
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          sqSvniIC7Q4w1X3Dao9okpnTF1EGiGFJLsd3gfBQaBI=
Subject key identifier:   64:7A:BA:98:85:DA:87:2C:74:0B:79:59:23:FF:A8:78:0A:6B:02:7B
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       019A4EF4A76FC1989A4F6FE93A75C8F4A177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          146C
Signing time:             Tue 04 Nov 2025 13:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:47 +0000
Files and hashes:         1: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=)
                          2: JH04xJWe_z8SXKxh4G8BUvGkgyI.roa (hash: KcYkH5Y5+qxD1S4xEoLuy3XrGXKw19/czmMpLLQb7oM=)
                          3: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: hPni1q/X5TPZOA7X14YHheE11erKAAduIq7gvIiOG88=)
                          4: ZhmjJZRo8Sbwc315ZOZw1TWufMc.roa (hash: NK5M1wuv8SZ2zP40bZYi2MQNmp6KED1qYY75Icn9mak=)
                          5: nKQffzVaC8uVNgTXixnx37_DL6s.roa (hash: pYAPWd/N9R42UtkBeCiR8wjtUnidTLisTp0Evm7U4aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:a7:6f:c1:98:9a:4f:6f:e9:3a:75:c8:f4:a1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Nov  4 13:00:47 2025 GMT
            Not After : Nov  5 13:00:47 2025 GMT
        Subject: CN=647aba9885da872c740b795923ffa8780a6b027b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:ab:84:0a:72:1f:8d:bb:7a:b6:13:5d:a4:
                    af:11:fb:2f:e1:6d:d6:a2:e7:65:50:2b:a1:fa:40:
                    5b:43:d3:97:38:51:d8:eb:2d:aa:f5:20:70:ac:52:
                    04:33:9a:85:82:77:2b:2e:bb:f5:28:9d:95:36:f0:
                    e6:e3:5e:fa:49:1d:71:57:f6:c9:b7:8c:1d:dd:4b:
                    ac:59:bc:0e:ad:8c:f1:a0:8d:56:43:e8:30:e6:4e:
                    71:11:79:92:ab:c0:51:19:d2:88:ae:f6:a6:f0:05:
                    f5:b2:12:6d:d7:9e:fe:9e:3a:df:1f:37:f5:f7:cc:
                    3e:f5:43:18:9b:db:8a:a1:97:d1:d8:9c:38:52:3a:
                    6b:fe:90:e5:73:a6:ad:a0:ac:37:30:b7:06:5b:32:
                    fe:5a:9b:fb:3d:7f:a8:43:2a:26:cd:84:a4:2a:98:
                    b9:4c:2d:e5:fd:66:6a:20:64:3c:88:7b:f3:3e:b8:
                    1c:8d:3d:c4:ce:97:61:8f:de:8f:67:c8:e3:5b:44:
                    5d:6b:70:a7:af:45:df:99:6d:ee:24:df:3c:f1:d5:
                    44:26:70:e7:fe:cb:fc:08:43:2c:e3:ab:6e:88:2c:
                    2a:99:e9:5a:d5:1d:3f:97:4c:98:3a:3b:06:1f:59:
                    07:28:14:fb:cd:ed:b5:f2:91:dd:1e:fb:b0:99:d3:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7A:BA:98:85:DA:87:2C:74:0B:79:59:23:FF:A8:78:0A:6B:02:7B
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         67:49:4a:98:7b:20:ba:b2:9d:71:ef:96:a3:96:45:59:55:50:
         76:77:74:99:87:9b:e5:85:29:3a:d3:69:6e:54:e8:ff:ec:6b:
         5e:4e:f6:cc:73:97:11:46:03:45:7d:39:3b:ca:de:2f:49:5e:
         ff:64:3c:d6:ec:df:b1:67:2f:09:85:5e:32:1e:5d:d3:c3:23:
         5e:fd:e1:cc:e6:26:8a:62:58:2c:9c:b3:68:6e:92:ed:4d:4c:
         32:c8:60:ca:4c:5b:4f:6b:73:01:0a:ff:6d:a8:32:bc:8d:ec:
         b7:02:6a:99:d4:99:0c:b9:65:f7:ac:09:b5:66:29:99:57:31:
         73:f9:41:e9:06:cb:3a:0a:5c:c1:32:a5:75:64:32:56:ef:c2:
         fd:4b:51:32:08:9f:4f:b5:ac:cd:0a:21:a8:db:98:48:60:cd:
         1d:f2:7d:9f:07:1c:79:05:1a:c2:5f:34:b7:ea:c3:11:64:30:
         af:33:c2:21:c7:ec:61:76:0c:92:4b:53:6b:b8:4c:60:95:bf:
         c8:88:91:bd:b3:3a:bf:3b:38:b1:84:93:54:54:2c:9b:c1:38:
         5f:de:87:b0:cb:14:74:2e:bc:f3:b8:1b:36:e2:5e:83:6d:51:
         e1:93:1d:7e:d3:fc:be:89:e8:3b:12:75:62:77:a7:d9:14:bc:
         8d:2c:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:46:48 2025 by rpki-client