Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File:                     KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier:          zr+8uHf+n3zudsq/ON7kxtS3fNGPpEyD1iBdq4/nyrk=
Subject key identifier:   D3:10:59:51:E6:42:42:D3:69:83:07:61:BA:DE:8E:C6:42:3A:FB:59
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer:       /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial:       019770AC5694910C5EAB94A51FFA5A9C3A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number:          1337
Signing time:             Sat 14 Jun 2025 23:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:31 +0000
Files and hashes:         1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
                          2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: aIBbNpo6MKnfRt3nAuL6OEON9WwcHnLbUQUZb2Lr5kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:56:94:91:0c:5e:ab:94:a5:1f:fa:5a:9c:3a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
        Validity
            Not Before: Jun 14 23:00:31 2025 GMT
            Not After : Jun 15 23:00:31 2025 GMT
        Subject: CN=d3105951e64242d369830761bade8ec6423afb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:32:1d:e5:59:55:93:e2:6c:27:f5:72:34:
                    23:0f:57:25:d0:fd:91:ab:45:af:b9:2d:0a:03:0d:
                    6f:31:50:34:3c:65:cc:98:89:18:c1:91:98:af:f8:
                    06:c6:ad:27:9a:90:7a:3e:b1:b6:84:d7:15:d8:26:
                    0e:fc:00:e9:f5:54:26:ac:94:df:22:0c:67:60:bd:
                    19:3e:dd:03:9d:cc:f4:62:91:56:89:57:e2:4c:0c:
                    8d:24:01:03:53:b6:d0:a9:69:2a:b1:7e:04:b3:af:
                    d7:35:bc:fe:9d:ba:ab:17:c0:7d:8a:34:48:38:6f:
                    22:5b:7c:9a:50:02:5b:4a:b4:83:fe:64:db:fa:57:
                    b6:99:68:37:50:17:23:22:27:44:1d:a4:c7:95:52:
                    e8:1c:4f:0d:c0:04:f5:85:d2:aa:29:90:bd:b7:6b:
                    f9:38:52:17:19:cc:3d:39:d9:a3:be:ca:7f:1c:03:
                    a1:4e:c2:21:66:84:4e:21:01:b7:be:52:7a:b1:ca:
                    59:f1:b3:4d:78:8c:5b:d3:56:25:31:15:c5:a2:b1:
                    29:f4:07:16:2d:bd:2c:72:cf:e4:d3:75:11:43:a6:
                    64:70:56:99:3e:41:9b:bf:65:09:9e:60:1b:6e:e7:
                    1e:0d:ec:33:f9:14:6a:eb:63:40:a6:08:f1:2f:0f:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:59:51:E6:42:42:D3:69:83:07:61:BA:DE:8E:C6:42:3A:FB:59
            X509v3 Authority Key Identifier:
                keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:0c:ea:28:30:96:5d:10:f4:62:a6:ca:f0:05:e6:9f:9d:
         70:7b:96:7b:d8:ce:14:b5:e4:e3:9c:b3:07:34:28:c9:3f:89:
         f7:bf:69:71:41:06:a7:fb:7b:97:6d:92:20:13:40:d5:03:bf:
         8c:50:d3:36:1b:d0:c7:d4:27:b5:ae:6d:d4:04:22:1b:48:21:
         4e:f3:65:c9:c8:1e:01:a3:c6:0a:6b:b0:14:7a:bf:a6:c5:aa:
         3f:27:f2:8d:08:2d:ed:b4:73:e6:94:94:30:00:d4:1e:85:44:
         81:89:ce:f2:ed:b3:62:a9:da:a6:02:19:f8:73:b4:b6:3d:15:
         28:17:7f:0c:3d:47:8a:3d:80:34:3b:cc:4c:27:de:f1:1a:92:
         c8:f5:06:27:40:3a:15:70:d4:41:ce:5d:87:b4:8d:cb:38:7b:
         2d:5a:20:ad:31:26:f1:f5:ad:bb:d6:cf:c0:2d:0e:48:f3:b1:
         d3:ee:6c:71:34:fe:b4:86:d3:bf:c7:41:f2:1d:0a:d2:b9:64:
         e0:67:07:72:5a:24:36:45:96:d4:54:1c:24:e9:21:4e:7d:d0:
         b7:a0:0d:2f:de:13:59:f7:29:8c:f5:d5:c0:77:76:4f:8b:7d:
         6e:1b:60:6f:01:8c:55:4d:8c:15:02:99:c2:6c:3c:8c:ae:c7:
         fc:44:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:30:24 2025 by rpki-client