Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File:                     KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier:          UuaNyMIxTlFKRfLUWQXRhymD6Lpgr/688VP6sfwPp6Y=
Subject key identifier:   D5:9E:9C:70:B2:73:CC:A7:A2:6B:23:D9:25:A3:F3:FA:9E:01:7C:F5
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer:       /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial:       0197B70EB4046FFA40A53EA37A0B58B6EF65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 15:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:23 +0000
Files and hashes:         1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
                          2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: dvfP9QYrIp+pS5aRTwcmuyTs+aSyDI4xGjTP0/8JVJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:b4:04:6f:fa:40:a5:3e:a3:7a:0b:58:b6:ef:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
        Validity
            Not Before: Jun 28 15:01:23 2025 GMT
            Not After : Jun 29 15:01:23 2025 GMT
        Subject: CN=d59e9c70b273cca7a26b23d925a3f3fa9e017cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:fb:4b:61:c8:80:e4:52:86:2c:c1:62:d9:
                    fc:8a:69:41:db:94:3e:c0:65:b8:74:1c:e6:b8:95:
                    fd:be:db:f6:a7:19:a4:f6:5d:bb:59:c2:ab:d2:47:
                    7c:be:2f:2d:6e:ae:21:b2:23:1a:3d:54:90:5d:1b:
                    20:04:db:e7:20:a8:fb:63:ad:32:ed:74:5f:55:0e:
                    b4:6f:eb:72:16:1b:94:f3:33:05:c4:46:1d:00:5e:
                    7b:bf:f3:13:a1:15:28:15:a4:ab:68:82:de:06:fa:
                    e0:cb:87:0e:e6:9d:e0:dc:44:ee:c4:bd:69:97:4e:
                    b8:a9:0e:12:13:5f:fe:79:54:73:39:bc:b7:a6:94:
                    5c:b8:07:00:2a:02:2c:0a:d3:ce:31:e4:94:33:2d:
                    8c:a8:99:21:d2:66:fa:95:53:1c:35:4a:50:76:80:
                    eb:b6:9c:3f:85:fd:ef:d0:6d:00:b6:bc:d9:e2:de:
                    36:c0:1e:30:3c:43:f3:6e:f0:b3:85:06:14:75:c8:
                    34:ee:9a:b6:93:f6:4b:6a:e5:07:3f:8b:ac:2b:8a:
                    10:ec:cf:74:52:7b:b6:14:88:c7:3a:03:3d:44:a7:
                    db:02:87:08:be:a9:6d:84:5d:14:d8:fe:ea:2a:50:
                    bc:2b:7a:45:b1:09:46:71:02:60:43:49:3b:5a:ef:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:9C:70:B2:73:CC:A7:A2:6B:23:D9:25:A3:F3:FA:9E:01:7C:F5
            X509v3 Authority Key Identifier:
                keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c9:28:09:de:bd:a3:a8:51:61:ac:97:b0:06:06:09:2f:8d:
         d1:a1:a4:52:f0:2e:bd:33:75:85:af:a5:a4:bc:1a:85:bf:31:
         f7:cf:62:e4:44:6b:9f:77:66:bb:38:6b:fc:69:38:58:66:c8:
         08:c8:bb:c8:ab:f0:eb:37:c1:2b:87:1b:51:a6:6d:8d:2f:fa:
         85:ae:af:27:b1:01:42:f6:ef:5f:ba:1b:85:35:0d:d9:ac:3d:
         d5:54:f1:fc:b3:15:57:9c:61:7a:f0:4c:f1:bd:d5:7c:f5:d2:
         78:6c:ff:96:21:83:3e:f9:48:9e:fe:a9:42:6c:6d:49:67:cf:
         f8:c6:a3:26:d7:63:6c:cc:ed:c2:7d:01:0e:d0:5f:81:b4:0a:
         37:f7:82:41:9d:19:ac:28:6c:b0:35:74:eb:6f:62:29:18:21:
         fc:18:f2:3f:0a:a0:db:91:71:8a:f1:42:31:67:d3:35:b4:ba:
         87:c1:d0:cd:de:ff:68:08:8c:c0:a4:56:7d:a1:fe:aa:2b:97:
         ab:86:f9:33:78:81:a2:43:58:af:b2:64:fb:cc:58:84:65:31:
         b5:f6:16:bf:53:14:29:55:47:77:12:87:dd:76:01:02:ef:3c:
         6b:46:77:3e:69:4e:4a:4a:cd:aa:bc:f3:bb:de:1b:71:de:b9:
         4a:11:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:36 2025 by rpki-client