Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File:                     KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier:          J/uMIYF3dKwWZ1VKwavLAc8lVkA21nxr9sCgl94R5NU=
Subject key identifier:   4F:5B:97:4C:5C:2E:43:FC:A7:51:85:2C:A3:73:31:FD:AC:19:F1:83
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019672D425D15C427076A068A223B7C226FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number:          02C0
Signing time:             Sat 26 Apr 2025 16:00:27 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:27 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:27 +0000
Files and hashes:         1: 0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa (hash: JocbkBfhJXWTWCaW/Z+fAOKSZnVwMquu1mYz5s3f9M8=)
                          2: 1-sXlT3E8V0jDUCM-Ybkr4a6wLlo.roa (hash: CvuY/DdFSGhFi/vthGK/0x8yOd1SW50ze7RG7bTscdY=)
                          3: 8I731pLlO7OZA-KP6_7Tyd0X0p8.roa (hash: AgOQfpoBY8oNnSKqmzrHEGGLFBw8XUwNyYW1y0VgcFQ=)
                          4: 9InzsTm0J0FJh6_deGjqmJNOCu0.roa (hash: KQ5YYXT2pBjEDCmfW0eKzjN8cGKuVKrKtN3pdmXsi9U=)
                          5: BI1_IYMcz04ApdAcr2QAYo1Gijc.roa (hash: L+zD+W35uF9Uwlx9BIqDCzEBqTULiJDb8lRlDdA0EUg=)
                          6: CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa (hash: iqLlew5M42CsnChkC0+xYaVtbHLoz5KoE02bFqOtl7c=)
                          7: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: HQ0BDary3AuO6EWEVLAfMisBGOY3aDcJFe4S9vpCKMc=)
                          8: OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa (hash: atIx3Wbrqp85enT4nB4Os6srsGzi8BmryGvRtf7uqOE=)
                          9: P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa (hash: cHgFrkOyvHYjzh8XPdArtRphykJDW+VkpmQUgpfqLMY=)
                          10: QMiTm2-yiJDC2oOCB78-T7uhy68.roa (hash: ulPDJeSyn/J0aOHbAtmPLp6M9W5etSSNT8E799B3xEE=)
                          11: QsCDFSI-l5JC6to_qrNHYHmqg7g.roa (hash: BEriwV3dh0T3KvwWaeXKWclUm0zROlAOzgw+CVY7q0Q=)
                          12: U8FQsy0_ygrjfzDfPCuVUPjhxFI.roa (hash: VMdtwa4FkFy7nwi/xmcQtKtxXBN5sTN7YZIqy4ryF34=)
                          13: YeWW1PCTf3K6IXfWsiPqRL1xngw.roa (hash: eB/pknTzW+YV8hh7dZBIuVdC4d8+EHVKJgeJu2HkTYg=)
                          14: ZdiJyoo-l9tkMe9J769OhHUhgMY.roa (hash: AHUi1asCEzcucu2jHRjdz9eQqbhd55OH2AnByHrwu+A=)
                          15: a1UPsQjeoFgrASQvINSJJ7_1FEI.roa (hash: IUZiF8ty9Ran6Rx7Q+49/A+HVghw43cz7NyFFJcOacw=)
                          16: amm4UyE6_-2iIfziflS9OWcpi0I.roa (hash: qVhQHcCInjhG6Z1KYAKADs9ZxRsv3Qktzh0alZXqoKY=)
                          17: bxqRKqA4ZCz-HC5KXbkRpv1VjKY.roa (hash: 1IZMZI5YlnRhnfeBN3K+N1PwHEVvMMcDuqlDUtvJ1nU=)
                          18: emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa (hash: MGI6nqZElzquCZDFYtpLzQpeiVV6b7oAzJY8DVMAi04=)
                          19: sxNoWpD05QIoi_m8uc_lksfhDKU.roa (hash: wKcDV3z8mFiezwypjA2UNeuoXxV0RwLF2Q6N6uhTmzY=)
