Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          yDPOAde40j3+EW1BfGijAsooRrjivSH5TJRu0KUektU=
Subject key identifier:   D2:B6:7D:95:B4:87:3A:C9:FA:45:E9:5F:B1:43:0E:25:7F:3E:7F:C6
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       0197B5C4AC09E61AD12AAA39508CF8DA8C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1133
Signing time:             Sat 28 Jun 2025 09:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:54 +0000
Files and hashes:         1: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: XssDkvYiMBcDedTbQXhfY09Kxhy0Mr1gydLPqd/LF+s=)
                          2: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (hash: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=)
                          3: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (hash: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=)
                          4: foMqTIfk3NGRU1ECjEYc0FzWeHQ.roa (hash: 8/tSFYSbydeBOM5cDt+MQjefx680IbM6wdc9EqGW/uQ=)
                          5: qOJSirqIZF030lDaiDlLOLszAqo.roa (hash: cceSZV5tbmDVcXVgGl8UFbkLxF9VVoz+OhMvXa1/dFw=)
                          6: zAPwb7bovDcweikHvlN-q4fyaQM.roa (hash: B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:ac:09:e6:1a:d1:2a:aa:39:50:8c:f8:da:8c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jun 28 09:00:54 2025 GMT
            Not After : Jun 29 09:00:54 2025 GMT
        Subject: CN=d2b67d95b4873ac9fa45e95fb1430e257f3e7fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:8d:bb:7f:f9:54:cc:d9:fd:32:3b:10:21:
                    41:db:24:e2:ca:25:c4:59:3f:23:d9:86:1e:bd:93:
                    9a:9a:24:f1:76:34:06:21:f0:2c:ac:e4:8a:b8:d4:
                    5f:f4:b6:88:86:7a:7c:f7:03:43:d9:57:31:b0:6d:
                    86:3d:51:d1:8d:12:19:bb:c1:d5:bd:1c:7e:fb:0c:
                    51:9a:2d:2d:d8:53:ea:ce:23:19:ba:f5:de:e9:49:
                    88:ae:4e:49:94:3a:15:96:93:0b:6e:39:e4:2a:cf:
                    e7:99:0c:5a:61:19:e1:3e:1d:32:e0:35:91:f3:7b:
                    29:c5:a6:c3:99:a1:d2:ae:b5:21:cb:bb:9e:58:a1:
                    8f:00:4e:db:19:da:d9:9f:c2:76:f5:28:c9:ce:e6:
                    50:94:9a:87:21:f0:38:36:f2:22:94:42:46:a0:8a:
                    c8:b1:54:8e:fb:ed:15:21:92:9a:5a:4b:c0:a9:1b:
                    4c:45:9b:73:18:2c:31:9c:f4:b6:52:08:81:f5:6e:
                    7e:1f:7a:3b:dd:0f:96:42:2b:64:a9:78:0d:43:65:
                    20:65:5f:b2:4a:38:81:4a:5f:86:ab:a0:af:c0:cf:
                    6f:48:d1:ba:b7:87:39:3c:ad:df:e8:df:56:b8:9d:
                    af:83:91:60:f8:38:4a:60:b6:6e:16:ae:09:d2:d7:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B6:7D:95:B4:87:3A:C9:FA:45:E9:5F:B1:43:0E:25:7F:3E:7F:C6
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:f4:79:bd:c9:6a:11:3d:5c:f3:f9:4d:16:83:90:be:93:
         d6:82:c3:86:4e:8e:6e:a3:b1:71:3e:77:ff:72:a0:d3:12:3f:
         f3:e0:c7:8b:6c:c6:c0:4b:ad:f9:13:fe:99:97:38:a1:6f:74:
         27:30:5a:02:6e:53:1e:ad:3c:07:99:f8:f1:12:4e:ef:13:a4:
         4b:44:36:14:d2:c8:61:bf:2c:f8:bc:37:2e:d5:b9:82:81:94:
         ac:28:e6:25:5e:16:e6:98:d1:55:d0:ec:8f:59:8f:1c:c2:23:
         cc:92:c1:ab:f7:ae:e1:9a:06:ce:5a:ba:c2:65:c4:fa:b9:20:
         f5:37:a9:fd:0a:ec:53:12:0e:b8:f4:4c:58:26:44:25:88:c9:
         ef:5f:b5:3b:53:c1:58:e8:54:d9:df:fe:24:a5:60:6d:03:72:
         76:b7:9c:64:bd:bd:90:2e:c2:86:9e:c7:0a:71:fa:7e:42:55:
         61:e6:41:b5:b4:49:91:ec:01:50:62:e7:2e:10:38:56:ac:60:
         14:7e:57:4d:9d:c0:75:de:70:e8:88:16:0f:24:15:93:ef:1b:
         3b:ef:93:11:32:7e:a9:93:a9:7c:34:ab:12:bb:a9:07:6a:f1:
         f1:58:81:4b:9e:e0:cf:e3:62:46:6a:4e:d5:0f:10:26:d6:16:
         ea:27:5e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xKwJ5hrRKqo5UIz42owIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2
Y2Y3NjgwHhcNMjUwNjI4MDkwMDU0WhcNMjUwNjI5MDkwMDU0WjAzMTEwLwYDVQQD
EyhkMmI2N2Q5NWI0ODczYWM5ZmE0NWU5NWZiMTQzMGUyNTdmM2U3ZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXeNu3/5VMzZ/TI7ECFB2yTiyiXE
WT8j2YYevZOamiTxdjQGIfAsrOSKuNRf9LaIhnp89wND2VcxsG2GPVHRjRIZu8HV
vRx++wxRmi0t2FPqziMZuvXe6UmIrk5JlDoVlpMLbjnkKs/nmQxaYRnhPh0y4DWR
83spxabDmaHSrrUhy7ueWKGPAE7bGdrZn8J29SjJzuZQlJqHIfA4NvIilEJGoIrI
sVSO++0VIZKaWkvAqRtMRZtzGCwxnPS2UgiB9W5+H3o73Q+WQitkqXgNQ2UgZV+y
SjiBSl+Gq6CvwM9vSNG6t4c5PK3f6N9WuJ2vg5Fg+DhKYLZuFq4J0tfPzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK2fZW0hzrJ+kXpX7FDDiV/Pn/GMB8GA1UdIwQY
MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt
MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm
LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBv0eb3J
ahE9XPP5TRaDkL6T1oLDhk6ObqOxcT53/3Kg0xI/8+DHi2zGwEut+RP+mZc4oW90
JzBaAm5THq08B5n48RJO7xOkS0Q2FNLIYb8s+Lw3LtW5goGUrCjmJV4W5pjRVdDs
j1mPHMIjzJLBq/eu4ZoGzlq6wmXE+rkg9Tep/QrsUxIOuPRMWCZEJYjJ71+1O1PB
WOhU2d/+JKVgbQNydrecZL29kC7Chp7HCnH6fkJVYeZBtbRJkewBUGLnLhA4Vqxg
FH5XTZ3Add5w6IgWDyQVk+8bO++TETJ+qZOpfDSrErupB2rx8ViBS57gz+NiRmpO
1Q8QJtYW6ideeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:16 2025 by rpki-client