Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File:                     KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier:          vDE9duV520QeBb6YEufdKrMzUSpIh9mSZ7Jm3Vem/ls=
Subject key identifier:   AB:30:41:AF:37:01:69:CC:94:5A:70:6C:AE:BA:25:85:FF:25:25:E9
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer:       /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial:       0199FF594D8EB8FCB8858D7369045CEBE16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number:          05AD
Signing time:             Mon 20 Oct 2025 02:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:06 +0000
Files and hashes:         1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
                          2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: /wV7yaEcKjZMwVpy/LFjG15mqUNEnCo9m5MtRlxfA9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:4d:8e:b8:fc:b8:85:8d:73:69:04:5c:eb:e1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
        Validity
            Not Before: Oct 20 02:01:06 2025 GMT
            Not After : Oct 21 02:01:06 2025 GMT
        Subject: CN=ab3041af370169cc945a706caeba2585ff2525e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:69:13:33:f1:aa:ed:73:dd:1a:1f:72:2b:
                    96:98:b4:86:3a:bd:de:1e:7d:42:74:f3:7f:81:93:
                    26:df:74:e4:f6:1c:1f:6d:a0:3a:c1:7f:29:1f:dc:
                    25:f1:dc:ba:ec:d6:5e:12:95:b7:33:14:23:9d:a4:
                    ec:95:0d:a8:8a:7c:96:04:4b:a9:9b:6d:f3:52:88:
                    0c:37:bb:da:61:b1:06:88:20:41:60:ff:41:5a:73:
                    81:bd:0f:1b:e4:4e:ad:68:ab:08:d2:a8:80:19:e5:
                    da:40:d5:20:f5:65:d8:66:47:3e:90:e6:7f:e0:6f:
                    d4:a2:04:6c:70:71:da:5f:ef:e2:1c:de:8a:9a:a4:
                    90:ea:f8:39:e0:aa:b3:0c:a2:20:0a:d6:e3:ee:00:
                    cf:3f:36:4f:c0:9f:65:73:b0:33:31:cc:4b:fd:3c:
                    e8:e1:cc:77:d9:ea:d5:d6:84:c2:1b:e4:87:e6:d4:
                    26:51:35:85:a2:99:17:7d:b7:49:55:47:50:4a:97:
                    eb:cf:7f:67:59:df:e7:38:53:87:fc:40:19:1d:b5:
                    c3:79:50:9b:5c:24:be:1b:55:14:61:12:52:1b:aa:
                    63:69:db:39:7c:08:27:37:7e:7b:1a:51:78:f0:c8:
                    a3:7a:a2:fd:0f:51:cc:57:dd:ff:fa:fc:19:c5:6b:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:41:AF:37:01:69:CC:94:5A:70:6C:AE:BA:25:85:FF:25:25:E9
            X509v3 Authority Key Identifier:
                keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e9:bd:b3:f4:ce:d1:80:72:3e:bd:54:98:74:e9:f6:7f:bb:
         d6:c7:d0:2d:60:c1:79:68:a4:cf:99:bf:d6:ad:a4:b6:eb:67:
         29:f1:95:a5:27:bb:1b:08:0f:55:5a:f8:dc:24:9d:98:7f:5e:
         d7:39:30:94:3e:d1:e4:5f:2e:28:65:82:7a:01:7f:ab:b1:58:
         9a:e4:29:cb:8e:e6:98:72:24:c1:b4:72:66:14:a1:9a:c8:b4:
         7b:38:98:8e:b2:3e:d5:b3:06:bf:a0:48:07:2c:39:8a:dd:23:
         34:d1:7c:1a:c9:f7:d0:8e:bd:86:ea:89:de:94:ab:13:5c:de:
         01:7e:a2:99:ad:48:6b:65:1e:cb:b6:5b:0c:4b:71:79:00:53:
         42:bb:bc:f5:ae:24:dc:51:a0:11:3d:d3:e2:85:b3:da:a3:14:
         37:72:f6:4f:0f:51:18:46:08:9e:94:1b:7e:82:e1:20:ad:4d:
         e5:8c:5c:52:63:cb:e9:4a:23:f7:87:7a:d9:10:13:4b:7b:d9:
         6f:e9:f0:f2:c4:db:db:20:e3:32:72:87:e6:c8:b3:6a:7d:02:
         a7:d0:1a:de:3c:7a:21:6b:4c:0f:14:55:18:d4:0c:d1:83:f3:
         54:a4:6b:78:d6:cf:0e:1d:e5:66:21:89:89:82:25:9e:8d:2c:
         81:45:e1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WU2OuPy4hY1zaQRc6+FqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDRkNTU1NzYzZmJhYTA5NGRjYTdhOTNkYWFhNzhmZDQw
MDg1NTQwHhcNMjUxMDIwMDIwMTA2WhcNMjUxMDIxMDIwMTA2WjAzMTEwLwYDVQQD
EyhhYjMwNDFhZjM3MDE2OWNjOTQ1YTcwNmNhZWJhMjU4NWZmMjUyNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0xpEzPxqu1z3RofciuWmLSGOr3e
Hn1CdPN/gZMm33Tk9hwfbaA6wX8pH9wl8dy67NZeEpW3MxQjnaTslQ2oinyWBEup
m23zUogMN7vaYbEGiCBBYP9BWnOBvQ8b5E6taKsI0qiAGeXaQNUg9WXYZkc+kOZ/
4G/UogRscHHaX+/iHN6KmqSQ6vg54KqzDKIgCtbj7gDPPzZPwJ9lc7AzMcxL/Tzo
4cx32erV1oTCG+SH5tQmUTWFopkXfbdJVUdQSpfrz39nWd/nOFOH/EAZHbXDeVCb
XCS+G1UUYRJSG6pjads5fAgnN357GlF48MijeqL9D1HMV93/+vwZxWtnFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKswQa83AWnMlFpwbK66JYX/JSXpMB8GA1UdIwQY
MBaAFCsE1VV2P7qglNynqT2qp4/UAIVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQt
Yzc1NDJmODhlNzk3LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQtYzc1NDJmODhlNzk3
LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEum9s/TO
0YByPr1UmHTp9n+71sfQLWDBeWikz5m/1q2ktutnKfGVpSe7GwgPVVr43CSdmH9e
1zkwlD7R5F8uKGWCegF/q7FYmuQpy47mmHIkwbRyZhShmsi0eziYjrI+1bMGv6BI
Byw5it0jNNF8Gsn30I69huqJ3pSrE1zeAX6ima1Ia2Uey7ZbDEtxeQBTQru89a4k
3FGgET3T4oWz2qMUN3L2Tw9RGEYInpQbfoLhIK1N5YxcUmPL6Uoj94d62RATS3vZ
b+nw8sTb2yDjMnKH5sizan0Cp9Aa3jx6IWtMDxRVGNQM0YPzVKRreNbPDh3lZiGJ
iYIlno0sgUXh1Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:56 2025 by rpki-client