                          20: wFjr7ivDDEhOQrSM9UUePfjq6BM.roa (hash: hoiviRTlIUkKH3GW9AA2j6niz2qq5NnhMhKDwUCKYys=)
                          21: wkr3-E_-aqAccu5Xsw4WQFstKqc.roa (hash: Ail0xJvQX43faYT+R1FOFCGtCYp7xWL/Q1iaLeJmFoI=)
                          22: zrIx3F0bpchF38MY3NuMGU_mTx4.roa (hash: xQI4JeS8+tVg+pnfphMJ24bPIXjxEWvAFGvnAUjv++0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d4:25:d1:5c:42:70:76:a0:68:a2:23:b7:c2:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Apr 26 16:00:27 2025 GMT
            Not After : Apr 27 16:00:27 2025 GMT
        Subject: CN=4f5b974c5c2e43fca751852ca37331fdac19f183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:e0:c7:39:db:55:25:d5:c1:df:23:08:04:
                    4f:3a:38:35:d1:9c:08:54:3b:92:1b:67:b3:2e:9a:
                    45:f0:97:fc:01:36:78:7f:b1:4f:75:50:96:a9:e6:
                    c3:7e:a9:6c:97:6b:09:22:97:c6:53:e5:77:55:1e:
                    88:be:6e:4c:07:12:c6:37:18:b8:10:8d:aa:ff:84:
                    8f:78:b6:85:09:38:6c:66:16:22:0e:4d:b1:c2:19:
                    47:1d:cc:9c:2b:4c:ff:07:d2:fb:31:d2:d3:d8:e4:
                    e4:a3:40:51:62:8a:cf:3d:0b:a7:d1:ae:d7:bc:bf:
                    a9:47:24:d2:72:11:9f:88:3a:0d:3b:42:f0:43:ff:
                    ff:af:92:e4:8d:13:64:0c:8f:52:61:68:e3:52:4d:
                    c6:46:fb:f9:d1:d2:30:b3:e9:91:7e:dc:12:9e:4a:
                    e7:d5:57:85:4a:1a:37:58:a0:37:76:76:5e:1f:af:
                    bf:64:34:27:af:c5:45:bd:6e:19:01:76:9b:10:70:
                    ae:50:a0:6f:f0:5a:19:9b:63:09:fc:7a:62:4b:3d:
                    6f:04:a1:b0:ba:c9:bf:bc:43:d4:3c:7a:41:3c:a9:
                    da:52:d6:2b:e1:ce:d5:b2:29:1c:da:25:01:99:de:
                    63:1a:40:c9:b4:20:2b:df:c7:ab:ac:91:fa:5c:b9:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:97:4C:5C:2E:43:FC:A7:51:85:2C:A3:73:31:FD:AC:19:F1:83
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e9:15:d2:7c:11:b9:33:a1:4d:95:15:71:1d:d8:d5:cd:dd:
         c7:5e:7d:83:15:7f:0d:d4:08:e9:23:0f:c5:0d:e4:26:d2:a1:
         b3:37:5e:fa:a9:22:72:61:be:df:db:28:9f:ad:26:24:f4:a2:
         bf:50:cb:c6:7f:a4:06:b4:1e:3b:ab:ee:d5:85:5d:48:b4:58:
         1f:8f:38:ba:3d:da:d3:e8:25:5b:f4:23:80:ab:fd:88:81:34:
         54:85:d2:af:71:b0:57:6b:e1:ee:5d:f2:75:4a:1f:e9:d4:a9:
         51:72:29:b9:d5:5a:2d:a3:4c:d6:4e:5d:e6:28:9a:ac:55:09:
         db:21:41:35:c8:45:03:2c:f0:78:03:b2:26:a6:80:22:8d:1c:
         3d:50:7d:9b:76:46:74:af:e1:e3:44:6e:9e:65:15:ec:08:4c:
         d6:43:9a:63:5b:23:8f:90:54:59:42:d4:52:62:45:48:67:8a:
         0a:b0:af:cc:6e:58:44:23:d9:69:8a:bf:2d:04:5a:42:79:bc:
         91:5f:89:da:29:32:bf:b0:10:4f:07:50:e4:5d:9a:9b:06:32:
         d2:71:09:7a:77:f7:03:ac:4a:f2:04:90:7a:35:fe:a1:64:7c:
         ae:6c:90:46:ea:87:d9:65:b7:67:ca:78:ae:0b:1c:06:2e:63:
         55:c0:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:45 2025 by rpki-client