Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          3lZwrwc59YGOt9RiMnXBxLX8ylR42aTgNS/XOBvu1PY=
Subject key identifier:   4E:AB:B5:9F:1C:54:B8:6D:EC:68:6D:F7:A0:3E:01:B6:8F:E3:CA:49
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       019A51509AB922CF4ED3CCBD7E9B98FAEE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0C6E
Signing time:             Wed 05 Nov 2025 00:00:28 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:28 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:28 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: 25vsE643MfkbYZnqtAXyZ5wQB76R1HFg/WeqmfT7Lsc=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:9a:b9:22:cf:4e:d3:cc:bd:7e:9b:98:fa:ee:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Nov  5 00:00:28 2025 GMT
            Not After : Nov  6 00:00:28 2025 GMT
        Subject: CN=4eabb59f1c54b86dec686df7a03e01b68fe3ca49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:09:5a:7e:fc:12:ed:6c:39:07:96:c6:32:
                    07:8c:ad:66:62:f9:3f:38:0f:4e:4d:da:d2:69:ca:
                    3f:27:46:da:2e:67:2e:21:e8:5b:c8:33:ab:da:aa:
                    29:a5:8a:41:4c:f6:fe:74:cb:ea:71:9f:93:93:d9:
                    1c:44:69:15:f5:84:ef:8c:8f:dd:fe:ee:b0:aa:c4:
                    d3:05:ec:67:ce:cd:93:ed:dc:bb:ef:54:80:e9:82:
                    ab:12:ea:9b:4c:b3:c9:d8:fc:9d:6b:9f:fb:bf:80:
                    f6:02:b9:92:ed:25:09:62:59:5a:06:db:04:b8:97:
                    bb:6b:1e:4d:0b:1a:26:4f:0a:63:71:58:4b:86:17:
                    04:7e:3a:ba:4e:38:3c:04:9a:eb:7c:91:ee:2e:07:
                    4d:da:6a:2c:fd:77:89:ca:fa:24:2d:5b:41:b4:56:
                    d1:93:aa:eb:4f:a1:0a:66:c6:82:6d:ec:c8:e1:7a:
                    8e:62:44:85:eb:1a:ba:71:99:42:34:e3:23:65:85:
                    04:52:c5:78:8d:28:c3:4d:64:89:d1:3c:c8:04:35:
                    9e:36:59:cc:4c:51:0f:0c:60:96:7a:05:98:89:c6:
                    dd:f7:fe:f1:5e:82:f3:eb:b7:cc:f3:9f:6d:e1:3f:
                    86:63:6c:52:6a:dc:c4:1c:ba:7e:7f:21:55:6e:80:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AB:B5:9F:1C:54:B8:6D:EC:68:6D:F7:A0:3E:01:B6:8F:E3:CA:49
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:df:1d:92:da:14:14:f9:07:69:aa:58:c9:ce:a7:bb:2c:80:
         b6:74:1b:97:de:37:84:0b:fb:d4:c1:7d:b1:8f:81:55:e1:43:
         a3:49:74:42:36:e4:2a:4c:b6:97:43:97:bb:c2:06:2a:0f:11:
         6a:27:21:6c:c3:44:91:e1:29:1b:43:2a:ed:41:51:6d:83:4c:
         96:e4:bb:6d:2f:b8:59:e6:55:0f:e2:91:5c:ab:8f:c2:69:7b:
         62:9b:d7:5f:ff:39:18:68:90:64:13:4b:9a:a2:b0:e1:db:a4:
         5e:35:29:0b:ba:b9:f7:63:3d:5b:a8:94:76:cd:b3:ba:2e:ae:
         ea:a4:ef:48:d2:84:42:44:45:9f:65:47:bc:f8:24:cc:9b:e3:
         9e:12:a2:8d:90:62:ed:9b:12:f9:8e:1d:67:3a:43:8c:43:9f:
         1c:29:13:de:ea:f9:ad:48:05:ad:5d:22:96:d7:ed:90:57:d7:
         42:83:70:03:f5:c7:c4:56:2a:c0:6a:94:e8:a6:e8:e9:43:a3:
         17:bb:87:a1:83:87:31:0d:f9:15:2f:8e:56:5a:e0:7f:a0:54:
         a7:fd:e3:95:96:5a:d1:29:b1:14:1e:e8:cd:36:28:aa:32:a8:
         f4:ad:79:7e:5e:fe:be:be:e7:fa:a6:ae:30:d2:db:2d:44:24:
         d8:5a:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:28 2025 by rpki-client