Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File:                     KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier:          tD5tkcrjRDZIpdS653QMy7fvsF8jQHLlWK9zObggb6E=
Subject key identifier:   19:E1:0B:1F:2E:7D:57:31:55:03:31:21:25:14:6A:77:87:EA:43:B0
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer:       /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial:       019770756305DFD4E24B7FBB354829A8E55B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number:          1521
Signing time:             Sat 14 Jun 2025 22:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:30 +0000
Files and hashes:         1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
                          2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: IaGYEEzQyKoQQiVHG/9hpRUgY8MvCdumGFUCiMgyPnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:63:05:df:d4:e2:4b:7f:bb:35:48:29:a8:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
        Validity
            Not Before: Jun 14 22:00:30 2025 GMT
            Not After : Jun 15 22:00:30 2025 GMT
        Subject: CN=19e10b1f2e7d57315503312125146a7787ea43b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:0f:2d:ec:ed:14:5c:56:c8:31:53:ec:3f:
                    13:7c:22:d3:23:02:c1:3e:f7:09:77:6d:83:62:77:
                    5a:1a:07:36:5d:96:51:f8:d0:f1:3d:bf:80:47:dd:
                    15:47:ba:03:1e:30:32:6b:76:57:f8:45:84:43:ca:
                    23:2b:a3:33:9a:a7:14:f7:8d:fd:52:18:58:2b:c8:
                    23:0f:26:03:b7:9d:a1:4c:66:dd:a5:eb:a5:55:de:
                    fc:1d:81:30:03:6a:09:bf:c2:35:cc:1f:69:ca:32:
                    b3:db:6c:6e:ca:e9:e9:07:a4:8e:6f:9b:f0:5c:01:
                    af:fb:22:a6:d2:47:20:5f:39:fe:c0:09:c0:65:23:
                    0e:64:b7:9d:e1:26:93:d0:f1:6b:b5:59:e0:5e:c8:
                    d7:8a:b0:9e:4d:f3:ed:3a:24:34:4f:cb:f2:e5:b0:
                    77:05:e6:5b:89:10:a0:3b:01:6d:f2:40:dd:0b:0c:
                    e8:d6:b0:1d:24:2e:5c:64:d4:85:3b:5e:26:be:cd:
                    f6:9a:48:14:4f:45:e2:bf:86:44:f2:97:62:15:ab:
                    98:f0:93:98:0c:d5:68:51:05:6f:18:af:ad:ba:de:
                    09:62:d1:82:c3:e8:ba:42:a6:ed:1b:f1:66:28:49:
                    86:23:dc:f1:59:d1:23:b1:8a:3f:7a:1a:5a:fc:27:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E1:0B:1F:2E:7D:57:31:55:03:31:21:25:14:6A:77:87:EA:43:B0
            X509v3 Authority Key Identifier:
                keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:27:85:5f:53:08:3f:8b:54:0e:ed:85:78:e3:87:1f:a0:3b:
         fa:06:f2:b3:c5:03:85:42:70:0e:39:1e:2c:e2:0f:9d:a3:5d:
         91:9a:24:7c:aa:c4:00:52:a7:78:f0:db:48:ba:2d:2d:0b:c6:
         6f:4c:88:59:56:74:38:68:d3:d8:75:c9:a6:bb:08:9e:7b:c1:
         77:bc:c7:78:0e:53:08:fc:c5:3f:16:51:ef:b7:56:d5:13:6b:
         37:94:65:03:7b:99:54:85:db:55:d4:b9:d5:ce:a9:06:00:d3:
         ed:db:3d:b6:3e:22:c4:12:f1:21:71:8b:ff:07:ac:08:9c:be:
         d0:8b:3e:34:2c:6a:b7:cf:89:9f:21:b8:7d:bc:79:2f:87:cd:
         0f:4a:89:5a:29:a4:38:62:bc:af:29:93:8f:64:fe:25:cb:31:
         8d:65:37:52:e8:f8:85:c2:3f:96:86:7b:46:e4:f8:65:c9:c7:
         1c:64:6d:7c:71:5c:94:87:70:83:c8:ba:91:5f:46:55:ac:b9:
         64:7b:ae:08:51:26:f1:20:36:3c:c6:2b:a3:bf:29:78:5f:51:
         ad:9f:ed:67:d9:aa:ca:54:55:4c:d6:1d:8c:0e:bf:6e:24:aa:
         ae:42:1d:a6:0f:ae:8b:d3:d5:bf:be:78:be:aa:27:d2:0b:db:
         e5:05:b6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:30:41 2025 by rpki-client