Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          t335yPBBK6fmI99qHhKBiDbpVD5qWgmiLD4fApjQv58=
Subject key identifier:   28:9C:12:FC:BE:E2:2C:C9:98:8F:4E:A9:4D:3C:9F:9A:FA:9E:E2:85
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       019607F9E1FC7CF7B8A2D071C10EC2A77A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          082F
Signing time:             Sat 05 Apr 2025 22:02:18 +0000
Manifest this update:     Sat 05 Apr 2025 22:02:18 +0000
Manifest next update:     Sun 06 Apr 2025 22:02:18 +0000
Files and hashes:         1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=)
                          2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=)
                          3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=)
                          4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=)
                          5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=)
                          6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=)
                          7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=)
                          8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=)
                          9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=)
                          10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=)
                          11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=)
                          12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: dx77lXMeB1r4NOUfOxV5279r5BWenE2VpPoDJvbV5rU=)
                          13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=)
                          14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=)
                          15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=)
                          16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=)
                          17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=)
                          18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=)
                          19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=)
                          20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=)
                          21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:07:f9:e1:fc:7c:f7:b8:a2:d0:71:c1:0e:c2:a7:7a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Apr  5 22:02:18 2025 GMT
            Not After : Apr  6 22:02:18 2025 GMT
        Subject: CN=289c12fcbee22cc9988f4ea94d3c9f9afa9ee285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:94:59:cb:ef:2d:59:1f:10:f3:3f:13:4b:
                    6e:8e:67:1c:10:c9:38:63:41:2c:13:88:9a:c4:1b:
                    8d:9d:91:6d:a7:81:e0:a2:5b:9d:1e:1b:7c:94:e6:
                    94:b7:6f:d1:cb:2b:0e:d0:75:91:65:c5:f2:13:51:
                    7c:51:e9:92:9c:bf:32:a5:a6:9c:68:9a:1f:38:c7:
                    94:21:55:9b:6f:1a:36:df:0e:8c:16:77:09:3c:33:
                    91:1b:c1:1b:f9:da:6f:2e:95:1a:e4:35:67:96:61:
                    26:9a:9d:0e:3c:e9:64:79:51:b5:7b:16:95:ea:79:
                    ef:14:fb:ba:1e:94:6e:46:25:a4:a2:2b:48:3c:6c:
                    a5:fd:89:30:2b:44:9b:00:b3:b6:ee:a2:4e:41:1c:
                    1d:02:df:86:ea:a5:07:fe:04:c7:35:58:ad:35:17:
                    a5:a7:3e:24:85:79:f4:cd:fc:a0:35:3c:76:c1:94:
                    53:fb:74:60:99:db:2a:f5:64:50:99:cb:01:ce:70:
                    ee:c9:17:b9:21:67:64:8c:72:d9:d5:8a:03:4f:79:
                    77:66:db:35:ec:a4:83:67:98:2e:f6:8f:50:67:aa:
                    f8:e8:1b:02:19:31:60:ec:2c:4c:05:ce:35:e5:f5:
                    be:8a:18:64:05:a7:e6:0b:37:05:42:09:00:20:ea:
                    78:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9C:12:FC:BE:E2:2C:C9:98:8F:4E:A9:4D:3C:9F:9A:FA:9E:E2:85
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4f:53:46:fe:f1:f5:8c:92:3b:23:dd:0b:86:d2:47:f3:e8:
         59:97:c8:2f:3b:03:2d:77:c0:9c:16:7e:7d:33:5b:f1:54:71:
         54:e5:1b:54:0d:6b:a9:49:a8:fb:9a:4f:a6:96:1d:b0:6b:28:
         0f:8e:74:1c:06:c8:2d:ab:cc:20:f4:9f:81:0f:e6:94:b5:63:
         e0:08:fc:8c:37:ff:3b:02:fc:c2:c4:67:76:f0:4f:18:69:92:
         1a:84:ba:cd:7f:8f:84:27:f3:53:6b:a6:c3:6a:da:05:3c:54:
         69:19:a7:52:bd:89:d1:1c:77:73:21:94:b6:e5:23:6a:01:fd:
         48:d5:1f:66:2a:00:0c:9e:9d:ba:6a:d6:8f:1d:2e:39:83:8d:
         5e:97:df:40:93:63:4f:89:1a:41:fb:39:58:0a:0a:1f:21:50:
         ef:96:f5:c8:2f:ce:a1:b7:7b:85:f6:a6:97:45:c6:8f:75:a4:
         c9:99:ab:3f:7a:b2:e4:13:b8:17:a8:8a:59:c5:55:0f:47:55:
         a6:0e:0e:20:24:e8:85:e1:3b:fe:73:2a:30:f1:81:e7:e5:c9:
         4d:a6:0b:ff:57:00:f6:ac:0e:f4:5c:94:cb:68:8d:c0:f0:05:
         cd:92:f1:4d:e0:03:1c:b2:71:39:d0:4c:d8:dd:a7:44:37:e8:
         a6:94:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:03 2025 by rpki-client