Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File:                     KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier:          LwULgJ6wcsqHGi5GIt/tMn+Xk9Jl+StpRaaOGpC7eaE=
Subject key identifier:   05:C4:3B:52:05:5D:B2:32:5D:06:8D:B5:E0:56:6C:60:EE:DD:23:34
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer:       /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial:       0197B8C608B0058A38893498D4CB7C75DE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 23:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 23:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 23:01:15 +0000
Files and hashes:         1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: S64HEdqsxKPfT0/reLD3WTRYMr5jJTaGbE/KSrjlWRI=)
                          2: vfgX0QM1-x_CfmwOuFEwuDR0qtE.roa (hash: VmApxfvV1fKRc5LBTSdDtZW6mm+Y06ANpvyiPSheTug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c6:08:b0:05:8a:38:89:34:98:d4:cb:7c:75:de:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
        Validity
            Not Before: Jun 28 23:01:15 2025 GMT
            Not After : Jun 29 23:01:15 2025 GMT
        Subject: CN=05c43b52055db2325d068db5e0566c60eedd2334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:07:27:0e:57:b1:a1:95:a3:74:71:3e:27:8f:
                    68:77:85:eb:9d:67:6d:38:86:e7:99:ef:7a:e3:5f:
                    56:00:b3:d4:aa:0d:3f:a4:4f:c3:ff:10:ed:7f:95:
                    c0:82:3e:7f:b9:3d:ac:17:85:60:ba:3c:d8:83:a6:
                    f4:b9:e4:19:2f:df:25:39:c8:89:34:c9:5f:cd:4a:
                    be:7c:e8:ed:06:6b:0e:69:86:0e:de:1a:53:11:72:
                    4a:5d:f4:b4:7a:ed:0a:18:15:fe:35:5e:61:90:ff:
                    d2:fb:d9:34:40:17:d5:ad:fd:ee:9e:8f:e3:d3:66:
                    7c:18:0c:4d:de:cf:bf:43:67:51:d8:35:92:93:5d:
                    f1:32:ce:0e:05:84:8a:ab:af:e9:d3:cc:20:ab:bb:
                    f0:e3:5c:54:5c:aa:3a:a4:1e:9f:76:f0:38:75:09:
                    b7:26:ae:f1:29:a8:ab:3e:cc:2e:0d:fa:a6:f0:3c:
                    2a:ad:47:05:a2:19:c9:98:2d:7b:45:45:d2:50:39:
                    c5:a1:95:d2:44:7e:0d:9e:55:f6:52:9c:60:f1:ca:
                    f5:e3:00:e4:d6:77:b8:9c:c2:57:7b:b6:2e:92:ae:
                    b3:14:2f:a7:a8:60:56:72:9a:8b:78:5b:73:5e:f1:
                    3d:93:e4:c3:e1:74:4a:3a:45:7e:07:1e:aa:78:d7:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C4:3B:52:05:5D:B2:32:5D:06:8D:B5:E0:56:6C:60:EE:DD:23:34
            X509v3 Authority Key Identifier:
                keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:c4:0d:7a:50:7f:0c:bf:09:36:b6:55:d4:f5:7f:ac:91:
         ed:fb:d4:dc:48:13:8b:ef:60:f9:9e:aa:5b:00:15:e5:9f:13:
         c1:79:b1:a5:54:b4:b5:8e:71:e9:e6:70:86:2d:b1:b3:37:94:
         14:c3:62:10:3e:86:37:df:0a:ca:d8:54:3a:0f:0a:20:72:87:
         ed:bf:53:4f:c1:b1:51:60:d9:ff:14:82:de:48:ec:d0:c8:4b:
         ff:96:f2:cf:50:fc:ff:29:8e:d1:30:08:dd:10:f5:b7:0b:e3:
         98:f9:36:5c:5a:f4:3a:7d:c5:73:7f:4b:c3:f4:78:fb:68:b9:
         eb:22:30:97:0b:c9:c0:6e:7a:51:c6:3a:cd:26:36:b3:f9:41:
         a9:31:03:f4:d6:ab:dc:c8:da:50:ca:56:d4:ce:fe:5f:8a:8b:
         82:eb:dc:9e:a9:c8:3a:68:a7:b6:37:78:83:cf:f8:ec:c3:2c:
         ec:97:f3:da:9a:e8:1b:e7:8d:09:35:e1:e5:4b:c4:3f:53:bc:
         ff:5c:11:5e:3a:fb:77:2a:67:cd:0b:58:db:21:7e:35:ef:08:
         5f:5d:b3:36:a5:25:d4:a7:77:45:bc:49:ce:48:dc:61:c7:12:
         54:d4:90:3c:15:4f:b0:1f:e5:25:01:44:25:84:6f:30:6d:79:
         77:31:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:24:49 2025 by rpki-client