Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          iPNUqIiJXvfL4PvuaY57p+XFLCNAu/b0JvEu0eJghVU=
Subject key identifier:   D5:D9:01:F2:B6:2B:3A:E1:D5:26:C8:2B:41:44:31:B0:86:F7:8A:04
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       0198880E17443D33D753FAB77A478B60B814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          03D8
Signing time:             Fri 08 Aug 2025 05:01:21 +0000
Manifest this update:     Fri 08 Aug 2025 05:01:21 +0000
Manifest next update:     Sat 09 Aug 2025 05:01:21 +0000
Files and hashes:         1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: 1taqAXhBEyrD2tMl9IlOh3aosqxw1sMqcXCsZrmXqN0=)
                          3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
                          4: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0e:17:44:3d:33:d7:53:fa:b7:7a:47:8b:60:b8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Aug  8 05:01:21 2025 GMT
            Not After : Aug  9 05:01:21 2025 GMT
        Subject: CN=d5d901f2b62b3ae1d526c82b414431b086f78a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:e1:50:23:c0:3d:57:00:22:12:a1:8b:8e:
                    ab:12:5d:67:e7:69:9b:7f:87:52:fe:45:fd:95:c8:
                    d5:63:d8:a7:b9:6a:96:65:ec:77:bf:f7:e2:b4:bb:
                    96:36:ec:09:40:20:9a:07:87:4d:06:d8:2c:a0:73:
                    c5:b5:f9:16:9f:a2:f5:46:36:d4:37:e8:3b:ff:22:
                    91:4e:47:f7:22:48:6b:4f:1e:de:96:cf:2e:ff:84:
                    b7:6b:46:e4:1b:7b:18:89:43:ab:9d:27:ea:9e:65:
                    37:48:ae:c1:d1:66:59:a0:fc:bc:fe:21:45:3c:c2:
                    04:99:42:89:b8:a9:55:0b:96:04:58:fd:34:c6:3a:
                    cf:2e:0b:5d:48:68:f8:c0:54:6e:60:a4:12:ae:37:
                    9d:db:43:58:ee:1f:78:3f:cc:02:45:d2:1b:b5:6e:
                    c4:bb:d7:07:7c:00:fb:d7:d8:7b:34:37:79:cc:17:
                    be:71:9e:5f:44:fc:16:1a:0c:9c:14:c8:97:48:5d:
                    23:42:6c:25:bd:9f:92:6b:5f:a0:43:63:6c:91:33:
                    47:64:0a:ee:1f:bd:7b:17:4b:18:e3:71:ff:f3:77:
                    03:cd:ef:88:2d:9a:c1:f1:24:e2:44:74:82:2a:49:
                    50:c4:00:d9:ab:c1:25:98:de:37:8a:b3:18:4e:c5:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:01:F2:B6:2B:3A:E1:D5:26:C8:2B:41:44:31:B0:86:F7:8A:04
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:2f:bd:6a:17:c1:f2:c6:8d:9a:2b:9d:fd:0d:50:1d:54:
         d4:8c:4d:3b:79:43:54:de:3e:42:61:51:5d:5a:ee:4e:01:43:
         44:d3:91:bd:18:f8:d2:a2:f0:15:57:79:c5:5c:20:ad:3d:e2:
         85:c1:a3:5c:c6:c1:15:48:78:f6:5e:b8:4c:65:93:12:1e:27:
         7e:50:75:9e:f4:67:e7:e7:ee:d3:ad:bc:4f:05:88:18:6a:61:
         7b:3a:bd:87:8f:a0:99:80:e8:48:98:fb:ce:e3:02:6f:f6:5d:
         05:1f:c6:27:a8:99:ba:ea:19:0f:78:fd:b8:cc:4d:67:ca:ad:
         b0:96:36:97:f1:f9:d5:47:07:11:73:07:97:b5:d3:93:4b:2f:
         7c:ae:e0:0c:73:7b:29:ee:cb:fd:0b:45:d7:ad:09:99:79:44:
         e8:f8:5f:ec:43:5d:b5:43:01:9c:2a:7c:30:08:79:56:f5:55:
         40:09:9c:be:17:7b:f2:50:f3:14:3f:da:98:b8:0c:78:62:cc:
         50:73:8b:71:df:e2:2e:44:7a:b7:82:18:c3:b4:c2:9b:7f:4b:
         e5:44:0d:30:c9:9a:b0:05:49:ce:69:af:f7:e9:2f:2f:46:1e:
         b2:2b:12:b8:27:1f:e7:a6:46:31:d6:c2:c9:02:02:e7:a9:d6:
         17:d5:f4:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIDhdEPTPXU/q3ekeLYLgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx
ZTU3YzQwHhcNMjUwODA4MDUwMTIxWhcNMjUwODA5MDUwMTIxWjAzMTEwLwYDVQQD
EyhkNWQ5MDFmMmI2MmIzYWUxZDUyNmM4MmI0MTQ0MzFiMDg2Zjc4YTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cbhUCPAPVcAIhKhi46rEl1n52mb
f4dS/kX9lcjVY9inuWqWZex3v/fitLuWNuwJQCCaB4dNBtgsoHPFtfkWn6L1RjbU
N+g7/yKRTkf3IkhrTx7els8u/4S3a0bkG3sYiUOrnSfqnmU3SK7B0WZZoPy8/iFF
PMIEmUKJuKlVC5YEWP00xjrPLgtdSGj4wFRuYKQSrjed20NY7h94P8wCRdIbtW7E
u9cHfAD719h7NDd5zBe+cZ5fRPwWGgycFMiXSF0jQmwlvZ+Sa1+gQ2NskTNHZAru
H717F0sY43H/83cDze+ILZrB8STiRHSCKklQxADZq8ElmN43irMYTsVkOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXZAfK2Kzrh1SbIK0FEMbCG94oEMB8GA1UdIwQY
MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt
YWI3ZjE0ZGFhZTRmLzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm
LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLkvvWoX
wfLGjZornf0NUB1U1IxNO3lDVN4+QmFRXVruTgFDRNORvRj40qLwFVd5xVwgrT3i
hcGjXMbBFUh49l64TGWTEh4nflB1nvRn5+fu0628TwWIGGphezq9h4+gmYDoSJj7
zuMCb/ZdBR/GJ6iZuuoZD3j9uMxNZ8qtsJY2l/H51UcHEXMHl7XTk0svfK7gDHN7
Ke7L/QtF160JmXlE6Phf7ENdtUMBnCp8MAh5VvVVQAmcvhd78lDzFD/amLgMeGLM
UHOLcd/iLkR6t4IYw7TCm39L5UQNMMmasAVJzmmv9+kvL0YesisSuCcf56ZGMdbC
yQIC56nWF9X0vw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:58 2025 by rpki-client