Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          PJPhK8zi//2F/7wP3QNtL9otpsPf8xk49vDqRR5YZtU=
Subject key identifier:   1B:23:53:96:D3:BB:2E:40:C8:67:75:67:64:39:36:53:7B:88:37:7B
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       0197B70E649EFA1EDB9062AE834F8B2BAFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0A35
Signing time:             Sat 28 Jun 2025 15:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:03 +0000
Files and hashes:         1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=)
                          2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: ox1p3KRa63jguVg/mVKEZyv84OjohjDYAbd48w0vmdk=)
                          4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=)
                          5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=)
                          6: tgAHftofsUlrut1OVcO8hHTBTbc.roa (hash: tgkhROI0aApXAU3ooNKzzNjHjSmQxJBLSWJU0UDgdqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:64:9e:fa:1e:db:90:62:ae:83:4f:8b:2b:af:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Jun 28 15:01:03 2025 GMT
            Not After : Jun 29 15:01:03 2025 GMT
        Subject: CN=1b235396d3bb2e40c8677567643936537b88377b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:71:38:d0:d6:80:9c:1c:28:17:f3:4f:30:
                    0c:4e:f2:fb:08:82:3e:05:d3:e5:e9:04:14:e1:45:
                    3b:10:30:c1:89:05:51:e0:07:66:a0:76:5f:69:58:
                    ae:33:b5:6a:f0:ed:51:ab:43:7e:5e:8b:6a:5a:49:
                    1a:64:4f:10:ac:87:b7:a4:28:4d:b6:f0:00:ac:0c:
                    42:04:60:a4:3b:05:2d:04:00:c2:f3:c0:e1:43:c7:
                    5b:b4:dd:cd:fb:9a:c5:1a:24:59:c3:ff:02:3a:ff:
                    75:88:1c:db:91:a3:09:96:62:7f:a2:54:4e:75:19:
                    d6:f6:8d:78:a8:50:2a:66:ce:70:18:ec:e5:2d:bf:
                    3d:df:06:e8:40:b4:35:a1:19:84:c9:97:39:82:ee:
                    57:56:e7:99:e6:e4:bc:c7:4c:08:19:7f:ec:e2:62:
                    cb:4c:c4:6b:00:01:90:97:6f:36:24:28:a4:dd:43:
                    04:96:9f:6b:41:d6:8c:7e:9f:6a:e8:4a:69:5d:3f:
                    d7:79:b0:bb:a2:9f:6b:fe:ec:f5:d5:fb:6f:34:1c:
                    d1:2d:70:5a:2c:1b:92:f9:ef:ac:33:8a:53:54:22:
                    3c:57:33:72:76:62:d6:cb:1b:2b:c3:4b:89:e7:e7:
                    bc:4e:81:c4:4c:0c:c3:9e:b5:e1:f8:13:6f:e1:93:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:23:53:96:D3:BB:2E:40:C8:67:75:67:64:39:36:53:7B:88:37:7B
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:21:2e:8f:c1:76:79:ed:48:db:dd:3f:ec:97:40:6f:ff:97:
         88:66:0b:f5:a5:ae:ca:92:a1:af:1b:75:1c:59:a9:e7:48:90:
         45:10:1b:b5:09:01:91:e1:3c:ef:0d:09:7c:53:75:1e:32:17:
         fe:15:f3:79:bb:1f:62:04:e1:56:0b:ec:68:28:4c:c7:e4:76:
         b7:69:74:b9:e3:39:a5:e3:c4:7c:e7:fd:2d:d7:2a:8b:b1:24:
         ef:55:de:73:f0:7b:98:fd:4b:2b:bd:13:25:a8:a5:c9:4f:c5:
         9d:92:a6:8c:a9:ed:2d:39:a2:2c:53:b9:9c:de:61:10:74:e4:
         c4:ea:44:91:46:81:3a:5f:26:c3:f9:74:09:e6:58:6e:19:ac:
         4c:92:53:78:c8:e5:af:49:ed:fe:9d:fc:c7:81:f8:04:2b:87:
         a4:53:92:f5:fb:ba:02:8d:00:bd:1a:fa:8d:83:e7:06:f4:b7:
         6a:e5:82:3b:48:0e:d1:01:41:8c:4f:41:a3:35:ff:d6:8f:22:
         b9:05:0f:ba:d8:9c:c7:1f:a9:77:9d:a5:2d:27:e8:c1:ac:cd:
         69:89:c9:9c:8e:b2:3d:ca:f5:ba:54:61:e3:a3:88:ae:9c:bc:
         24:2e:15:6c:03:c7:54:e1:6c:4e:67:bc:68:02:8c:1e:b4:95:
         a8:82:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:23 2025 by rpki-client