Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          IHgZfD+qz8RyVdh3LqqY97w+XVoNLqPgjMPZJRLqjek=
Subject key identifier:   85:67:ED:1B:FC:6F:FF:80:A4:53:07:F6:9C:F2:F4:8B:D7:3D:14:08
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       0199C6EA554FA99502DCA01E9A8F3A069C3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          1294
Signing time:             Thu 09 Oct 2025 03:01:09 +0000
Manifest this update:     Thu 09 Oct 2025 03:01:09 +0000
Manifest next update:     Fri 10 Oct 2025 03:01:09 +0000
Files and hashes:         1: Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa (hash: LCGI3/5d7XNi/Gu71Peh/rfncJ6J664qZ+UlhSx3wTg=)
                          2: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: bAjlVKFthYyJZIW6tuo9SD4liw62qf5qdtM1SLwIVT8=)
                          3: OJiEpuu19DL0DK8EqfynqGFXkQQ.roa (hash: qdWhWnRWtAIkyoxDYPJOupy3MISxIyqCu/0vET2RQjw=)
                          4: RV4nVFIosillQgPXUi3Rb-YOGqE.roa (hash: 0C9sINAaIPU+479WwDvqzeKATHZb5hKHHasDy8WJ6tA=)
                          5: W5VQv-ze_wds3sZaktK1dB3TlqA.roa (hash: 3Qbtjb177rcscniRobuAC/Kh8GJ/smUC+jFvjdESqGQ=)
                          6: pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa (hash: KbWqEMgAWb6IcUnuvD0+WC5dIqXTlJgmk7uOCLNfK1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c6:ea:55:4f:a9:95:02:dc:a0:1e:9a:8f:3a:06:9c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Oct  9 03:01:09 2025 GMT
            Not After : Oct 10 03:01:09 2025 GMT
        Subject: CN=8567ed1bfc6fff80a45307f69cf2f48bd73d1408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:d2:67:bf:94:5a:50:46:9c:2b:4b:16:ce:
                    5b:dc:e0:d5:70:b7:83:18:b0:42:a1:1b:46:33:b6:
                    a9:2a:bc:20:79:33:e1:f7:c2:a1:9d:30:71:11:f8:
                    00:eb:d8:81:84:0e:18:de:3b:25:07:d8:b1:0e:31:
                    68:f6:42:3a:db:32:b0:ba:3a:17:1a:45:6b:7f:d0:
                    a7:ea:1b:84:53:64:17:70:bc:f0:c3:31:31:00:61:
                    bf:0b:2a:52:57:f0:99:0e:7b:32:05:ad:ec:c4:31:
                    e5:77:0d:93:03:a6:12:81:67:00:57:c8:fb:96:2f:
                    bb:ba:b3:2f:e3:95:83:8d:83:12:7a:5b:63:ec:6b:
                    19:92:95:92:0a:78:35:3f:88:ca:a6:6e:5b:b6:73:
                    4a:a2:35:25:13:29:05:8c:eb:ca:7d:66:0b:99:53:
                    dd:c6:6b:07:fa:46:ee:33:46:5b:97:13:b3:69:08:
                    b8:8c:1b:f8:f9:04:5d:a5:b2:62:bd:db:4e:13:89:
                    bf:89:70:26:26:db:aa:cd:81:d5:e6:7d:c4:01:48:
                    3e:47:49:9c:1d:6a:fe:d9:f5:65:12:4f:8e:24:de:
                    79:1b:4f:6e:b1:60:58:8a:79:4f:9b:c8:ec:9a:49:
                    fe:b1:72:a4:56:98:fd:71:7a:dd:66:b6:64:34:c2:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:67:ED:1B:FC:6F:FF:80:A4:53:07:F6:9C:F2:F4:8B:D7:3D:14:08
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:73:e2:cc:2e:78:2d:62:89:3c:67:b8:e2:7f:cb:66:b8:e4:
         32:85:e4:94:28:ca:84:9f:79:43:53:ee:a9:30:28:f1:49:6a:
         aa:c8:dc:49:30:02:db:d4:db:69:91:67:32:7e:d1:1a:9d:6b:
         25:8d:57:8a:96:cd:8e:93:13:5f:29:71:1d:cf:b2:be:db:17:
         cd:61:ec:51:b5:f0:93:c9:a7:b5:da:57:44:34:1f:82:f7:b1:
         44:06:b4:16:dd:09:bb:8d:ce:dd:e3:e1:86:36:fa:e7:9f:6a:
         14:3d:15:7b:48:34:01:34:ff:16:f3:71:85:c6:e9:5c:b3:42:
         19:0b:d1:a7:53:c5:f0:b9:17:60:56:03:50:ee:1e:5a:52:76:
         fc:23:1d:5a:17:3c:44:ce:eb:77:6d:4d:a4:0c:a8:bf:7c:c2:
         ed:15:99:55:04:66:52:21:34:58:7e:5f:aa:56:cd:4f:79:1f:
         d9:ab:45:2b:15:0d:7a:47:03:2c:8a:a3:13:8b:84:84:f9:dd:
         95:57:8d:ab:05:dc:04:60:56:66:3b:35:36:d1:d3:2b:18:96:
         8b:ba:0e:54:c5:31:ac:b1:e7:b4:94:a7:5b:f6:00:fc:93:ae:
         61:d2:58:00:cb:d8:c3:74:f5:14:6b:c8:47:4d:9b:72:a5:00:
         a3:ce:e7:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnG6lVPqZUC3KAemo86Bpw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl
OGMwNGYwHhcNMjUxMDA5MDMwMTA5WhcNMjUxMDEwMDMwMTA5WjAzMTEwLwYDVQQD
Eyg4NTY3ZWQxYmZjNmZmZjgwYTQ1MzA3ZjY5Y2YyZjQ4YmQ3M2QxNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgLSZ7+UWlBGnCtLFs5b3ODVcLeD
GLBCoRtGM7apKrwgeTPh98KhnTBxEfgA69iBhA4Y3jslB9ixDjFo9kI62zKwujoX
GkVrf9Cn6huEU2QXcLzwwzExAGG/CypSV/CZDnsyBa3sxDHldw2TA6YSgWcAV8j7
li+7urMv45WDjYMSeltj7GsZkpWSCng1P4jKpm5btnNKojUlEykFjOvKfWYLmVPd
xmsH+kbuM0ZblxOzaQi4jBv4+QRdpbJivdtOE4m/iXAmJtuqzYHV5n3EAUg+R0mc
HWr+2fVlEk+OJN55G09usWBYinlPm8jsmkn+sXKkVpj9cXrdZrZkNMLpnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVn7Rv8b/+ApFMH9pzy9IvXPRQIMB8GA1UdIwQY
MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt
NDRmZDA0MzkzZTJiLzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi
LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXPizC54
LWKJPGe44n/LZrjkMoXklCjKhJ95Q1PuqTAo8UlqqsjcSTAC29TbaZFnMn7RGp1r
JY1XipbNjpMTXylxHc+yvtsXzWHsUbXwk8mntdpXRDQfgvexRAa0Ft0Ju43O3ePh
hjb6559qFD0Ve0g0ATT/FvNxhcbpXLNCGQvRp1PF8LkXYFYDUO4eWlJ2/CMdWhc8
RM7rd21NpAyov3zC7RWZVQRmUiE0WH5fqlbNT3kf2atFKxUNekcDLIqjE4uEhPnd
lVeNqwXcBGBWZjs1NtHTKxiWi7oOVMUxrLHntJSnW/YA/JOuYdJYAMvYw3T1FGvI
R02bcqUAo87nKw==
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:21:32 2025 by rpki-client