Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          NkT8DIqr1a/VweoFYt5vUC17efcN16wMRnVucH6zLFE=
Subject key identifier:   A9:68:4D:60:37:E2:40:0B:86:3F:7A:D9:BF:14:59:3C:C8:B6:24:7B
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       01976BBD361232E23CFB5744BB87B160804F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0AEE
Signing time:             Sat 14 Jun 2025 00:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:51 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: bdm30wwzRgnCtde4bA6q5DjZiwTpZ3V3Zcdb6HRx16w=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:36:12:32:e2:3c:fb:57:44:bb:87:b1:60:80:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Jun 14 00:00:51 2025 GMT
            Not After : Jun 15 00:00:51 2025 GMT
        Subject: CN=a9684d6037e2400b863f7ad9bf14593cc8b6247b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:31:45:6a:cd:c4:42:90:9b:fc:1f:0d:c5:
                    d3:a1:e0:31:78:67:54:d6:33:35:fd:e4:fb:33:4e:
                    36:dc:39:ae:c9:30:3b:20:4d:74:56:b3:e4:39:93:
                    ad:1b:13:28:0f:64:97:86:72:f9:5c:5e:82:16:85:
                    e2:73:a4:e9:33:c8:e4:30:5f:11:b0:5c:0a:ea:7a:
                    6c:17:40:e9:e0:95:98:22:07:16:31:e8:f0:59:33:
                    88:b9:c4:6e:c1:2e:ef:d7:66:77:27:bf:e6:8a:46:
                    3c:de:14:2a:ab:ba:7d:a5:cc:35:0b:9c:9a:57:6c:
                    24:42:f0:c1:b8:34:c1:fb:bc:84:cc:0d:f4:c0:d0:
                    72:1a:35:2b:44:81:74:1c:c3:2d:72:90:eb:75:16:
                    5e:65:77:59:bf:21:2c:87:99:db:4b:fe:dd:2b:4c:
                    02:d5:42:14:b5:d9:4f:a9:a1:e3:6a:15:39:1f:55:
                    0b:95:3c:94:4a:78:03:a8:2b:66:b9:88:17:c8:a8:
                    c7:d6:68:eb:48:4c:77:2e:4c:54:e0:b6:b3:73:32:
                    09:aa:9f:fe:23:3b:88:fc:0c:c4:e3:64:ac:cf:77:
                    fb:bd:01:ed:ca:6b:9e:56:84:22:00:7d:0a:c0:80:
                    69:94:d6:da:40:da:64:61:61:86:e2:76:b7:82:ec:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:68:4D:60:37:E2:40:0B:86:3F:7A:D9:BF:14:59:3C:C8:B6:24:7B
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:31:68:c6:c6:eb:df:f4:43:89:33:36:83:5f:2e:fa:ba:55:
         c0:66:7c:4d:45:8d:fd:0c:e5:90:9f:ba:ec:ab:ad:ee:b6:d9:
         91:87:a9:05:da:33:5a:7e:d8:6e:e1:07:c5:24:0b:f0:ea:fd:
         a1:62:60:32:3f:7c:b1:32:fc:57:3c:a4:eb:6e:16:9c:16:c9:
         e5:e3:e0:87:45:de:ff:d2:5b:f2:7a:1a:e5:75:22:6e:61:b7:
         61:e0:29:be:1a:e0:06:01:b1:66:48:9d:77:f5:7f:65:de:c9:
         16:db:07:33:46:77:e3:e7:8e:0d:0a:50:d4:27:74:24:db:b0:
         19:1d:b9:4e:37:ec:a4:ed:5b:bb:48:69:d5:18:5b:7b:fd:61:
         fb:b6:b7:84:66:17:e3:f8:bc:7f:15:20:6e:81:fc:06:dd:7d:
         ef:d3:62:c4:91:ac:ec:54:f4:af:03:c6:ac:30:6a:bf:c3:d3:
         cf:87:71:7a:2d:e4:b5:6f:94:a3:7c:3e:4a:e6:94:ca:1c:dc:
         30:fd:d7:09:2c:7a:40:d0:55:d4:38:01:4b:78:ec:b0:35:0a:
         67:2a:f8:64:8e:6b:ce:a8:ef:cd:00:b7:37:d8:18:36:11:65:
         a5:4d:b8:88:5f:32:6b:a4:af:20:6a:f7:fc:01:61:14:b7:1f:
         a7:79:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:23 2025 by rpki-client