Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          a/01ntkMIX2wuqk4eersSvhh0xpytGHFiC7OtxMsy3E=
Subject key identifier:   0F:54:30:E7:5D:1C:45:57:9E:16:26:5F:D3:FF:84:94:3A:AB:8F:CA
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       0199FC58726C7FAB15EC1FB322C4A4CB2226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0C42
Signing time:             Sun 19 Oct 2025 12:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:18 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: C+dF56Z3DiUpJ5coP2lMpGjG39jpD270p1epZGR/b2w=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:72:6c:7f:ab:15:ec:1f:b3:22:c4:a4:cb:22:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Oct 19 12:01:18 2025 GMT
            Not After : Oct 20 12:01:18 2025 GMT
        Subject: CN=0f5430e75d1c45579e16265fd3ff84943aab8fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:c4:5c:89:83:28:35:d7:16:8f:40:b7:02:
                    10:82:a7:ea:1a:ad:ac:41:9e:8b:d0:32:32:fb:9c:
                    e0:08:0c:e8:a2:34:b2:75:b9:fa:f9:32:80:c0:08:
                    cb:84:18:bb:b9:9e:a7:d9:29:2f:0a:6d:02:0a:43:
                    7a:ab:0f:15:d4:25:8a:ac:94:f8:38:60:d1:0b:0e:
                    a2:62:fc:50:e8:82:ff:c4:38:1f:30:b7:c3:8a:7c:
                    14:ca:11:e9:53:d1:c2:03:1a:dd:30:41:6d:4b:2e:
                    f8:12:1a:ac:68:e7:11:f3:ac:a0:c5:f4:e1:fc:f1:
                    55:36:af:99:24:fa:97:8a:2d:cc:44:a0:bf:59:c5:
                    44:d8:37:8f:e1:83:89:fa:d1:2f:33:24:b5:24:b4:
                    48:20:96:87:43:9c:a4:ff:02:2b:f2:87:3e:dc:4b:
                    74:43:44:70:25:ed:db:b7:5e:95:50:cd:1e:44:81:
                    06:24:8c:f1:b9:f3:87:5b:91:3c:61:38:49:74:a0:
                    5d:99:b1:ed:58:00:dd:fc:0b:e6:2d:d4:69:2e:59:
                    77:a2:97:02:7f:73:55:61:1f:07:26:74:88:0d:f5:
                    20:15:1e:8b:4e:8f:01:f6:e2:63:3a:74:d5:93:c5:
                    0c:17:30:5b:6a:54:8a:f7:77:56:86:78:e4:f7:ba:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:30:E7:5D:1C:45:57:9E:16:26:5F:D3:FF:84:94:3A:AB:8F:CA
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ce:34:a4:54:19:e9:e8:f8:4f:82:66:43:64:01:3f:66:1e:
         1b:f9:58:de:ec:03:fa:b7:7f:8a:db:85:21:47:57:e3:92:94:
         1b:27:5b:41:6a:b5:fb:3b:8e:63:53:8e:ae:7d:e5:1f:86:a1:
         15:78:0f:a3:ea:78:5c:86:d7:54:ed:12:6e:ec:ee:98:a6:3a:
         d7:51:43:06:f7:83:d0:74:18:36:e8:66:2b:05:a9:f7:00:2b:
         5d:16:ed:87:b7:05:60:d7:f2:a3:39:3f:c8:d9:92:51:78:50:
         82:75:19:73:78:6b:27:3e:b6:c9:49:9f:bb:86:29:ed:7d:5f:
         94:91:a6:9d:d1:0b:08:b1:af:c0:81:e9:96:be:4e:9a:4b:0f:
         e5:80:e0:48:50:fb:b2:26:30:7c:7a:73:52:b2:a7:39:77:32:
         f0:80:7c:f7:39:e2:3e:60:39:fd:9a:85:95:6b:cc:f8:2d:38:
         45:9a:da:d0:37:5f:89:aa:9f:a0:08:80:28:59:a9:43:0e:48:
         3c:01:5f:55:9e:32:d7:58:aa:fd:aa:c2:49:3e:81:75:ad:f3:
         38:18:c8:01:1c:39:f0:8b:f8:71:57:d1:2e:39:b5:0a:06:5f:
         45:7b:ab:2d:d0:f9:e9:86:b4:a3:db:6c:70:66:03:4a:30:1c:
         91:8b:a2:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHJsf6sV7B+zIsSkyyImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy
NTU2ZjAwHhcNMjUxMDE5MTIwMTE4WhcNMjUxMDIwMTIwMTE4WjAzMTEwLwYDVQQD
EygwZjU0MzBlNzVkMWM0NTU3OWUxNjI2NWZkM2ZmODQ5NDNhYWI4ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS/EXImDKDXXFo9AtwIQgqfqGq2s
QZ6L0DIy+5zgCAzoojSydbn6+TKAwAjLhBi7uZ6n2SkvCm0CCkN6qw8V1CWKrJT4
OGDRCw6iYvxQ6IL/xDgfMLfDinwUyhHpU9HCAxrdMEFtSy74EhqsaOcR86ygxfTh
/PFVNq+ZJPqXii3MRKC/WcVE2DeP4YOJ+tEvMyS1JLRIIJaHQ5yk/wIr8oc+3Et0
Q0RwJe3bt16VUM0eRIEGJIzxufOHW5E8YThJdKBdmbHtWADd/AvmLdRpLll3opcC
f3NVYR8HJnSIDfUgFR6LTo8B9uJjOnTVk8UMFzBbalSK93dWhnjk97roZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9UMOddHEVXnhYmX9P/hJQ6q4/KMB8GA1UdIwQY
MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt
NzY5ODI0OTNlYTFhLzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh
LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM40pFQZ
6ej4T4JmQ2QBP2YeG/lY3uwD+rd/ituFIUdX45KUGydbQWq1+zuOY1OOrn3lH4ah
FXgPo+p4XIbXVO0SbuzumKY611FDBveD0HQYNuhmKwWp9wArXRbth7cFYNfyozk/
yNmSUXhQgnUZc3hrJz62yUmfu4Yp7X1flJGmndELCLGvwIHplr5OmksP5YDgSFD7
siYwfHpzUrKnOXcy8IB89zniPmA5/ZqFlWvM+C04RZra0DdfiaqfoAiAKFmpQw5I
PAFfVZ4y11iq/arCST6Bda3zOBjIARw58Iv4cVfRLjm1CgZfRXurLdD56Ya0o9ts
cGYDSjAckYuilg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:04 2025 by rpki-client