Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          WXljocPyo2t15+iuZ6EOAKx4idSrknffxcZcLG7Vrew=
Subject key identifier:   0B:D4:F1:36:FF:65:DC:E0:CF:CB:5F:03:65:F7:13:44:A1:6F:30:85
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       0199FDA1D4A511084B2312C4E84E1BED8417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          049A
Signing time:             Sun 19 Oct 2025 18:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:05 +0000
Files and hashes:         1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: 2gDsltC6WRrJueQ0Wzrl1TRMjsZ7giRPL8+VeuBjtwU=)
                          3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
                          4: ht_JyDW5SHb_fGBhQyUDtshRG0E.roa (hash: Z6WBdYQ46aWUfuhec+LPbx2Hp5R+pjpCIAS0/BT2vi4=)
                          5: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:d4:a5:11:08:4b:23:12:c4:e8:4e:1b:ed:84:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Oct 19 18:01:05 2025 GMT
            Not After : Oct 20 18:01:05 2025 GMT
        Subject: CN=0bd4f136ff65dce0cfcb5f0365f71344a16f3085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:c9:83:6d:da:9e:84:3a:63:23:95:1a:82:
                    5e:05:dc:29:f3:19:53:e0:16:96:0d:94:49:e8:66:
                    27:42:a3:57:cb:a3:0b:07:69:21:25:96:fa:a1:51:
                    6d:ec:4b:f8:b3:fe:dd:69:19:c2:75:67:96:48:f7:
                    a2:8e:a5:46:73:a7:92:13:d8:10:84:8b:87:a7:9a:
                    51:98:4a:88:81:9e:68:c2:7d:68:15:27:67:dc:a8:
                    4f:2e:6a:78:de:17:d3:57:87:89:2c:3c:a7:76:66:
                    a8:6b:e2:d1:c7:dc:6e:30:49:27:f4:a1:bf:e1:ad:
                    70:d3:a2:8c:e2:7a:6d:36:f2:23:45:2a:85:1e:c1:
                    31:c2:2a:a8:c2:84:b1:f7:f5:cb:a7:7b:d5:30:96:
                    90:95:2b:03:ce:85:d7:80:2f:99:c7:12:6a:36:73:
                    7c:a3:a5:0d:e1:5a:d2:70:73:65:79:be:f9:a9:c5:
                    11:26:3f:50:9d:1c:c0:41:86:96:2f:c9:01:38:3a:
                    d0:31:aa:78:1d:eb:fd:a1:63:a6:32:5a:92:cd:6b:
                    d7:4f:a0:7a:29:c0:aa:d0:09:88:3a:c0:75:c3:df:
                    3e:c1:ad:6b:f0:ed:c2:15:b5:0e:f9:49:f3:b7:b9:
                    b6:43:98:a1:67:d5:0a:33:b6:ec:4d:8c:04:5f:c7:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:F1:36:FF:65:DC:E0:CF:CB:5F:03:65:F7:13:44:A1:6F:30:85
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:14:f0:77:31:c1:79:03:ef:8c:db:94:fc:cf:f9:27:3b:62:
         bc:a6:fc:db:78:ac:f8:22:12:ef:3a:f4:fd:55:91:7e:98:b1:
         db:76:3c:a3:7a:55:07:b8:38:c2:1c:d5:2c:4b:2a:14:78:37:
         5b:b7:18:1e:e9:cf:be:07:e9:e5:4a:4e:03:d9:80:0c:91:54:
         a5:e7:57:3c:5a:c7:fe:73:f1:84:eb:d7:d6:83:96:3a:3a:91:
         10:4c:90:52:e3:d9:d1:ab:a2:bf:15:ef:b3:3f:de:3f:b8:b8:
         35:09:6d:40:39:64:ba:ac:61:7f:10:af:32:eb:6a:9c:75:cb:
         04:ae:32:02:3c:72:c3:a5:99:cc:76:e6:1b:66:f7:5c:40:31:
         f6:ac:40:fd:74:53:1f:dd:45:6b:2e:e7:03:dc:95:89:8d:7a:
         3b:ed:ca:bb:e5:07:9b:63:e9:0b:5e:6b:c7:b2:e4:84:1f:4b:
         e2:f0:d7:de:b6:af:0c:97:41:49:29:6e:42:40:64:7c:cc:ec:
         b6:05:01:fe:98:50:99:39:a0:4c:07:5f:aa:66:1d:aa:fd:2a:
         fc:47:7b:cc:a8:53:bf:f1:7c:8e:73:89:f3:33:0e:00:85:a2:
         04:5b:43:73:55:b6:6c:1c:39:d0:62:44:57:e1:39:9e:49:29:
         8e:5a:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:22 2025 by rpki-client