Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File:                     kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier:          fvNWL70kwFr7JbSZu0xaTX3lq/+kRi2ZpyUDfNC4r84=
Subject key identifier:   8F:29:A9:66:A1:38:36:10:47:79:76:A4:4F:55:C2:3B:5D:61:58:3C
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer:       /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial:       0197B77C83CE7E71B36B2B4D0E98AED8F4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number:          1450
Signing time:             Sat 28 Jun 2025 17:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:19 +0000
Files and hashes:         1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=)
                          2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: OVFuiO75NeusEyFbdvygrFNwHOokwr/Cxz2GxcycXc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:83:ce:7e:71:b3:6b:2b:4d:0e:98:ae:d8:f4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
        Validity
            Not Before: Jun 28 17:01:19 2025 GMT
            Not After : Jun 29 17:01:19 2025 GMT
        Subject: CN=8f29a966a1383610477976a44f55c23b5d61583c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:42:0b:64:83:fd:1a:68:a2:b9:6b:84:7f:
                    f4:3a:de:1f:9e:af:bd:06:0d:d3:ce:c0:f4:82:d2:
                    b0:2e:37:a3:ed:3d:54:00:d8:27:55:1e:14:9a:19:
                    3b:c6:2a:b6:06:a5:d0:fa:0c:f2:f1:7e:df:1c:c4:
                    01:ab:c2:b4:ab:36:cc:fb:1f:07:a1:df:a1:03:00:
                    30:81:fc:2f:2c:c5:ae:26:2f:48:5e:2d:ab:1c:0b:
                    61:1b:f1:69:97:b1:2c:e7:f3:d7:6c:06:54:76:e5:
                    3a:7a:cd:e7:4f:6c:66:6b:6a:41:70:e5:88:01:38:
                    21:f7:69:99:1d:9d:1b:7c:ca:f5:69:c7:b1:ec:98:
                    b2:05:11:48:b1:97:bb:11:c4:27:73:ad:dd:6f:1b:
                    ea:e9:95:a5:11:c5:dc:9f:6e:4c:cf:dc:e5:d4:c7:
                    69:77:86:fb:47:f0:47:ed:1d:43:2c:48:f4:48:41:
                    32:97:c2:88:87:ce:3f:d3:8a:87:90:02:b6:a3:d9:
                    5a:8b:10:7c:e7:b2:dc:f7:2e:ea:40:8d:a5:e4:0f:
                    ce:cf:c2:09:17:a7:5b:9f:af:6a:79:e2:b6:b8:ae:
                    ae:64:8d:ee:3c:23:6a:b5:40:64:53:8c:07:4f:f5:
                    7e:95:f9:d2:77:90:26:d2:20:89:01:7f:bb:dd:d3:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:A9:66:A1:38:36:10:47:79:76:A4:4F:55:C2:3B:5D:61:58:3C
            X509v3 Authority Key Identifier:
                keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:50:d5:2c:7e:02:8b:6c:81:9d:b1:fa:1a:43:ea:b5:38:
         6e:10:56:2a:b1:a3:e5:36:bd:60:ef:d9:35:e6:11:09:ba:20:
         4f:17:c0:53:79:fe:e9:07:64:39:0f:80:aa:a4:e6:48:43:bc:
         1e:fb:c8:61:19:be:25:9b:e2:4c:2b:48:af:5e:ee:c9:f7:40:
         7b:39:8c:6e:13:c7:00:e8:45:ca:f2:62:12:d8:ee:50:0e:9f:
         b9:ed:b9:c1:d6:19:f4:33:d8:f2:4c:aa:d4:81:7b:0f:0a:c0:
         ab:6c:e3:b0:ac:44:6c:20:4e:7a:7a:0e:1f:5c:69:d0:aa:d8:
         d7:37:36:2b:d9:81:5d:d1:95:fb:b3:f1:a9:b0:cb:1d:af:fb:
         c0:3d:2e:52:be:15:f7:76:d7:70:9a:a0:38:f4:f5:8a:65:5a:
         0a:2d:ec:08:9a:ed:a1:40:59:e3:2e:26:58:80:1b:64:e9:1d:
         df:aa:d6:c6:08:0b:37:2e:7d:b1:3b:4d:87:68:75:b4:06:bf:
         88:70:9f:41:9a:fa:06:f9:2d:fe:83:01:26:cd:7e:06:ee:f0:
         a0:76:c2:f1:01:17:35:d5:aa:59:2b:45:33:30:a9:2a:be:62:
         44:62:fc:7e:b4:cd:50:46:3a:1a:33:15:17:58:f4:c7:56:72:
         8d:4a:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:34 2025 by rpki-client