Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          rDLoId9V4ZvRtHLYHaQ9Up3r1fdB41fEuqrhDvd/T8s=
Subject key identifier:   86:F5:BC:EC:B6:C3:6B:AA:33:90:5A:FF:86:50:0D:A4:18:34:79:CC
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       0197B70F50F5552354FE033D17A5D06FC6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0B15
Signing time:             Sat 28 Jun 2025 15:02:03 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:03 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:03 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: Q5qrSV9anlh5jPWz6PbaR0mCqTg53ep0nnjlRAOsVQE=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:50:f5:55:23:54:fe:03:3d:17:a5:d0:6f:c6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Jun 28 15:02:03 2025 GMT
            Not After : Jun 29 15:02:03 2025 GMT
        Subject: CN=86f5bcecb6c36baa33905aff86500da4183479cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:01:64:f0:66:b6:8d:a1:3b:0e:d9:89:3c:
                    df:e9:bb:66:df:c4:42:4c:ac:f6:27:97:78:3d:bc:
                    63:08:00:8d:f3:87:17:3e:ee:d3:0f:b6:20:15:49:
                    be:9b:e4:c8:d5:33:e6:85:a1:a8:88:76:19:65:95:
                    58:c4:7b:fb:0a:40:e0:ac:70:b7:c6:fe:6f:a0:26:
                    db:f8:2a:3f:fe:cb:85:0b:e6:3a:6a:df:87:a7:1c:
                    40:7f:93:6f:ca:84:4d:af:58:60:e1:67:ae:e0:72:
                    25:4c:5a:1e:26:6f:0a:a6:8f:13:29:f0:53:ae:2a:
                    14:cf:4a:b0:7e:12:4b:2f:71:39:0b:b8:16:6f:04:
                    be:4d:9c:9b:3c:36:52:cb:5e:55:11:35:5f:69:d1:
                    14:fb:7f:c7:7a:13:7d:95:27:7a:dc:12:37:9c:55:
                    5a:31:d7:3d:0a:37:74:00:dc:83:1d:1d:58:d9:46:
                    21:da:4f:c5:83:6f:a2:8a:ea:3a:9e:c6:d8:29:29:
                    e5:7c:af:d3:1e:44:b7:e7:f3:23:3b:37:17:08:59:
                    a8:1c:9c:f7:58:54:5f:04:7f:3b:cc:fe:3d:df:61:
                    eb:7a:8b:27:d4:6d:1f:24:27:e3:9e:cc:44:cc:52:
                    34:db:ce:c0:05:4a:a9:13:9a:a4:be:d7:e9:29:78:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F5:BC:EC:B6:C3:6B:AA:33:90:5A:FF:86:50:0D:A4:18:34:79:CC
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:67:6a:2a:94:29:0b:7f:60:56:b1:6f:d4:ab:24:1a:39:
         d7:75:1b:8c:33:e8:63:73:5a:04:9d:16:fc:c8:e8:44:21:cb:
         dc:d2:8d:19:16:d4:30:0e:36:0b:fe:54:cb:5b:e7:db:91:6a:
         c1:e2:80:29:df:92:8b:09:80:8d:66:6b:a7:6b:ae:a1:7c:96:
         27:2a:62:ac:27:05:d0:87:85:b8:36:16:6a:1c:8f:88:f8:ae:
         f6:ca:38:8e:fe:83:f8:c8:d9:d1:8b:f1:cb:eb:cc:1a:6a:b7:
         8d:1e:45:cf:e9:94:fd:ae:a0:3c:3a:61:37:f8:69:f6:e3:64:
         6a:5d:02:6b:ba:3e:b3:d9:af:ca:87:99:db:a8:ff:45:eb:d2:
         d0:c6:2b:7f:22:10:b1:51:c6:08:b8:7d:a4:45:10:6c:c9:6f:
         45:2e:60:44:66:c9:d5:59:21:7b:01:f0:9b:32:e3:3c:8d:0a:
         fa:be:d5:26:6b:09:58:31:2e:61:93:9c:22:9f:5c:7b:55:8f:
         22:9a:4e:51:02:0d:bc:39:41:a8:a0:6e:bf:50:4d:b7:24:14:
         a7:3c:a6:37:48:9c:d6:6d:04:1d:3a:27:ec:d2:48:9d:2e:11:
         d5:3d:c0:d1:b6:a0:65:4f:8e:9d:a1:4d:ab:b8:b7:c0:8f:14:
         1a:3e:d1:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D1D1VSNU/gM9F6XQb8bcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy
NTU2ZjAwHhcNMjUwNjI4MTUwMjAzWhcNMjUwNjI5MTUwMjAzWjAzMTEwLwYDVQQD
Eyg4NmY1YmNlY2I2YzM2YmFhMzM5MDVhZmY4NjUwMGRhNDE4MzQ3OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SwBZPBmto2hOw7ZiTzf6btm38RC
TKz2J5d4PbxjCACN84cXPu7TD7YgFUm+m+TI1TPmhaGoiHYZZZVYxHv7CkDgrHC3
xv5voCbb+Co//suFC+Y6at+HpxxAf5NvyoRNr1hg4Weu4HIlTFoeJm8Kpo8TKfBT
rioUz0qwfhJLL3E5C7gWbwS+TZybPDZSy15VETVfadEU+3/HehN9lSd63BI3nFVa
Mdc9Cjd0ANyDHR1Y2UYh2k/Fg2+iiuo6nsbYKSnlfK/THkS35/MjOzcXCFmoHJz3
WFRfBH87zP4932Hreosn1G0fJCfjnsxEzFI0287ABUqpE5qkvtfpKXjr2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb1vOy2w2uqM5Ba/4ZQDaQYNHnMMB8GA1UdIwQY
MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt
NzY5ODI0OTNlYTFhLzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh
LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/BnaiqU
KQt/YFaxb9SrJBo513UbjDPoY3NaBJ0W/MjoRCHL3NKNGRbUMA42C/5Uy1vn25Fq
weKAKd+SiwmAjWZrp2uuoXyWJypirCcF0IeFuDYWahyPiPiu9so4jv6D+MjZ0Yvx
y+vMGmq3jR5Fz+mU/a6gPDphN/hp9uNkal0Ca7o+s9mvyoeZ26j/RevS0MYrfyIQ
sVHGCLh9pEUQbMlvRS5gRGbJ1VkhewHwmzLjPI0K+r7VJmsJWDEuYZOcIp9ce1WP
IppOUQINvDlBqKBuv1BNtyQUpzymN0ic1m0EHTon7NJInS4R1T3A0bagZU+OnaFN
q7i3wI8UGj7RPw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:02 2025 by rpki-client