Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File:                     kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier:          SoKo5NcAz8/ITMZOgjHYV0m3ZZpbYnlFw5b57Ov6utU=
Subject key identifier:   2E:A0:B4:61:4A:8B:4E:74:4A:0B:EE:70:11:AB:04:9F:2E:8A:BB:4E
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer:       /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial:       0197CDCE02C406B1E6C943C7F60D76659864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number:          15BE
Signing time:             Thu 03 Jul 2025 01:01:59 +0000
Manifest this update:     Thu 03 Jul 2025 01:01:59 +0000
Manifest next update:     Fri 04 Jul 2025 01:01:59 +0000
Files and hashes:         1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
                          2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: SyAWRAD3vFCPd0OUokaDObjkww5st0srvO5kAF84kcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:ce:02:c4:06:b1:e6:c9:43:c7:f6:0d:76:65:98:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
        Validity
            Not Before: Jul  3 01:01:59 2025 GMT
            Not After : Jul  4 01:01:59 2025 GMT
        Subject: CN=2ea0b4614a8b4e744a0bee7011ab049f2e8abb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:b2:1b:06:c9:dc:88:d5:c5:28:b5:1e:5b:
                    e9:7a:e3:c4:0b:84:ed:bd:f6:90:47:2b:ab:ae:12:
                    07:f0:a0:ca:b4:f7:65:24:63:40:c3:e5:e2:12:16:
                    fd:f6:1d:62:d9:4a:80:38:0d:66:02:f4:ea:62:21:
                    a1:fe:f7:ba:18:77:19:93:fe:66:e4:35:09:91:03:
                    b6:d5:39:3e:f2:72:fb:d2:98:3e:26:b6:43:a6:28:
                    c0:92:fb:43:1f:c5:3d:7e:9c:2d:66:95:aa:a1:ba:
                    24:34:5f:70:ee:81:e8:6a:af:25:01:ef:c3:8e:8f:
                    96:e9:b6:d6:7b:cb:74:d2:72:b6:ac:62:9f:3b:8e:
                    0a:10:54:60:92:48:7a:6f:94:c5:49:c6:cd:4a:8b:
                    7b:ee:13:a9:a8:88:b8:e7:0d:b8:bb:1f:df:60:a5:
                    9b:a1:9f:0b:ef:ea:47:93:f0:45:c3:c7:4e:4d:6e:
                    01:52:fe:6a:3e:c6:41:41:53:21:d7:f1:d4:cf:ae:
                    1e:fa:92:44:bc:e6:b0:1d:8c:92:12:40:29:96:fc:
                    aa:2b:37:5c:c6:63:4d:8e:f3:41:76:6a:3b:e1:b9:
                    48:dc:d6:67:c5:89:51:3f:4f:6d:22:e3:ac:fe:09:
                    e1:72:07:0d:32:33:3b:7f:c4:67:5f:ce:d5:f3:c3:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:B4:61:4A:8B:4E:74:4A:0B:EE:70:11:AB:04:9F:2E:8A:BB:4E
            X509v3 Authority Key Identifier:
                keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:19:51:be:13:ea:0e:19:21:29:65:0a:20:0e:d6:e1:7e:55:
         f0:42:d9:32:62:61:e2:19:93:d7:51:6b:8d:8d:26:c9:9c:67:
         c1:3f:1e:c5:d6:40:71:bd:09:b9:2d:7a:d5:a9:9f:20:7c:e9:
         1e:b8:e1:13:72:56:f4:32:b0:ae:b4:8a:57:70:5f:cc:df:7a:
         9e:6c:10:80:27:90:28:a2:39:66:4a:24:9b:3d:6e:c6:34:f9:
         72:a8:7d:2a:bd:f2:27:f6:43:91:56:7c:fb:b4:38:9a:99:0e:
         35:72:1b:8c:cd:b2:a1:0e:10:fb:fb:08:09:a9:db:fb:2e:9f:
         19:29:17:f2:4b:9a:e8:21:27:1e:3f:c3:12:92:8b:47:e4:e4:
         b3:58:0b:ea:a5:58:f0:da:c9:90:44:21:29:cc:40:88:f9:32:
         b9:e4:8f:8d:47:8c:9d:06:8b:6b:4b:c0:d1:79:4a:fa:11:6a:
         13:97:09:65:ee:a1:54:29:97:e4:bf:59:ec:65:8d:b9:84:b6:
         7d:cd:d3:d3:d1:37:c6:f8:41:c3:0f:6f:49:b1:b1:c8:f7:7f:
         9f:63:2c:5d:56:72:64:ea:d2:02:a2:66:2a:a9:7b:d1:9e:e4:
         c6:9b:72:7a:0e:9f:9a:11:b3:a5:a5:0f:c7:39:34:73:9b:45:
         28:05:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:39:00 2025 by rpki-client