Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          cu5k6/cwBtD74xpxYeWMbXY8w7/27v7Ts/QXEyzFoOo=
Subject key identifier:   51:F3:C9:31:84:2B:EE:7E:87:41:42:A0:E0:4C:C6:4C:58:AF:B4:EA
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019A2C9FE24766E7DE8CB94A62DF03038AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          04A9
Signing time:             Tue 28 Oct 2025 21:01:06 +0000
Manifest this update:     Tue 28 Oct 2025 21:01:06 +0000
Manifest next update:     Wed 29 Oct 2025 21:01:06 +0000
Files and hashes:         1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: L3GXXYtzTfrTIhK2hQnM9hflA/JOPK4YsqShNxI8vqc=)
                          2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:9f:e2:47:66:e7:de:8c:b9:4a:62:df:03:03:8a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Oct 28 21:01:06 2025 GMT
            Not After : Oct 29 21:01:06 2025 GMT
        Subject: CN=51f3c931842bee7e874142a0e04cc64c58afb4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:f1:bf:e9:2f:39:71:32:34:56:18:01:b6:
                    2a:b6:d5:94:9f:12:5d:cf:70:c6:fe:38:f0:7e:5e:
                    d2:e9:48:dc:33:88:0c:08:68:3c:1f:bc:a9:c7:da:
                    90:d2:89:21:9e:3a:ef:05:b0:5a:df:7c:c1:57:60:
                    fc:a6:ed:a2:57:76:93:bd:e7:fc:f5:df:96:a1:36:
                    5c:9e:f6:3b:2b:ce:7f:1d:a3:5a:89:e4:23:35:e4:
                    8b:54:b6:69:30:bc:6a:2a:2c:73:12:d9:69:b3:af:
                    e4:be:62:51:a5:89:b8:7e:82:cd:aa:da:7a:e2:6f:
                    bc:22:9a:d0:8a:32:1b:57:23:be:86:cd:8b:5e:50:
                    2b:0b:42:e8:d1:d7:01:2d:3f:19:f3:fb:c2:7d:02:
                    c6:4c:ae:04:a5:0f:9f:3c:0d:78:ba:d6:27:a9:0b:
                    f0:c9:33:63:07:1b:04:b4:5d:34:a2:88:4f:29:c4:
                    ed:f2:36:4e:3b:b1:00:b2:69:7e:d0:d0:3e:a1:8c:
                    38:18:a8:62:97:a7:33:44:00:45:f3:62:db:ff:03:
                    f4:ec:a6:6b:3f:5c:2e:47:61:d9:a5:0b:15:47:c3:
                    03:f4:ff:1f:5c:b9:10:59:7c:23:a5:cf:23:c5:3a:
                    62:69:cb:cf:36:eb:69:4f:67:2f:0b:a3:dc:44:2b:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F3:C9:31:84:2B:EE:7E:87:41:42:A0:E0:4C:C6:4C:58:AF:B4:EA
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:c3:72:cf:0f:7e:8f:4c:39:64:7b:4a:74:b3:d6:76:6b:
         93:b1:96:e0:35:70:68:fa:2f:08:df:c7:7c:af:db:bc:5e:97:
         4b:ba:fa:e6:ed:fa:df:0d:9d:85:df:3d:37:15:6a:98:e9:d9:
         68:9c:ef:49:7b:40:a5:96:84:6c:69:40:66:d2:63:66:fd:ea:
         65:dd:a7:cb:4e:e9:91:a3:19:f2:98:a9:aa:65:0a:84:c6:78:
         54:1c:c8:59:1a:b5:d7:3f:5e:34:b3:c3:c4:66:a8:00:bb:b8:
         0c:03:58:ea:bd:b1:5d:c9:25:2c:6f:21:16:d4:e9:bd:ec:78:
         ca:24:63:37:a9:bb:e0:34:eb:b7:0a:04:b7:73:7c:40:8c:3d:
         04:91:08:d6:5c:b3:42:4e:99:f1:4b:1c:3b:27:32:2a:42:38:
         2e:2c:16:e8:99:d5:54:74:f7:3b:5b:af:86:a1:87:8e:00:c5:
         a6:4a:8c:a4:5d:e5:e2:2f:dc:5f:7d:1b:14:c8:2a:e2:1b:19:
         dd:00:a6:07:d8:bb:2f:d7:4b:66:f3:de:eb:c8:52:e3:33:28:
         e6:22:b9:31:dd:3b:17:44:36:b7:52:db:76:cc:50:a1:2f:ef:
         ab:50:88:ad:97:7d:6b:b1:47:b7:dd:a5:e5:bf:31:d8:13:47:
         72:cd:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:32:19 2025 by rpki-client