Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File:                     KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier:          TpIUNfJIz/pNb/I+Y9S+0IKGX9crixcHdzmodJsKNIg=
Subject key identifier:   B5:28:3B:71:F5:C7:53:F3:BE:87:F9:EF:E6:49:B2:AB:EB:9E:B1:47
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer:       /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial:       0197BBFE01687B6FF9E4BAAABCBCCEBB8BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number:          0481
Signing time:             Sun 29 Jun 2025 14:01:15 +0000
Manifest this update:     Sun 29 Jun 2025 14:01:15 +0000
Manifest next update:     Mon 30 Jun 2025 14:01:15 +0000
Files and hashes:         1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
                          2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: UXHeFFQoA5VEiNs5evTllH4sttHxyzKj2wSv+1/FUnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:fe:01:68:7b:6f:f9:e4:ba:aa:bc:bc:ce:bb:8b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
        Validity
            Not Before: Jun 29 14:01:15 2025 GMT
            Not After : Jun 30 14:01:15 2025 GMT
        Subject: CN=b5283b71f5c753f3be87f9efe649b2abeb9eb147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:1f:40:6d:00:15:f5:20:29:36:b2:12:d5:
                    71:48:96:46:87:4b:ef:55:a0:c1:6d:a7:22:4e:d8:
                    b3:26:27:aa:cd:d1:ff:23:c3:54:fa:d2:e6:d8:cf:
                    23:14:d1:70:cf:47:67:db:c4:66:92:64:a8:02:56:
                    30:34:30:70:bf:72:3d:63:6a:6c:7f:13:96:f0:3a:
                    2e:39:59:e0:6c:ad:76:0b:7e:26:3a:27:db:15:b4:
                    fb:93:df:46:1f:48:bc:a3:56:0d:bb:ac:ac:e9:4a:
                    0c:fd:91:78:21:9b:c4:4b:47:a1:56:e7:5d:5b:f6:
                    bf:35:3c:06:e5:82:14:27:34:59:4a:3a:ad:cb:83:
                    35:b8:f9:5b:d1:b1:a0:a5:77:48:ec:a2:ca:56:0d:
                    43:09:17:8a:14:7b:cb:32:9d:c2:29:9a:54:18:77:
                    39:35:07:72:1f:ea:4f:e8:ec:a0:03:32:32:dd:7a:
                    ef:35:2b:9e:68:d6:50:f7:84:10:68:1b:07:15:6f:
                    b9:36:23:26:2f:30:75:9e:a9:16:10:64:25:e2:a3:
                    ea:b2:1f:57:39:9c:5d:a4:b8:27:77:c3:62:21:7a:
                    8e:91:15:36:cb:b2:2b:6f:37:9b:18:68:ce:6f:68:
                    ad:f8:66:e1:96:94:89:13:64:f2:83:07:17:d3:73:
                    d7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:28:3B:71:F5:C7:53:F3:BE:87:F9:EF:E6:49:B2:AB:EB:9E:B1:47
            X509v3 Authority Key Identifier:
                keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:13:30:bf:ed:a7:68:53:2e:ed:62:dc:45:21:c7:2a:a1:
         f6:57:0c:08:fb:c8:1c:fa:27:67:b1:07:f6:09:75:3c:c5:2a:
         51:b4:58:2e:67:e1:61:c3:2b:cd:63:1b:da:65:52:a3:12:ba:
         77:93:fd:e3:a2:e9:21:6f:b7:a9:fc:fd:e3:80:43:c1:88:05:
         fd:eb:67:db:b5:3d:a6:7b:3a:b7:b4:d8:15:c6:f4:d6:6e:c8:
         9c:c8:fb:09:01:ff:8f:1e:d7:09:6e:b0:b6:e8:82:fb:00:4d:
         3d:ca:19:44:ca:23:2c:98:69:8b:12:eb:25:46:13:29:21:8d:
         ab:16:e3:c5:ec:81:d6:b1:b2:99:17:83:ce:df:28:ea:8e:51:
         a1:5d:00:4c:29:10:9d:33:b1:2c:42:ec:3f:4d:c6:36:4a:79:
         3d:cb:86:f2:28:99:07:ac:af:3c:a4:f4:e8:22:1a:4d:99:55:
         f3:a0:0a:db:ee:b9:d8:16:ec:8e:75:ca:0d:91:47:f2:67:2a:
         aa:d4:2c:8e:97:ce:f8:46:75:28:13:49:e9:6b:4f:3f:3d:27:
         fe:8e:4d:3f:cb:69:17:7a:b6:5e:dd:61:63:99:3e:f9:df:eb:
         e9:0f:a9:81:9f:e0:24:44:48:e4:3c:25:9c:08:bd:f4:c8:78:
         27:3d:5e:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7/gFoe2/55LqqvLzOu4ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDRkNTU1NzYzZmJhYTA5NGRjYTdhOTNkYWFhNzhmZDQw
MDg1NTQwHhcNMjUwNjI5MTQwMTE1WhcNMjUwNjMwMTQwMTE1WjAzMTEwLwYDVQQD
EyhiNTI4M2I3MWY1Yzc1M2YzYmU4N2Y5ZWZlNjQ5YjJhYmViOWViMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvofQG0AFfUgKTayEtVxSJZGh0vv
VaDBbaciTtizJieqzdH/I8NU+tLm2M8jFNFwz0dn28RmkmSoAlYwNDBwv3I9Y2ps
fxOW8DouOVngbK12C34mOifbFbT7k99GH0i8o1YNu6ys6UoM/ZF4IZvES0ehVudd
W/a/NTwG5YIUJzRZSjqty4M1uPlb0bGgpXdI7KLKVg1DCReKFHvLMp3CKZpUGHc5
NQdyH+pP6OygAzIy3XrvNSueaNZQ94QQaBsHFW+5NiMmLzB1nqkWEGQl4qPqsh9X
OZxdpLgnd8NiIXqOkRU2y7IrbzebGGjOb2it+GbhlpSJE2TygwcX03PXKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUoO3H1x1Pzvof57+ZJsqvrnrFHMB8GA1UdIwQY
MBaAFCsE1VV2P7qglNynqT2qp4/UAIVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQt
Yzc1NDJmODhlNzk3LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQtYzc1NDJmODhlNzk3
LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXoTML/t
p2hTLu1i3EUhxyqh9lcMCPvIHPonZ7EH9gl1PMUqUbRYLmfhYcMrzWMb2mVSoxK6
d5P946LpIW+3qfz944BDwYgF/etn27U9pns6t7TYFcb01m7InMj7CQH/jx7XCW6w
tuiC+wBNPcoZRMojLJhpixLrJUYTKSGNqxbjxeyB1rGymReDzt8o6o5RoV0ATCkQ
nTOxLELsP03GNkp5PcuG8iiZB6yvPKT06CIaTZlV86AK2+652BbsjnXKDZFH8mcq
qtQsjpfO+EZ1KBNJ6WtPPz0n/o5NP8tpF3q2Xt1hY5k++d/r6Q+pgZ/gJERI5Dwl
nAi99Mh4Jz1ewg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:23 2025 by rpki-client