Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          DbKUJWZCjhTl9V+h9WVenbUp0JZSIFUP7DPXsj/dM0c=
Subject key identifier:   0E:DC:9E:C2:4D:10:D2:07:9E:6E:8B:DF:0A:EB:48:4B:8B:B5:92:53
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       0196B823D78D601056343A70EDE57B881BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0A91
Signing time:             Sat 10 May 2025 03:01:18 +0000
Manifest this update:     Sat 10 May 2025 03:01:18 +0000
Manifest next update:     Sun 11 May 2025 03:01:18 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: SGx2kHNA3/SYrpacQtw5lghGKMR/K2GtuZYGV/q3AV8=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:d7:8d:60:10:56:34:3a:70:ed:e5:7b:88:1b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: May 10 03:01:18 2025 GMT
            Not After : May 11 03:01:18 2025 GMT
        Subject: CN=0edc9ec24d10d2079e6e8bdf0aeb484b8bb59253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:dd:3c:eb:62:ba:67:80:9f:6b:db:90:8b:
                    84:7b:e0:09:ad:14:a9:74:68:d6:f2:de:a0:bb:38:
                    4c:d3:c2:b5:8f:80:3d:25:46:c6:69:cf:6d:b4:16:
                    3d:94:5a:58:bd:eb:21:e9:3b:2c:ca:4b:14:cc:b6:
                    d2:21:f3:1a:85:c2:dd:ea:f0:b3:22:9b:3c:17:56:
                    47:d2:9a:47:64:e2:c8:32:d0:28:9c:35:93:6c:27:
                    ce:70:f7:2d:86:3b:61:f5:34:f5:7a:9f:22:43:ae:
                    b3:41:80:f3:15:74:3d:2d:56:d1:40:f9:2e:48:36:
                    a7:17:ad:83:b3:6e:25:0e:91:6c:80:eb:92:b9:77:
                    3b:e1:68:33:73:0e:fa:cd:14:a9:96:54:c3:17:62:
                    ab:26:b2:43:52:d0:0a:46:03:96:77:d8:6b:20:38:
                    06:52:6c:58:9f:1f:4a:e1:18:a9:20:d1:2e:3e:3b:
                    2b:ec:60:f3:c7:c1:c9:47:d5:9b:74:e1:69:b6:b5:
                    80:18:6f:6c:37:26:65:85:ca:dc:df:4a:a6:83:82:
                    99:85:dd:0b:9e:88:be:dc:2d:5d:0c:2f:50:18:ac:
                    89:22:02:66:f5:fe:d6:33:b0:83:89:b6:c2:e8:5d:
                    89:28:9d:ba:48:bf:4f:42:a8:13:33:ac:36:e0:d1:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DC:9E:C2:4D:10:D2:07:9E:6E:8B:DF:0A:EB:48:4B:8B:B5:92:53
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:3a:d1:af:6a:ce:47:0e:67:74:cf:08:b8:ba:48:4d:e7:
         ba:09:43:1a:c4:b5:f3:52:79:90:91:a2:79:a9:b4:02:ed:01:
         53:0a:3d:48:7a:ba:ea:2e:ef:33:5d:10:a4:66:8d:87:ea:a2:
         77:0f:83:e5:0e:7c:cd:fa:79:8c:d4:80:c1:6d:c1:27:97:6f:
         02:6f:f6:26:6d:2e:6b:ae:87:4b:52:70:3b:20:80:53:bf:b0:
         93:13:02:d0:cd:bb:b3:ea:a2:a4:da:17:32:cc:4d:a5:ee:0c:
         76:92:29:d0:fa:12:e3:9f:14:98:ff:2a:01:3a:2a:15:6c:ec:
         a6:97:b1:ea:b8:2b:81:7e:f5:1b:52:86:5c:f0:26:93:75:28:
         42:01:32:1f:86:cc:b9:7b:97:8f:00:be:c9:22:16:fa:6b:46:
         d3:87:f4:00:98:77:7e:26:07:66:fe:a9:b9:2c:53:a5:88:32:
         f1:d3:10:3c:b1:9f:7b:2c:f9:9e:ed:0d:90:6e:b9:29:c7:14:
         49:bc:aa:8f:e7:aa:c4:35:08:ab:57:12:41:de:5c:09:5a:bb:
         0b:a4:0d:34:31:31:cf:43:19:a5:a5:7c:5e:65:8d:9a:62:10:
         78:4d:c9:b8:b5:1c:c9:88:0f:24:f2:42:c7:91:c7:97:75:df:
         34:57:5b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:10:20 2025 by rpki-client