Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File:                     kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier:          /5FdkC91tbsnPidYW0PrZUIF0XALwMTZzadt3+MhZQg=
Subject key identifier:   81:D7:DF:E2:5D:95:4F:9F:14:61:67:2E:69:85:04:6B:02:8B:D3:C2
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer:       /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial:       0197B7EA6C4800A1ED4E597FB2E0306FDC48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 19:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:22 +0000
Files and hashes:         1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: LH78tBihSFrKZYnm2p3a8JqoWGdCjR03tqz4NYdEzvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:6c:48:00:a1:ed:4e:59:7f:b2:e0:30:6f:dc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
        Validity
            Not Before: Jun 28 19:01:22 2025 GMT
            Not After : Jun 29 19:01:22 2025 GMT
        Subject: CN=81d7dfe25d954f9f1461672e6985046b028bd3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:33:ff:cd:75:a5:9c:73:06:b1:1e:04:13:
                    36:24:3d:4a:5a:d6:c9:fa:47:61:e5:2b:7f:56:16:
                    dc:60:33:c6:af:ac:dd:ad:8c:c4:ef:51:cc:8d:33:
                    c2:c6:de:b8:aa:3e:2a:e2:86:2d:3c:3d:76:71:8e:
                    a4:a7:07:00:a2:04:17:1e:10:d6:04:54:e2:ec:99:
                    fd:e8:c5:df:d0:72:eb:3a:2b:7e:44:96:02:74:17:
                    ff:d8:f4:49:ea:f6:5d:d8:f2:48:50:26:b5:e8:a8:
                    63:f3:55:6d:be:bf:15:ae:26:71:5d:24:40:49:37:
                    43:58:d0:c8:1f:15:a5:0c:f9:01:08:ab:30:e7:4a:
                    f9:f4:43:a4:55:4f:bd:8c:07:d4:f6:ab:bf:1d:b1:
                    2e:66:5a:98:3f:ec:d2:44:d2:a5:2d:c3:37:e4:ec:
                    1d:b5:7b:af:87:62:97:bf:e7:e2:a7:f2:2b:ba:50:
                    e5:32:c2:1f:d3:e5:d4:47:7f:6f:ed:67:b9:e7:9a:
                    97:50:ef:a4:06:51:b8:92:e4:68:d8:a4:cf:0b:23:
                    d0:12:8c:27:03:19:21:b4:e0:44:e6:1f:b7:e9:f3:
                    3f:9e:8f:3c:80:45:c2:20:99:95:52:b8:9c:f0:d8:
                    0e:2a:76:de:76:7b:9a:1e:09:94:bd:bd:de:54:74:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:DF:E2:5D:95:4F:9F:14:61:67:2E:69:85:04:6B:02:8B:D3:C2
            X509v3 Authority Key Identifier:
                keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:d8:f5:16:cf:f0:1d:08:e7:59:d0:06:bc:64:a3:4e:80:
         de:ab:51:65:85:32:f8:22:81:8a:9b:9f:35:f3:70:56:74:bf:
         bf:00:10:c1:33:9e:29:ad:2d:d6:5b:e1:6d:6f:dd:a5:18:52:
         de:6c:f1:f5:ff:43:b5:a0:06:dd:dc:02:90:c0:76:d3:68:99:
         f5:98:e8:60:43:37:ec:69:49:98:43:c1:6d:ad:5c:6c:42:b3:
         45:2a:b2:a5:ed:51:19:db:8c:25:30:6e:39:3b:99:71:c1:3c:
         94:82:94:ff:12:b7:b2:88:c3:8d:2a:7e:89:94:f2:db:3e:ea:
         41:cb:5c:39:11:14:ba:03:0e:49:b7:71:94:af:41:1b:b9:2b:
         53:4e:97:a4:17:3e:e4:b9:f3:41:b0:05:e0:5c:00:f6:33:ca:
         f6:a5:59:91:f5:c0:b3:07:57:51:1b:44:86:31:50:a9:3a:8a:
         84:80:83:da:c7:2b:95:22:05:d5:06:13:07:fa:91:ee:48:e1:
         66:1e:7e:c1:ba:7f:3a:8f:49:30:f9:5b:73:27:91:c0:51:24:
         6a:9e:d3:b6:71:b3:c9:63:73:09:1d:8c:6f:8b:c9:38:9c:34:
         7d:6d:4f:59:61:c0:c6:7d:41:85:d8:67:52:fa:39:20:91:68:
         1c:f7:19:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36mxIAKHtTll/suAwb9xIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmVhYTMyYzRlMGUxOTcxYWQwZDU4YjE3MmNlZDE3MjEw
NTY4NWMwHhcNMjUwNjI4MTkwMTIyWhcNMjUwNjI5MTkwMTIyWjAzMTEwLwYDVQQD
Eyg4MWQ3ZGZlMjVkOTU0ZjlmMTQ2MTY3MmU2OTg1MDQ2YjAyOGJkM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoywz/811pZxzBrEeBBM2JD1KWtbJ
+kdh5St/VhbcYDPGr6zdrYzE71HMjTPCxt64qj4q4oYtPD12cY6kpwcAogQXHhDW
BFTi7Jn96MXf0HLrOit+RJYCdBf/2PRJ6vZd2PJIUCa16Khj81Vtvr8VriZxXSRA
STdDWNDIHxWlDPkBCKsw50r59EOkVU+9jAfU9qu/HbEuZlqYP+zSRNKlLcM35Owd
tXuvh2KXv+fip/IrulDlMsIf0+XUR39v7We555qXUO+kBlG4kuRo2KTPCyPQEown
AxkhtOBE5h+36fM/no88gEXCIJmVUric8NgOKnbednuaHgmUvb3eVHQU9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHX3+JdlU+fFGFnLmmFBGsCi9PCMB8GA1UdIwQY
MBaAFJL+qjLE4OGXGtDVixcs7RchBWhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEt
MDVlYTIyZGRkNzIzLzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEtMDVlYTIyZGRkNzIz
LzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxjY9RbP
8B0I51nQBrxko06A3qtRZYUy+CKBipufNfNwVnS/vwAQwTOeKa0t1lvhbW/dpRhS
3mzx9f9DtaAG3dwCkMB202iZ9ZjoYEM37GlJmEPBba1cbEKzRSqype1RGduMJTBu
OTuZccE8lIKU/xK3sojDjSp+iZTy2z7qQctcOREUugMOSbdxlK9BG7krU06XpBc+
5LnzQbAF4FwA9jPK9qVZkfXAswdXURtEhjFQqTqKhICD2scrlSIF1QYTB/qR7kjh
Zh5+wbp/Oo9JMPlbcyeRwFEkap7TtnGzyWNzCR2Mb4vJOJw0fW1PWWHAxn1Bhdhn
Uvo5IJFoHPcZzw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:13 2025 by rpki-client