Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File:                     KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier:          6BOEQx5n7CiP078nxhrYCsdGM/gyOhpGmZqvVDGqbGA=
Subject key identifier:   A1:22:1A:E1:CF:B7:BB:29:32:91:9E:B7:FA:8E:BC:7A:7B:E5:7D:BE
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer:       /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial:       019765F248AE3C7C99490275483153929637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number:          150E
Signing time:             Thu 12 Jun 2025 21:01:06 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:06 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:06 +0000
Files and hashes:         1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: SZIOPR8031MbQP3DEPOMCE26o60uBvZNo/sDCA+1Da0=)
                          2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:48:ae:3c:7c:99:49:02:75:48:31:53:92:96:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
        Validity
            Not Before: Jun 12 21:01:06 2025 GMT
            Not After : Jun 13 21:01:06 2025 GMT
        Subject: CN=a1221ae1cfb7bb2932919eb7fa8ebc7a7be57dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:cf:02:d3:0d:55:f6:b4:7a:4b:a0:bd:25:
                    72:b1:e0:d6:74:56:63:19:a1:0c:22:b0:a9:f2:9e:
                    e8:8b:43:2a:f4:f6:d3:28:c8:da:6d:3c:b2:77:35:
                    20:58:9e:9f:e0:80:03:f9:34:d1:17:64:ea:27:e8:
                    1d:f4:31:4a:30:4c:5c:69:95:5f:cf:f6:a7:75:c0:
                    6e:d7:e2:ee:76:93:5e:01:a4:a4:c8:13:82:ca:39:
                    1d:c7:56:51:f6:5b:48:3f:1d:c0:d1:5a:97:86:7b:
                    58:df:4a:e6:15:b3:03:30:16:8f:6f:68:a4:aa:5b:
                    b3:2a:1b:ec:da:ec:b5:1b:63:11:c9:e5:24:89:f3:
                    fc:0c:80:67:cd:5c:04:bd:18:0f:0c:d2:f4:7f:bd:
                    73:24:ca:cc:bb:14:24:79:ba:8f:7d:26:51:ae:2d:
                    79:cf:b8:31:b5:8f:e8:77:e1:dc:3c:93:9c:be:a3:
                    14:3b:b7:5c:d7:5a:09:10:dd:48:5b:0f:2c:8c:ec:
                    8c:04:aa:a4:4b:9d:93:a0:1d:a6:3e:63:31:c0:ba:
                    c0:52:92:4e:de:83:77:c4:53:9e:fa:52:52:3c:09:
                    be:39:2b:5d:d8:93:56:e2:97:54:ad:2d:be:68:31:
                    8a:98:d6:ee:a7:34:30:c5:0a:15:6e:fe:d7:37:30:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:1A:E1:CF:B7:BB:29:32:91:9E:B7:FA:8E:BC:7A:7B:E5:7D:BE
            X509v3 Authority Key Identifier:
                keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:80:49:7a:96:77:1d:9a:bc:d8:61:74:d5:eb:c8:f0:38:0d:
         b0:0d:f3:f3:b5:f4:d5:00:b9:3a:4f:f3:c5:f3:c4:66:4c:38:
         15:ba:dc:c8:96:cc:bb:6d:b9:00:7e:e8:73:f1:e7:1c:fb:28:
         90:7d:f2:f3:12:5b:41:30:fd:c7:39:2f:95:ee:52:d3:8b:e1:
         c9:f8:5d:b7:f3:c1:e2:6a:b0:dd:04:c6:05:36:7d:d6:f2:4a:
         fe:51:b5:e6:1f:1d:20:8c:dd:c7:e4:5b:92:ad:f2:bc:d7:26:
         12:72:41:78:82:a3:78:f9:26:e3:70:21:e8:ea:d0:24:f0:fa:
         e4:70:51:76:18:4c:0f:d8:f5:98:0f:30:0b:de:ae:1e:4d:b5:
         c3:84:25:cc:72:a5:8e:1d:11:eb:91:5d:66:65:0a:21:31:4b:
         ac:79:81:f3:50:b2:c7:5e:c1:ee:6d:78:59:0e:0e:b1:28:4e:
         0a:f3:ff:85:19:ad:71:9a:26:72:94:32:4d:ca:0b:8e:78:25:
         76:ee:9c:6f:cb:95:d7:72:41:a2:27:83:3b:8b:1f:49:8f:5e:
         f8:79:ae:21:01:2f:92:82:69:21:f7:b6:53:02:3d:98:df:fd:
         3b:8b:f5:a3:f7:25:f2:cf:c5:8d:45:43:d9:d8:f5:4b:fb:e6:
         e8:de:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:10:31 2025 by rpki-client