Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          aOscDskhzz/0zScOdOt/gND6lZZxFT9bPBs6qFY2k7A=
Subject key identifier:   23:67:04:2B:72:5A:82:B8:B7:0B:0B:95:A5:4A:D3:B2:74:26:E6:BB
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       019747B0BE9DA0037E338A17117D2072C99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          10FA
Signing time:             Sat 07 Jun 2025 00:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:54 +0000
Files and hashes:         1: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: A4lJI0AuvqykzYZ3VjUei/TPxgeDx32EV0ZBeg1WNWo=)
                          2: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (hash: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=)
                          3: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (hash: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=)
                          4: foMqTIfk3NGRU1ECjEYc0FzWeHQ.roa (hash: 8/tSFYSbydeBOM5cDt+MQjefx680IbM6wdc9EqGW/uQ=)
                          5: qOJSirqIZF030lDaiDlLOLszAqo.roa (hash: cceSZV5tbmDVcXVgGl8UFbkLxF9VVoz+OhMvXa1/dFw=)
                          6: zAPwb7bovDcweikHvlN-q4fyaQM.roa (hash: B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:be:9d:a0:03:7e:33:8a:17:11:7d:20:72:c9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Jun  7 00:00:54 2025 GMT
            Not After : Jun  8 00:00:54 2025 GMT
        Subject: CN=2367042b725a82b8b70b0b95a54ad3b27426e6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:ca:cf:36:22:e7:05:81:2f:1c:31:83:a7:
                    34:0c:90:17:b4:0b:32:37:3f:df:ee:e2:85:fb:a2:
                    11:f4:b3:30:68:02:7e:83:9c:d8:e7:55:ae:ca:6a:
                    cc:3f:67:c8:56:d7:14:cd:25:e6:57:ed:94:0d:81:
                    04:96:f7:7e:9b:45:09:6e:ca:7e:e5:d5:da:38:a4:
                    14:92:00:c4:1a:07:98:c6:02:20:f9:3f:f7:df:38:
                    e6:4e:aa:52:7d:a3:c9:a4:83:f9:11:9f:a7:8d:26:
                    c9:26:b8:cb:84:eb:17:66:28:08:d8:4f:33:3a:e0:
                    0a:4b:fe:04:cd:d2:44:ed:58:ee:3f:69:c9:64:53:
                    ed:26:ca:93:90:29:e4:88:c6:d5:e7:08:6c:e4:19:
                    3b:9f:8b:39:ea:06:6d:bd:93:0d:7f:a0:e9:e8:dd:
                    5b:ea:fc:6b:1e:a5:d5:34:95:72:33:89:2a:33:45:
                    33:c8:de:eb:27:b0:f9:9a:a2:60:2d:63:88:0d:76:
                    02:91:3c:39:12:41:cd:81:1f:36:4d:4d:72:ae:e2:
                    c3:b2:0c:96:79:35:0f:ec:59:98:a0:01:3c:93:34:
                    5c:33:ac:86:e1:e3:78:0b:72:dd:6a:c2:8d:bd:90:
                    38:0c:26:2e:57:60:21:9c:66:5a:4a:2d:7a:20:4c:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:67:04:2B:72:5A:82:B8:B7:0B:0B:95:A5:4A:D3:B2:74:26:E6:BB
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:42:30:10:ae:02:75:ca:bd:18:07:2a:50:56:9d:56:2c:
         ee:87:df:6b:ff:16:43:77:eb:7c:6d:98:1c:56:cd:a4:a2:2e:
         e2:5c:bb:b7:70:cc:62:8c:1c:e2:02:73:7a:93:f4:44:56:0a:
         7c:eb:e7:7c:f5:e4:68:36:7e:21:f1:93:d8:f2:9c:cf:89:de:
         b1:b9:bc:bc:e2:c7:c4:6a:37:e2:66:ca:ef:42:92:57:27:2e:
         be:02:d8:0a:f9:ee:06:b9:1b:e2:8f:ad:51:19:21:3b:23:95:
         45:90:f5:a4:b3:44:49:c4:f1:b3:5c:33:85:63:cf:46:6e:15:
         d3:94:a6:9e:84:2e:8d:a2:d2:83:7f:6d:f4:50:59:81:c6:3e:
         be:93:24:dc:09:f3:71:a4:56:00:b9:71:a5:ff:df:e3:a1:1b:
         f4:a7:a0:6c:15:db:ff:d2:59:cd:c7:2c:a1:41:91:6e:20:9f:
         5d:a3:fa:fb:e0:97:a5:c8:a1:ae:4b:a0:0a:93:a9:25:ae:12:
         f9:a5:59:6c:88:1e:f5:7f:a2:b5:cf:67:a2:8f:80:59:91:16:
         cd:4e:11:36:09:8c:ae:b2:a9:1e:bd:f4:9e:ae:3c:fe:b8:c9:
         2a:17:5f:d6:f4:ca:5e:be:1f:24:56:d2:96:77:b7:df:ea:34:
         d3:17:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:22:53 2025 by rpki-client