Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File:                     ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier:          6BScV7iE7WZ9o/tTzFOIKbGBCQj0JZdzBEarexUFxys=
Subject key identifier:   E3:90:ED:21:9D:82:78:66:29:B5:A3:CA:AE:1C:87:EB:EE:AB:41:75
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer:       /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial:       01984B544A1DF4F1158E96971F665AA1F2DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number:          05BF
Signing time:             Sun 27 Jul 2025 10:01:11 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:11 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:11 +0000
Files and hashes:         1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
                          2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: BzRf6180bgJaPwvHvV3uzZq5az7Ho53TsGAndK3ht8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:4a:1d:f4:f1:15:8e:96:97:1f:66:5a:a1:f2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
        Validity
            Not Before: Jul 27 10:01:11 2025 GMT
            Not After : Jul 28 10:01:11 2025 GMT
        Subject: CN=e390ed219d82786629b5a3caae1c87ebeeab4175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:d9:1e:7e:08:bb:22:57:eb:6b:9d:b1:d7:
                    3a:ad:28:2e:72:75:07:c7:b1:21:3b:2a:a6:9c:32:
                    c4:54:b1:2e:65:0c:7b:68:3e:c5:ca:44:12:98:f1:
                    f7:26:92:af:c9:1c:85:17:ff:f3:76:a9:04:16:b6:
                    dc:31:6e:ab:fb:8c:fa:59:14:3b:5f:51:88:54:11:
                    d7:52:96:a1:11:fa:6c:03:df:64:81:47:04:23:c4:
                    78:a3:b0:61:29:25:c3:40:9e:6e:15:78:8f:33:b3:
                    5f:a5:92:a8:89:a9:18:cd:f5:84:5d:2f:95:e5:cc:
                    63:4d:fc:c9:db:be:8e:e2:ab:56:ec:f4:a4:ab:5e:
                    1d:61:25:da:8e:20:71:72:9a:39:cf:95:94:ab:c9:
                    d2:dc:2d:7c:43:23:91:61:82:0b:9d:f2:1f:df:02:
                    24:40:fc:cb:d7:8a:5a:d2:00:69:7b:a0:cf:02:29:
                    8d:0a:81:8c:3e:12:91:c1:f8:da:59:64:32:fc:e4:
                    75:d1:53:c5:8d:26:b6:b6:5a:9a:82:c6:9a:9b:b3:
                    45:be:8a:11:56:c0:ef:9e:bb:7a:99:7a:2a:14:d3:
                    af:b4:97:61:84:8f:de:32:2f:53:fb:49:31:7e:3b:
                    bf:e7:64:5b:75:f0:72:6b:b7:1e:b0:98:07:09:6b:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:90:ED:21:9D:82:78:66:29:B5:A3:CA:AE:1C:87:EB:EE:AB:41:75
            X509v3 Authority Key Identifier:
                keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:0c:36:1a:92:8a:81:79:b3:ac:98:db:52:9b:49:3e:50:
         f2:77:7f:d2:2d:6a:07:e0:4e:53:9a:a0:b9:af:56:8c:59:e8:
         e9:75:11:d6:2c:f8:a9:e5:30:65:5d:28:21:3e:9f:5e:f8:75:
         b4:19:45:ff:56:2b:0e:db:aa:1e:c5:fb:07:77:29:26:f5:30:
         eb:24:b1:d8:f2:c7:8b:22:d9:61:47:37:06:05:c4:4e:ad:e6:
         ee:5f:66:85:b3:38:27:4c:e6:09:14:7f:5f:d6:b9:c8:f4:31:
         1f:4b:f4:78:61:86:ce:a6:42:81:49:76:ef:ac:a6:4e:bf:5b:
         98:ce:5a:f0:ac:44:b7:10:ef:03:e5:de:5c:c3:64:c6:30:8c:
         7b:ee:4e:b7:df:e1:a1:93:a9:35:6e:58:db:02:07:13:50:c0:
         4c:42:e6:6c:4c:d3:a3:19:ca:da:de:3c:47:ff:34:e4:d7:35:
         c7:e4:78:c4:f3:76:14:d8:29:33:0e:b1:c9:8c:56:4d:0a:d9:
         6a:7d:53:a6:57:da:54:b6:e8:08:53:30:43:86:92:6c:97:ce:
         3c:78:45:40:0f:11:42:d6:b2:72:7e:3d:64:ba:28:eb:86:3c:
         13:03:6a:a4:ad:21:86:be:42:f1:4e:e1:95:e7:80:1b:06:74:
         ad:ec:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:24:25 2025 by rpki-client