Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          oJ1m24a+kdIW9GP6EClKNtQAjZYOaR4uZqvQ8q4WKvE=
Subject key identifier:   24:88:98:F2:C5:07:7E:D4:58:5F:23:B5:F1:A6:DD:69:D1:9C:02:78
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       0198D583D47059D83E8481DBA07490BFD4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          11C8
Signing time:             Sat 23 Aug 2025 06:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:43 +0000
Files and hashes:         1: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: fTuJm6/55EiXb3SX9bpS0Pa/v8Qap32e38wRtoGEytc=)
                          2: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (hash: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=)
                          3: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (hash: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=)
                          4: foMqTIfk3NGRU1ECjEYc0FzWeHQ.roa (hash: 8/tSFYSbydeBOM5cDt+MQjefx680IbM6wdc9EqGW/uQ=)
                          5: qOJSirqIZF030lDaiDlLOLszAqo.roa (hash: cceSZV5tbmDVcXVgGl8UFbkLxF9VVoz+OhMvXa1/dFw=)
                          6: zAPwb7bovDcweikHvlN-q4fyaQM.roa (hash: B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d4:70:59:d8:3e:84:81:db:a0:74:90:bf:d4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Aug 23 06:00:43 2025 GMT
            Not After : Aug 24 06:00:43 2025 GMT
        Subject: CN=248898f2c5077ed4585f23b5f1a6dd69d19c0278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:75:44:7a:2d:ea:fe:64:62:0a:7c:be:cc:
                    f9:73:7e:98:f9:10:b3:95:c3:77:5c:db:3e:9e:d0:
                    de:2e:6a:f8:03:02:59:e9:e8:20:a2:c6:ca:77:f6:
                    f9:63:f3:aa:16:6f:c0:3b:4e:d1:78:d3:cf:a2:3f:
                    b8:b9:e3:ec:18:c2:34:87:e2:2e:8a:2b:cb:6e:b9:
                    10:bd:b5:07:39:4b:27:56:c9:f4:76:f5:2f:5d:5d:
                    68:8d:fa:f9:76:ac:f4:1b:55:97:08:99:c1:0f:5b:
                    34:7c:b9:59:0a:67:0a:45:7b:a1:ee:c4:59:5f:11:
                    15:7c:aa:a2:6c:63:91:d6:04:d5:78:12:a5:54:76:
                    b1:fd:00:0d:ce:1a:fe:c6:1b:dc:12:89:7f:c8:19:
                    c3:3d:da:c5:12:c8:27:ed:fa:66:44:23:78:ac:8c:
                    97:2b:8b:ec:68:86:fd:62:01:65:2a:10:dc:71:b6:
                    cc:8a:38:61:f3:84:41:ca:f9:f6:4c:fd:6c:e4:da:
                    9b:d3:44:73:3f:99:2a:5a:35:3b:0a:f7:d4:6c:17:
                    8d:f8:c6:72:6e:c9:36:9b:95:e0:8c:b6:e1:64:89:
                    86:98:ef:c8:33:68:fc:5d:80:a3:e2:13:70:88:84:
                    51:d5:4b:5e:a6:ad:2b:26:b1:0a:1d:35:1c:4d:34:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:98:F2:C5:07:7E:D4:58:5F:23:B5:F1:A6:DD:69:D1:9C:02:78
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:8a:7b:81:45:62:71:a2:17:3f:d8:c9:bb:09:16:8e:ba:
         b8:ee:00:48:a3:e5:30:51:11:a4:53:3e:bf:40:97:f0:65:24:
         11:3a:a9:b2:96:a6:e0:cd:c1:50:ae:3b:71:33:67:b7:d7:5a:
         61:f5:5b:2a:52:3b:67:e9:98:06:f9:ff:74:0d:9f:42:17:c1:
         54:b8:97:f8:2e:01:7a:31:4e:64:88:0c:1f:be:89:fd:1d:19:
         b7:99:44:3b:da:b9:17:70:b5:ba:55:e3:67:82:03:8d:6b:98:
         c0:f9:e3:49:dc:14:b0:7f:9c:a4:4c:10:1d:72:99:95:d2:0b:
         d0:f7:23:f0:27:31:32:e2:79:f5:0d:18:28:45:7f:f5:ad:c3:
         48:1b:8f:3e:2a:5c:47:2f:ac:49:fc:d4:81:af:24:14:c5:b6:
         37:86:96:b8:e8:73:05:14:3b:2f:51:09:ff:ce:b6:99:21:14:
         73:1f:a7:d0:22:cb:7a:12:4c:60:c3:de:1a:d2:f6:63:82:17:
         f5:a6:43:72:d0:24:df:fc:2f:a3:44:b7:15:43:ad:95:41:e8:
         19:85:7b:3e:d8:57:50:c2:58:52:3d:19:e2:a5:5f:aa:ef:b2:
         10:9f:e0:4b:ac:93:68:90:b0:ae:eb:98:5d:07:13:63:e7:e2:
         cf:70:ab:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9RwWdg+hIHboHSQv9TsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2
Y2Y3NjgwHhcNMjUwODIzMDYwMDQzWhcNMjUwODI0MDYwMDQzWjAzMTEwLwYDVQQD
EygyNDg4OThmMmM1MDc3ZWQ0NTg1ZjIzYjVmMWE2ZGQ2OWQxOWMwMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyB1RHot6v5kYgp8vsz5c36Y+RCz
lcN3XNs+ntDeLmr4AwJZ6eggosbKd/b5Y/OqFm/AO07ReNPPoj+4uePsGMI0h+Iu
iivLbrkQvbUHOUsnVsn0dvUvXV1ojfr5dqz0G1WXCJnBD1s0fLlZCmcKRXuh7sRZ
XxEVfKqibGOR1gTVeBKlVHax/QANzhr+xhvcEol/yBnDPdrFEsgn7fpmRCN4rIyX
K4vsaIb9YgFlKhDccbbMijhh84RByvn2TP1s5Nqb00RzP5kqWjU7CvfUbBeN+MZy
bsk2m5XgjLbhZImGmO/IM2j8XYCj4hNwiIRR1Utepq0rJrEKHTUcTTRTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSImPLFB37UWF8jtfGm3WnRnAJ4MB8GA1UdIwQY
MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt
MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm
LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXqKe4FF
YnGiFz/YybsJFo66uO4ASKPlMFERpFM+v0CX8GUkETqpspam4M3BUK47cTNnt9da
YfVbKlI7Z+mYBvn/dA2fQhfBVLiX+C4BejFOZIgMH76J/R0Zt5lEO9q5F3C1ulXj
Z4IDjWuYwPnjSdwUsH+cpEwQHXKZldIL0Pcj8CcxMuJ59Q0YKEV/9a3DSBuPPipc
Ry+sSfzUga8kFMW2N4aWuOhzBRQ7L1EJ/862mSEUcx+n0CLLehJMYMPeGtL2Y4IX
9aZDctAk3/wvo0S3FUOtlUHoGYV7PthXUMJYUj0Z4qVfqu+yEJ/gS6yTaJCwruuY
XQcTY+fiz3Crjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:08 2025 by rpki-client