Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File:                     KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier:          VouZsYvJMWt7emDoTo4pjJp9ECcTNX3Uxn3VqkxbOI8=
Subject key identifier:   76:CD:4F:A9:98:54:34:6C:D3:21:1B:36:80:1E:15:54:FE:17:F9:5F
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer:       /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial:       01975158AB10C59C9F9BCBE3E502FE09751B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number:          0F67
Signing time:             Sun 08 Jun 2025 21:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 21:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 21:00:54 +0000
Files and hashes:         1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: qYp2LHxPyVInr2bF5Fd2NJgnxcb8nQ275avoturENQo=)
                          2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:ab:10:c5:9c:9f:9b:cb:e3:e5:02:fe:09:75:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
        Validity
            Not Before: Jun  8 21:00:54 2025 GMT
            Not After : Jun  9 21:00:54 2025 GMT
        Subject: CN=76cd4fa99854346cd3211b36801e1554fe17f95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:52:70:f6:8a:34:39:20:3f:05:90:b6:a5:
                    1b:88:21:cf:76:59:34:46:f6:56:3d:f8:7a:4d:0a:
                    2a:6b:ce:0e:7b:da:b0:0f:9b:c2:55:1c:06:71:69:
                    99:ed:5a:96:e5:6a:d7:63:07:d6:a6:e6:13:5b:80:
                    b8:c9:df:74:6f:b5:66:4a:2f:12:8a:e1:11:db:06:
                    65:b9:87:75:57:7f:00:4e:ca:eb:67:99:ba:0a:e8:
                    a1:9f:97:54:64:bf:d0:b4:77:b1:e4:34:db:c2:14:
                    bd:df:c7:82:12:de:5b:a2:6e:46:ef:c9:61:f2:ff:
                    e7:83:e9:93:41:5c:23:b4:61:31:26:16:2f:fe:fc:
                    9f:c3:3b:b3:ca:64:18:89:d6:dd:ef:05:1a:e6:99:
                    67:71:e8:40:34:05:a6:57:7b:f6:df:ff:7f:8f:44:
                    ef:5d:f3:3c:d5:51:63:8a:7b:cf:92:9a:32:b4:b8:
                    c1:4e:31:f0:30:14:6d:53:6d:df:07:11:f7:26:d8:
                    39:32:9d:c3:df:6e:7b:91:92:89:6d:ab:30:fa:87:
                    8d:bc:b4:0d:60:40:af:0a:cb:98:5e:c2:bd:72:2d:
                    13:cc:a9:84:a1:07:2f:4f:75:1a:b3:64:c9:45:18:
                    91:32:d5:1d:36:6e:27:28:91:52:31:01:4a:06:11:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:4F:A9:98:54:34:6C:D3:21:1B:36:80:1E:15:54:FE:17:F9:5F
            X509v3 Authority Key Identifier:
                keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:95:2f:e8:fe:4c:5f:24:5f:ee:aa:d9:01:76:0a:fc:1b:13:
         5a:80:67:9b:2f:6a:37:a3:bd:6b:99:0b:eb:84:26:d4:16:8b:
         eb:fa:50:1a:7a:fe:91:59:ff:11:48:0b:ff:71:65:77:55:3a:
         fe:e2:e7:9c:87:a2:e9:54:90:15:0d:5e:4b:1b:0d:e5:a9:8a:
         ee:c0:91:1a:5a:1e:37:b4:bb:a3:96:a6:d1:7d:6e:7e:03:7c:
         c0:16:ce:d4:63:bf:52:84:f3:49:2d:54:50:9a:e1:ba:a3:be:
         95:da:83:05:0c:89:84:fe:e1:e8:6b:73:a0:44:27:d8:7c:42:
         ba:6e:d4:05:c9:fa:ba:f6:b0:64:12:f0:b6:c2:de:81:2c:c2:
         17:1a:9c:53:f6:f7:c9:b9:9c:ad:ca:cf:53:94:17:d8:a9:62:
         f4:73:83:1b:e0:23:97:3f:92:91:a2:36:04:6c:93:dc:80:91:
         64:0f:a9:37:cb:3d:43:63:5c:77:41:e1:e9:88:cd:32:4c:bc:
         c4:bb:6a:92:64:a0:1a:e7:19:31:2b:e1:af:17:6f:22:ec:bd:
         86:eb:2f:12:f5:d8:4b:45:92:8c:1e:37:8d:2b:69:47:29:85:
         f3:5a:da:ed:e5:10:04:7a:96:54:7a:07:04:d6:fe:20:b4:e2:
         a4:72:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:31:17 2025 by rpki-client