Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File:                     KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier:          mpbwZQ+y+VcPpK2NiOBY1PSW/LV6/QwlIfjGLMiswOs=
Subject key identifier:   CC:E9:3D:1E:DF:02:77:94:8C:F6:6E:AC:68:7B:F1:DD:3D:1D:81:D9
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer:       /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial:       0197500E959F235ACB1200B108044580921F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number:          13EB
Signing time:             Sun 08 Jun 2025 15:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:22 +0000
Files and hashes:         1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
                          2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
                          3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
                          4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
                          5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: SmIgSWDESiQ9OUMGsop5iz0TQMf5sTMDOvlzbrQMVI8=)
                          6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
                          7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
                          8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:95:9f:23:5a:cb:12:00:b1:08:04:45:80:92:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
        Validity
            Not Before: Jun  8 15:00:22 2025 GMT
            Not After : Jun  9 15:00:22 2025 GMT
        Subject: CN=cce93d1edf0277948cf66eac687bf1dd3d1d81d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:8b:1a:cd:e7:ee:ab:3d:26:5e:16:ed:26:
                    40:b2:59:9d:08:eb:97:15:6f:ef:7b:3a:c2:57:d8:
                    ec:31:9c:10:ca:f1:2c:fd:5f:58:4b:c5:0a:39:4a:
                    b9:d9:78:e5:1d:1b:78:77:4b:31:c7:d3:7f:3d:d7:
                    6e:fd:a2:ac:ba:93:e2:36:5b:d6:b4:00:5d:75:43:
                    5f:51:00:c1:0d:b9:4d:9d:c7:e7:31:b6:a4:bc:81:
                    62:a1:c8:ec:60:f2:6c:3c:c5:c6:64:cb:fa:78:f9:
                    2e:a9:e9:06:a8:c1:be:85:12:45:82:a4:15:b6:67:
                    69:e8:e9:f3:39:5a:c8:ea:1c:57:19:30:b4:4e:eb:
                    51:62:01:f2:29:12:ae:57:9d:71:52:6e:bc:eb:f2:
                    07:3f:57:61:55:f2:ee:3c:e8:fe:56:27:3d:51:56:
                    ab:e8:41:b2:f3:cf:ee:50:58:ea:8a:ce:de:a5:77:
                    70:ea:d5:83:19:1e:09:59:76:a1:3a:ed:16:60:8f:
                    3b:0a:04:5e:6d:55:ab:79:7e:3c:ba:7d:4e:b2:86:
                    ab:ef:79:94:5a:f2:c4:4b:c8:dc:59:54:bf:a1:2a:
                    a4:34:a2:a7:2e:05:10:45:b5:60:7f:f6:0f:a0:6c:
                    0c:e3:63:6a:63:00:3e:87:8d:3a:19:0e:d6:f6:fa:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E9:3D:1E:DF:02:77:94:8C:F6:6E:AC:68:7B:F1:DD:3D:1D:81:D9
            X509v3 Authority Key Identifier:
                keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:b1:26:46:1a:ec:fd:8e:12:b0:c3:77:ef:76:7d:00:8e:
         44:8c:fb:8a:ab:57:84:cf:f4:b0:4c:31:aa:2f:85:2c:be:a6:
         71:9d:8b:be:5f:ec:8c:a6:54:a6:54:43:7d:b9:7e:3e:88:b2:
         68:85:1d:8a:73:13:05:b7:50:70:10:b7:cf:4e:cd:96:32:6b:
         ef:61:c0:36:fc:14:a1:9e:a1:84:92:b0:6f:06:73:a2:c8:07:
         15:6e:d8:e1:93:0e:e3:78:94:6a:a5:48:bb:46:82:02:73:90:
         5c:c4:83:8b:15:6d:66:ac:ef:d6:99:11:74:3f:7b:f2:b5:dc:
         13:05:2f:9e:52:47:15:81:5d:17:f0:ad:f8:97:16:61:0f:25:
         f8:bc:2e:92:75:ff:5d:d2:9a:b3:80:e8:7c:d4:68:1b:10:de:
         22:8b:b8:d8:13:d1:e5:31:9a:26:9d:61:c1:f2:df:62:54:d4:
         12:00:ea:d8:c3:eb:ee:68:ac:3e:b0:b2:3d:4a:5d:2c:46:87:
         23:32:c9:bb:8c:41:5b:91:1b:2f:6f:81:d2:14:cb:fb:13:25:
         b9:84:8d:4b:1d:15:a3:38:70:80:f3:ea:e1:e6:ae:b0:6b:40:
         23:9f:5b:a0:93:96:bc:85:5f:55:cf:71:b1:7e:f9:b6:c9:1f:
         18:35:42:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDpWfI1rLEgCxCARFgJIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk
NGJjYTQwHhcNMjUwNjA4MTUwMDIyWhcNMjUwNjA5MTUwMDIyWjAzMTEwLwYDVQQD
EyhjY2U5M2QxZWRmMDI3Nzk0OGNmNjZlYWM2ODdiZjFkZDNkMWQ4MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnOLGs3n7qs9Jl4W7SZAslmdCOuX
FW/vezrCV9jsMZwQyvEs/V9YS8UKOUq52XjlHRt4d0sxx9N/Pddu/aKsupPiNlvW
tABddUNfUQDBDblNncfnMbakvIFiocjsYPJsPMXGZMv6ePkuqekGqMG+hRJFgqQV
tmdp6OnzOVrI6hxXGTC0TutRYgHyKRKuV51xUm686/IHP1dhVfLuPOj+Vic9UVar
6EGy88/uUFjqis7epXdw6tWDGR4JWXahOu0WYI87CgRebVWreX48un1Osoar73mU
WvLES8jcWVS/oSqkNKKnLgUQRbVgf/YPoGwM42NqYwA+h406GQ7W9vrbxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzpPR7fAneUjPZurGh78d09HYHZMB8GA1UdIwQY
MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt
MGEwZjNlNzhhNDkzLzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz
LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZixJkYa
7P2OErDDd+92fQCORIz7iqtXhM/0sEwxqi+FLL6mcZ2Lvl/sjKZUplRDfbl+Poiy
aIUdinMTBbdQcBC3z07NljJr72HANvwUoZ6hhJKwbwZzosgHFW7Y4ZMO43iUaqVI
u0aCAnOQXMSDixVtZqzv1pkRdD978rXcEwUvnlJHFYFdF/Ct+JcWYQ8l+LwuknX/
XdKas4DofNRoGxDeIou42BPR5TGaJp1hwfLfYlTUEgDq2MPr7misPrCyPUpdLEaH
IzLJu4xBW5EbL2+B0hTL+xMluYSNSx0VozhwgPPq4eausGtAI59boJOWvIVfVc9x
sX75tskfGDVCNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:38 2025 by rpki-client