Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File:                     KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier:          fRkJ9w6SyXPf/mOjpB9DlXcHYLNSr39a8lSVIa/48qY=
Subject key identifier:   B5:FC:4E:86:16:1C:08:E7:8D:14:C5:4C:7C:BC:4F:65:8F:F7:C1:1C
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer:       /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial:       0199FE46DD61012AF422B6AE444D94E0D8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number:          0350
Signing time:             Sun 19 Oct 2025 21:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:20 +0000
Files and hashes:         1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: Y5wHXFr+qSSHo5mAis1goDDeVQmhOGCslRkW8heDO+8=)
                          2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:dd:61:01:2a:f4:22:b6:ae:44:4d:94:e0:d8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
        Validity
            Not Before: Oct 19 21:01:20 2025 GMT
            Not After : Oct 20 21:01:20 2025 GMT
        Subject: CN=b5fc4e86161c08e78d14c54c7cbc4f658ff7c11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:f4:bc:f7:c6:8e:d2:bf:b8:22:b0:89:d6:
                    63:7f:84:5d:68:a3:75:5b:48:7a:a1:e0:1b:f2:d3:
                    8a:52:97:e3:c3:19:d7:e0:45:b1:8e:79:ed:57:8c:
                    c8:4d:db:73:13:11:5f:d7:85:65:10:b8:4d:9e:5c:
                    e2:26:13:69:a5:ba:c0:9f:be:dd:5f:3a:2d:62:2b:
                    bc:0e:7f:a6:8e:a5:72:8e:46:a3:67:84:01:6f:4c:
                    9f:02:c0:19:4b:40:26:3a:b7:98:35:a3:de:59:b5:
                    e3:1c:c7:03:d8:c8:35:36:c6:44:bf:61:bf:b0:07:
                    7f:96:81:fb:bd:29:37:53:e5:de:52:b5:20:93:f5:
                    5d:93:40:be:c0:4b:fd:f0:2d:c9:b0:1b:07:8e:6b:
                    f2:05:7d:31:8f:30:1b:2a:e0:72:73:e1:a4:87:ab:
                    f0:c6:66:3a:ee:8b:ee:33:86:4b:67:89:f5:0e:56:
                    5a:40:0d:73:1b:c0:63:87:ff:82:7d:ab:86:25:69:
                    e5:7f:57:4d:a5:5f:d8:7e:11:4c:18:20:0e:f7:1d:
                    fa:52:a4:00:0b:0d:b1:7a:65:2f:f0:c1:fa:99:e8:
                    b2:ce:ae:17:9b:91:b6:0d:2c:a5:6f:8e:2a:e1:b5:
                    a1:f6:d2:33:ab:46:e3:97:c3:a6:7e:38:1f:63:a3:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FC:4E:86:16:1C:08:E7:8D:14:C5:4C:7C:BC:4F:65:8F:F7:C1:1C
            X509v3 Authority Key Identifier:
                keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e7:4a:6a:4e:ac:19:e0:53:1e:de:ea:50:4d:ba:e2:29:fd:
         03:a0:fd:67:dd:ea:81:af:9c:c2:19:00:fb:be:67:fd:6b:23:
         96:fb:dc:dd:c9:b7:69:5b:af:5a:a7:f1:56:a6:44:a7:a4:db:
         c2:68:c1:db:95:f6:3d:ca:9f:27:10:ac:86:e3:66:60:3b:81:
         82:05:76:9f:82:3d:6c:40:12:8e:d8:26:80:37:14:bc:a3:8a:
         ce:e0:81:76:0f:21:1b:c8:65:44:da:c5:b8:e3:35:66:0b:e5:
         23:7a:43:ed:f7:8e:31:6b:93:9b:b3:0a:e1:87:3d:a7:83:1b:
         4a:da:8a:7d:d7:f8:ae:97:77:02:10:03:95:48:9b:8d:39:0f:
         6f:39:d9:37:d5:fe:a3:a8:bf:4d:5a:2b:63:2d:d7:f4:be:5c:
         22:b0:68:17:f3:5d:26:eb:c1:48:8f:52:cd:4b:67:04:ea:aa:
         26:f7:a0:82:ef:d4:83:c9:b9:d1:f0:b8:4f:53:6f:a3:ec:09:
         54:a5:f4:10:51:f4:51:9f:63:a8:8a:8f:a8:8f:73:d2:c6:3f:
         78:c2:3b:4d:87:0f:80:b7:a4:41:ac:c7:39:8f:7b:66:bf:bc:
         09:5c:bf:b0:59:2c:04:1f:0c:4f:39:ca:34:48:9f:71:03:f8:
         75:5a:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:08 2025 by rpki-client