Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File:                     Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier:          7yOoewnVCXCz2yFHQG3xR2LCDQnv6O0cU5IwtfF0cd0=
Subject key identifier:   79:B8:21:6B:05:F6:33:4F:0E:2D:42:D5:DA:0C:54:A0:EF:4C:68:3D
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer:       /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial:       0197B88F4DF3154D0B02EC4041DE98242C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number:          1548
Signing time:             Sat 28 Jun 2025 22:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:28 +0000
Files and hashes:         1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: labou7MsQ1Wv5jh/G1rfVERTKO2UBcgHlTs0oAFgeHY=)
                          2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:4d:f3:15:4d:0b:02:ec:40:41:de:98:24:2c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
        Validity
            Not Before: Jun 28 22:01:28 2025 GMT
            Not After : Jun 29 22:01:28 2025 GMT
        Subject: CN=79b8216b05f6334f0e2d42d5da0c54a0ef4c683d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:95:8d:96:f8:bf:f4:fc:5b:30:d2:e4:6d:f3:
                    50:d5:18:13:9e:8c:fb:05:49:2f:60:0b:11:b3:e9:
                    b0:b7:ab:26:40:a8:ac:6c:22:c7:f8:0a:70:4f:75:
                    1f:07:67:bb:00:c9:9b:17:e6:9f:81:1c:88:68:3f:
                    21:28:3b:71:e8:7d:e3:23:a4:1a:31:36:59:ef:2c:
                    a9:21:22:f7:6f:92:a4:47:ae:bf:61:3a:da:a5:80:
                    2f:97:28:fa:72:cc:60:24:b9:48:16:fc:9d:33:ad:
                    94:1c:10:17:88:8b:24:05:48:68:d6:52:f7:18:76:
                    25:3d:55:fb:17:ee:97:ca:ff:0b:98:6a:9a:bc:2b:
                    0e:1d:65:ed:9f:6f:31:43:3c:c2:04:fa:ef:d6:9d:
                    27:a9:4e:f4:8e:ba:37:87:f4:d3:20:9e:bf:cf:58:
                    02:c9:66:59:82:8c:09:96:7b:94:07:3b:96:09:93:
                    7e:8f:ba:ef:99:3f:38:53:0d:b8:b8:76:4a:ae:0d:
                    51:b6:e7:10:4b:f3:3f:74:54:9f:1e:60:87:3d:74:
                    03:14:48:b3:6c:f6:da:5a:49:6d:c0:f1:24:97:8c:
                    02:f4:7a:7a:9f:07:b5:d8:45:6b:d4:7a:12:7c:7e:
                    a8:d0:08:78:00:d4:07:7d:0b:40:3c:a4:80:92:03:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B8:21:6B:05:F6:33:4F:0E:2D:42:D5:DA:0C:54:A0:EF:4C:68:3D
            X509v3 Authority Key Identifier:
                keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:97:64:b0:8b:ef:22:8b:23:4b:e3:28:cc:21:84:e6:71:
         00:73:72:6a:a4:ce:4f:91:2a:01:02:59:46:78:53:a5:12:e6:
         94:41:e2:8a:66:be:00:0f:88:19:f7:27:cd:c4:f7:f2:36:75:
         23:4e:f0:ea:16:9a:d0:22:81:21:bd:47:f5:e8:e5:0a:f7:a8:
         ee:34:c8:77:3f:02:42:ee:da:44:c7:0e:66:30:fc:06:dc:e9:
         34:29:f4:50:9c:4f:c7:e8:fa:4b:87:21:29:97:ff:d7:98:b6:
         f2:a5:18:a3:54:af:05:1d:31:f5:41:fb:b7:d2:aa:ce:27:53:
         20:5d:e8:07:80:ab:e7:06:7c:a5:84:9a:4c:e2:89:ae:a9:42:
         0f:90:55:ce:cb:23:64:a7:0a:25:0c:75:58:f7:4b:69:96:c0:
         71:67:21:af:3e:2e:e8:31:da:41:fa:20:f9:b6:2b:75:b6:68:
         ed:e2:d3:b0:1e:9f:69:5f:53:cb:c3:6d:b4:b9:7a:3d:8b:30:
         25:0d:08:c6:63:ab:53:33:f3:0c:d3:f3:1b:79:09:1b:85:95:
         a4:7a:ca:83:a0:6b:bc:1b:ba:72:24:e2:e3:f3:a4:c8:ae:6d:
         ea:fc:9a:8b:b8:5b:20:cf:b6:9d:2f:d1:5d:e7:8f:44:ed:6d:
         cd:e3:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:33 2025 by rpki-client