Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File:                     1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier:          cWZDg5D9pFMz2rmFMS8SrW8r92tlGYPVJDCvmllPeCs=
Subject key identifier:   E6:83:E8:BC:90:18:06:24:42:D1:76:8D:1F:F1:55:F4:6E:D7:11:87
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer:       /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial:       0197537E1CD5E5ED0109238F4FEA5B1FBB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number:          12B7
Signing time:             Mon 09 Jun 2025 07:01:03 +0000
Manifest this update:     Mon 09 Jun 2025 07:01:03 +0000
Manifest next update:     Tue 10 Jun 2025 07:01:03 +0000
Files and hashes:         1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: HDb3sUo6nlD6qmvY6kylZ4EFozfu1URKD96dtWbbFnM=)
                          2: 2Z4uWBrUsnH37u-4XuHfV5Ci7Ek.roa (hash: AkCUWRms5SxBxIsWLsuMaXD0PJyWJJHr8rOMRKJRlkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:7e:1c:d5:e5:ed:01:09:23:8f:4f:ea:5b:1f:bb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
        Validity
            Not Before: Jun  9 07:01:03 2025 GMT
            Not After : Jun 10 07:01:03 2025 GMT
        Subject: CN=e683e8bc9018062442d1768d1ff155f46ed71187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:13:d4:a7:8e:28:b9:01:6e:f7:b4:50:8d:
                    19:de:6a:82:38:64:71:7c:dc:84:60:3f:54:20:11:
                    cd:58:26:de:25:92:49:49:68:ce:37:f9:76:4e:f7:
                    a4:80:39:e3:14:73:5d:42:f6:a2:23:c4:0a:a7:88:
                    14:82:56:f8:e3:1c:61:77:4c:ec:c4:da:38:50:ab:
                    ce:54:dd:d3:71:e3:1e:59:e9:a9:5c:12:ba:38:7b:
                    96:93:28:27:68:33:5a:89:20:93:0c:71:14:4e:c3:
                    56:3f:c5:02:5a:b0:f7:1c:25:c6:97:de:e8:29:4a:
                    46:40:a1:24:db:8f:e0:ae:2e:83:eb:37:17:35:b8:
                    18:c7:7a:87:ec:a0:f4:d2:a6:22:c2:d8:f3:e7:71:
                    b5:f8:4f:d8:ab:56:3f:30:1b:03:22:7d:2d:18:a9:
                    03:f3:29:73:5d:91:85:0a:55:76:b4:6a:c0:d4:b4:
                    71:5b:71:0b:f7:e0:90:f6:a5:3d:97:7a:47:f2:8a:
                    45:d8:2b:45:9e:fc:58:2f:dc:16:8f:0c:8c:b9:62:
                    d9:08:aa:f4:27:91:ed:1f:df:a6:83:92:96:89:24:
                    4e:61:ba:37:61:34:45:d3:32:fb:e2:94:fe:04:04:
                    29:cb:e8:21:7f:cd:af:0f:ae:64:e4:1b:d7:f5:67:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:83:E8:BC:90:18:06:24:42:D1:76:8D:1F:F1:55:F4:6E:D7:11:87
            X509v3 Authority Key Identifier:
                keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:23:12:7d:65:4d:ba:f9:7a:61:2e:21:f7:34:14:48:f3:a4:
         94:32:f6:e8:30:f0:c6:2a:a5:f6:84:72:81:14:8e:b8:3b:d5:
         77:eb:fc:01:27:09:67:5c:2c:1f:f8:4c:fc:d9:d6:cb:03:f1:
         c5:4d:83:08:10:21:38:fd:4c:14:63:5e:67:be:bf:f8:f3:56:
         3f:2b:7c:fd:74:9c:bd:06:83:95:00:57:ac:8c:af:8c:47:e3:
         45:d5:d3:bc:df:68:b4:c2:21:e3:01:fe:87:bf:50:82:ec:d1:
         96:b9:32:c5:1b:d4:da:92:7d:c9:96:3e:01:1a:46:f4:8e:e3:
         e1:28:ed:30:7b:c4:21:4b:1f:72:ae:1f:dc:8e:a0:c0:10:56:
         f8:7f:3b:f8:52:20:35:9f:21:de:1b:db:d2:d9:24:5a:a8:02:
         72:e1:b8:d8:99:21:fb:62:e2:1e:cb:96:36:a3:e3:af:39:a5:
         26:9c:4c:96:80:14:57:be:6e:85:c5:3a:08:a9:76:1a:90:b7:
         48:ad:fc:76:08:92:2f:6b:84:0b:22:ca:54:91:d8:1e:f0:a0:
         05:2e:5a:35:13:1b:31:2a:73:2c:8f:ef:2f:ec:ec:ff:59:fa:
         9e:7f:56:41:b2:fb:d6:c1:6b:bd:0b:29:6a:01:43:7a:4e:c1:
         cc:6c:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:30 2025 by rpki-client