Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File:                     kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier:          4h6j0nQfhq3k2XhirZXD/6mfOlaK5zLYa8CbfKp8ggY=
Subject key identifier:   F1:49:2F:8B:2A:75:7E:A5:B7:53:85:DA:DA:0D:B6:43:1B:5E:2C:69
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer:       /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial:       01975CB78DD8081AC67DF042381EBA010299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number:          05A3
Signing time:             Wed 11 Jun 2025 02:00:22 +0000
Manifest this update:     Wed 11 Jun 2025 02:00:22 +0000
Manifest next update:     Thu 12 Jun 2025 02:00:22 +0000
Files and hashes:         1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
                          2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: d+S619su5sBm4vAToVo5IXdncLvWV870jOmGyQZrvmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b7:8d:d8:08:1a:c6:7d:f0:42:38:1e:ba:01:02:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
        Validity
            Not Before: Jun 11 02:00:22 2025 GMT
            Not After : Jun 12 02:00:22 2025 GMT
        Subject: CN=f1492f8b2a757ea5b75385dada0db6431b5e2c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:74:57:fd:73:f1:bf:a5:9d:e4:ed:11:b1:
                    3c:9c:1b:8b:69:70:d4:5d:9f:3c:2f:51:b1:68:7d:
                    66:78:a1:20:f4:30:d3:e7:41:57:e6:91:28:ab:b8:
                    86:8b:83:4d:83:3f:09:95:87:e5:07:2c:55:3b:24:
                    c9:83:a0:0e:1c:14:9b:87:a0:76:ae:19:b4:e4:99:
                    e8:b6:62:6f:f1:19:a7:ba:63:60:14:35:0c:0d:f9:
                    6d:69:ad:30:12:97:fb:d8:89:71:f7:cf:68:bf:9c:
                    53:d1:58:7d:95:5b:f9:48:a8:83:b9:ac:d6:6f:d4:
                    62:49:2f:e3:9d:15:dc:e7:3f:06:61:e3:e5:ba:6a:
                    d5:13:df:4f:33:ba:ab:da:f3:ae:66:99:cd:00:df:
                    16:7f:a1:86:e3:b8:90:7c:10:fe:b7:c6:56:3c:7c:
                    b4:9c:a6:21:b3:95:3d:55:97:f5:c6:94:24:50:d6:
                    1c:e2:b4:af:2b:1b:6a:8e:c8:51:fe:d4:ae:23:02:
                    db:ce:dd:26:f2:8c:f5:a3:90:72:82:02:07:0d:51:
                    a1:74:cd:3f:5f:37:1f:95:d5:e9:64:05:eb:a5:d0:
                    62:89:e0:85:62:ec:71:ad:f7:cd:3d:2a:b2:93:74:
                    62:96:67:ff:48:5b:dd:b3:92:93:e5:1e:cf:0d:32:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:49:2F:8B:2A:75:7E:A5:B7:53:85:DA:DA:0D:B6:43:1B:5E:2C:69
            X509v3 Authority Key Identifier:
                keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:80:c1:f4:90:ba:90:66:d4:2b:0d:74:af:da:96:37:86:7c:
         0a:ae:82:fa:1f:1f:13:f9:dd:ff:dd:2c:43:5a:80:1a:62:98:
         f1:24:08:c0:56:96:90:e5:af:33:7e:77:f0:e0:d6:33:e4:5f:
         31:c0:d0:20:b8:39:5b:84:37:97:0e:5f:4c:92:d6:38:4c:0f:
         49:10:d8:07:5c:e2:af:ee:68:a0:7a:c2:85:02:5d:20:0a:8b:
         a5:19:9a:f5:ad:ca:da:6e:51:c6:eb:d2:ff:5a:da:a8:18:23:
         de:58:ba:14:6d:c3:44:8e:b1:25:ee:b5:2b:2c:64:a0:63:ef:
         b9:d9:aa:f1:c6:a6:d5:c5:c6:48:88:d3:6d:91:ba:a2:cd:fa:
         c8:9d:ea:b4:9c:67:98:ab:79:f8:0e:da:d7:34:38:21:dd:a7:
         3a:5f:c4:b2:d5:be:f6:e1:e4:4d:7a:26:7a:21:fe:81:8c:7b:
         62:ca:66:8e:69:55:e0:58:2c:f0:0f:34:34:63:68:42:7d:27:
         e8:50:bc:1d:67:a6:f5:ae:96:8a:2d:50:65:34:5f:40:9e:a5:
         f8:0a:8c:ad:94:5c:f3:bf:5f:5b:52:3b:f1:20:17:b5:f3:7d:
         e3:ae:05:6f:37:65:ab:6e:8e:ab:fb:99:cc:3b:4f:19:1c:33:
         bc:1f:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:26:27 2025 by rpki-client