
                    69:bb:88:2f:fe:1c:46:33:13:e3:a5:1c:20:c7:7b:
                    9c:98:a1:52:2e:a0:fb:30:8f:5a:de:04:89:39:ed:
                    cc:7c:88:b1:56:09:d0:1a:7d:e2:a0:32:ad:b1:c1:
                    07:4f:19:5e:25:85:04:fe:10:85:7d:1f:25:b4:fe:
                    f4:b2:d3:1e:9b:da:52:d1:22:12:a7:e6:37:ec:81:
                    55:85:83:2b:64:a2:0e:1d:81:23:3f:35:4d:c6:86:
                    46:b4:52:62:cc:ed:58:40:18:f1:04:18:34:9d:ba:
                    d9:20:c6:33:53:34:c6:18:e5:94:9e:8b:67:8c:7f:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:7C:2C:A5:6C:B4:43:3D:E1:AE:5F:65:E0:1F:42:10:2F:1A:01
            X509v3 Authority Key Identifier:
                keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:03:6b:90:67:12:ba:c0:2b:39:e4:be:04:74:07:f9:0a:e7:
         41:97:c0:37:23:64:a8:37:bc:45:96:bd:e1:98:0f:29:ae:47:
         bd:ea:34:f7:ca:5f:24:79:6f:73:89:d6:ce:f2:02:15:8d:6e:
         9e:0c:d6:47:09:e8:10:04:d6:10:dc:51:63:99:58:95:93:39:
         53:98:02:f2:69:ba:6d:c6:1f:66:c8:a6:e6:9f:fd:a3:c2:7a:
         58:84:9d:62:3f:f5:52:d0:87:14:51:0e:0e:2c:93:64:95:b7:
         11:27:5c:13:9c:d0:d8:e2:98:85:a4:78:5e:16:1c:21:a2:43:
         2a:d6:b4:f9:85:a0:33:f8:84:5c:d7:08:b4:eb:6f:a3:db:05:
         82:27:e5:9c:a0:90:7c:b0:eb:d1:a3:67:e5:8f:b6:01:74:a3:
         02:ff:1d:3d:cf:e3:12:43:4a:96:7d:21:71:d0:20:22:ff:7e:
         af:eb:55:ef:0c:db:d4:49:01:a2:59:3d:5d:47:10:b3:8d:f2:
         b3:db:cf:ac:46:d1:c0:8c:25:f7:49:24:64:63:ea:be:00:a3:
         ae:5d:68:51:dd:c7:a4:9f:30:39:a7:af:c8:89:54:01:2e:7f:
         cc:87:70:77:dd:18:20:c0:21:5d:71:81:0d:97:02:c6:c7:6c:
         d0:43:45:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFaj9scpbBJy1Oke6U4YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz
ZDI0MDQwHhcNMjUwODIzMDQwMDIzWhcNMjUwODI0MDQwMDIzWjAzMTEwLwYDVQQD
Eyg0NGExN2MyY2E1NmNiNDQzM2RlMWFlNWY2NWUwMWY0MjEwMmYxYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rfp2vvvUitZlscApV0oqsr5cwqB
WzEe5b9vL8BY1UC8EfhUUV8P9eZu9NjRmcUG50vXSGQJrA+zE6srr5UBFhp2x/WV
BOgTaudX6te+cmZefc9qooHlSedcC0RbMzKT+at5oaTuBGRytJgX5orwWKrZ8gYo
e6epDmL8qb+MzJJAoWsHS5Npu4gv/hxGMxPjpRwgx3ucmKFSLqD7MI9a3gSJOe3M
fIixVgnQGn3ioDKtscEHTxleJYUE/hCFfR8ltP70stMem9pS0SISp+Y37IFVhYMr
ZKIOHYEjPzVNxoZGtFJizO1YQBjxBBg0nbrZIMYzUzTGGOWUnotnjH+VIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEShfCylbLRDPeGuX2XgH0IQLxoBMB8GA1UdIwQY
MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt
MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi
LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQNrkGcS
usArOeS+BHQH+QrnQZfANyNkqDe8RZa94ZgPKa5Hveo098pfJHlvc4nWzvICFY1u
ngzWRwnoEATWENxRY5lYlZM5U5gC8mm6bcYfZsim5p/9o8J6WISdYj/1UtCHFFEO
DiyTZJW3ESdcE5zQ2OKYhaR4XhYcIaJDKta0+YWgM/iEXNcItOtvo9sFgiflnKCQ
fLDr0aNn5Y+2AXSjAv8dPc/jEkNKln0hcdAgIv9+r+tV7wzb1EkBolk9XUcQs43y
s9vPrEbRwIwl90kkZGPqvgCjrl1oUd3HpJ8wOaevyIlUAS5/zIdwd90YIMAhXXGB
DZcCxsds0ENFtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:21 2025 by rpki-client