Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File:                     Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier:          EmI9VIKuX7A1rQbkUMc10tUYpLAsgGugfK4NtQz0uEo=
Subject key identifier:   25:7E:28:19:53:3A:46:F8:5C:F4:81:45:32:22:D0:90:B1:DA:5E:6E
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer:       /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial:       0197B77CF6B0616543022835CA8BCBBE9C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number:          1519
Signing time:             Sat 28 Jun 2025 17:01:49 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:49 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:49 +0000
Files and hashes:         1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: zb2OLNroUWLArCp61x36b5qdUq6voj0q8BWKKliyDU0=)
                          2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:f6:b0:61:65:43:02:28:35:ca:8b:cb:be:9c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
        Validity
            Not Before: Jun 28 17:01:49 2025 GMT
            Not After : Jun 29 17:01:49 2025 GMT
        Subject: CN=257e2819533a46f85cf481453222d090b1da5e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:98:d7:a1:d1:b9:92:af:2c:93:5e:e6:d6:
                    75:71:82:e4:8d:4a:d4:d5:c4:19:ff:b6:d7:19:dd:
                    bf:76:43:ba:24:5a:e3:a8:99:83:52:c0:7a:8a:ed:
                    f9:eb:b2:61:1d:e5:8f:4f:0e:0a:de:b9:fc:66:85:
                    0b:4a:7b:4e:ae:fe:21:51:7c:21:e3:6d:b1:6a:1b:
                    c0:21:67:c7:7b:19:02:e1:08:67:94:72:89:c9:a5:
                    01:97:c6:93:d2:21:50:28:cb:50:14:f4:e2:30:d9:
                    ff:04:70:37:6a:5f:7a:78:a3:cf:73:ce:da:06:12:
                    6e:0b:72:a2:10:fe:98:f0:dd:13:a9:dc:69:b1:bb:
                    83:46:2f:38:b9:0a:42:fd:c9:09:06:bb:49:e9:01:
                    c2:4c:70:05:d0:15:00:db:df:87:4d:0b:07:45:c2:
                    f0:b1:ab:77:c1:43:ad:be:4f:58:05:07:0f:2e:7f:
                    93:c3:e1:82:63:6b:eb:b3:58:ae:af:dc:06:a1:5a:
                    e3:25:96:0c:ed:99:42:01:cd:fc:5a:0a:c1:8a:99:
                    04:0d:62:ac:0a:82:5a:77:ed:0f:fa:6b:63:81:77:
                    c0:6c:80:aa:09:2a:a3:c3:29:19:03:1c:af:c6:fc:
                    96:2b:11:3c:2d:5b:08:af:13:5b:75:72:6c:d6:f4:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7E:28:19:53:3A:46:F8:5C:F4:81:45:32:22:D0:90:B1:DA:5E:6E
            X509v3 Authority Key Identifier:
                keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:3d:9d:f2:9e:d4:c0:c7:cb:92:f8:e6:2b:e0:11:64:b4:
         40:77:68:f8:6a:ea:03:99:72:e9:8a:a0:7c:3b:0c:16:86:4f:
         bc:88:a2:34:ca:6c:ae:32:f9:03:82:e5:cc:b4:98:04:a9:78:
         49:2b:58:2c:71:42:97:2d:50:6a:8b:8e:6e:1e:a6:d4:99:fd:
         4b:df:5f:62:77:70:4e:eb:ab:13:43:fb:0b:2e:d3:46:ec:70:
         8d:2c:a1:a1:3d:c0:27:8c:0a:44:2e:ed:56:02:d2:18:04:95:
         8f:5f:89:ea:d0:fc:2c:48:34:0f:88:18:c1:05:3d:80:2b:22:
         c4:07:9d:76:08:39:95:e0:77:25:43:76:0d:a6:d7:ae:f6:f5:
         d3:72:21:30:3f:73:71:b8:19:df:3b:da:62:74:6a:ca:64:36:
         6e:a9:79:55:af:71:40:78:54:3b:ae:53:b0:1d:06:7b:37:cd:
         01:35:9a:f1:e8:34:dc:c8:81:d5:4e:06:9a:52:03:90:eb:22:
         58:7e:2b:0a:55:e9:4c:9e:f9:d2:88:f1:bf:ec:99:79:ef:67:
         3a:bd:5a:a1:7b:c7:5e:da:83:19:7f:5d:f1:0c:d7:65:3b:b2:
         fe:97:d2:61:5d:59:01:84:fa:3e:94:12:32:ba:e4:3a:9a:85:
         f7:78:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:38 2025 by rpki-client