Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File:                     KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier:          pOv3Z5aQZIPwfIAi/V1oq925qCiKGDSlcLj9bIalSEI=
Subject key identifier:   08:06:10:4C:11:D4:DF:12:97:CB:18:6C:E3:8C:40:FB:49:B9:57:3F
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer:       /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial:       0198752BEDB7252B721CB569747E4CD214FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number:          15A8
Signing time:             Mon 04 Aug 2025 13:01:09 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:09 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:09 +0000
Files and hashes:         1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
                          2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: eUWAuNirHCjrZSjMLsi/Q0QGiuyFx/eV62rXJtNyUW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:ed:b7:25:2b:72:1c:b5:69:74:7e:4c:d2:14:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
        Validity
            Not Before: Aug  4 13:01:09 2025 GMT
            Not After : Aug  5 13:01:09 2025 GMT
        Subject: CN=0806104c11d4df1297cb186ce38c40fb49b9573f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:00:71:a3:c9:29:a8:5e:2e:7e:03:6f:a3:
                    dc:ea:9e:cd:18:c9:8e:46:71:bb:74:3d:42:f3:35:
                    4e:0d:70:a1:5d:d8:c1:f6:8c:0e:c3:13:c1:da:68:
                    7c:4c:5d:90:49:5a:89:7e:3c:19:6a:16:92:19:e0:
                    70:d7:09:81:fd:f6:d8:15:f3:6a:97:a0:3e:a2:3e:
                    02:10:d4:6e:e8:1b:3a:ce:c3:03:5f:a6:87:d6:3a:
                    f0:df:65:4f:ef:e6:86:a1:23:40:b7:8f:7e:ea:cc:
                    aa:db:b9:f9:f5:7d:84:f6:99:72:c7:e9:5a:0c:e8:
                    69:f6:70:81:99:40:88:b3:1b:d2:5e:34:59:17:d1:
                    65:e2:fd:57:6c:8f:8b:dc:f1:5c:ba:fe:80:bf:81:
                    fb:ed:52:11:8a:54:fb:93:91:49:33:c6:97:ff:1f:
                    d1:f9:61:5c:44:40:68:26:88:41:72:f6:12:23:c2:
                    72:8b:dd:49:4c:7a:a2:36:ec:81:c8:88:2d:86:99:
                    09:99:c6:f1:23:3f:f9:f9:17:26:f7:38:7b:40:72:
                    1d:6d:55:71:bd:0f:5d:e3:df:f6:d6:94:4b:da:20:
                    58:9b:ac:71:df:4f:e1:14:1b:55:60:c5:6b:db:14:
                    8e:18:61:6e:ff:d6:84:e9:cb:10:5b:b2:6b:a0:05:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:10:4C:11:D4:DF:12:97:CB:18:6C:E3:8C:40:FB:49:B9:57:3F
            X509v3 Authority Key Identifier:
                keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:4b:f8:2f:69:b2:45:82:90:c9:a2:fc:22:0c:da:3c:ed:
         52:75:ee:40:4b:4d:84:55:73:bd:a5:bc:50:8a:a2:d5:70:22:
         d4:15:00:9b:0e:ba:f1:7e:4d:ed:be:5b:cd:f1:1f:6a:61:b4:
         9f:56:5a:bf:50:33:ef:f6:ab:97:c7:1a:0c:66:1c:e9:82:63:
         f2:5b:fa:07:4b:19:cd:90:3e:33:4b:d0:aa:ec:12:60:25:b0:
         ae:fb:e0:a7:3d:0c:52:2a:53:73:26:3c:ee:de:e5:7b:ad:f3:
         61:3c:43:b7:a7:ea:a2:c5:cf:b0:31:fa:48:e1:45:f1:c7:67:
         8e:72:01:db:8e:53:a4:d9:f4:e0:8d:ac:0d:18:c7:36:88:71:
         c5:94:1b:1f:da:e6:1f:7c:e7:cb:36:9d:b4:04:1a:8f:94:d1:
         0f:f0:b9:b4:c1:75:b5:be:c6:97:09:1e:df:34:94:56:6d:2c:
         fc:b0:65:52:63:73:71:73:fe:67:c2:79:2a:48:d5:45:8c:c3:
         c0:99:62:57:b5:8a:36:8d:76:a1:87:08:a9:dc:f1:24:53:66:
         a1:d4:a5:99:09:b9:4b:6c:53:41:9c:df:d5:f3:e3:5a:79:64:
         b1:52:9a:48:45:dc:c2:26:90:f0:84:7e:df:5b:3b:61:45:b0:
         33:0b:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:23 2025 by rpki-client