Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File:                     kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier:          pp/eEDwsh2zDWJlawrTh+pP6E7cH2Z92k7zcNAT9lyY=
Subject key identifier:   C7:2F:48:B5:E7:23:09:3D:70:77:01:44:83:E1:6A:85:75:E4:2F:01
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer:       /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial:       01975C80B41C638384454CB6A485C98E7A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number:          029F
Signing time:             Wed 11 Jun 2025 01:00:27 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:27 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:27 +0000
Files and hashes:         1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: XBQe7SsrDSUaK8mVF8qAq7js8n65c503cfpTR5EjnKI=)
                          2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:80:b4:1c:63:83:84:45:4c:b6:a4:85:c9:8e:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
        Validity
            Not Before: Jun 11 01:00:27 2025 GMT
            Not After : Jun 12 01:00:27 2025 GMT
        Subject: CN=c72f48b5e723093d7077014483e16a8575e42f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:ba:00:c2:16:90:aa:25:03:9f:a2:9f:c1:
                    a6:a3:a2:df:5d:cf:4f:f8:c5:7d:53:f3:b6:7d:8a:
                    c0:40:22:75:7f:e2:79:55:b3:c7:7b:be:65:34:41:
                    7e:19:94:17:09:bc:c7:59:38:fb:65:53:13:22:21:
                    df:d4:f4:ac:23:be:88:1d:19:62:ea:85:21:17:a1:
                    fb:ac:90:c2:3b:fa:35:99:aa:b5:3e:a4:29:e6:ad:
                    47:65:b1:44:1f:a5:68:0e:b4:da:b8:fc:43:75:c4:
                    07:63:0f:87:4d:c4:a1:02:0f:54:2a:f4:24:c2:15:
                    1a:f4:93:d3:4d:92:39:90:5d:d8:ee:ff:1d:c0:30:
                    ee:aa:75:7d:d5:a1:b5:65:44:aa:42:9d:d6:b5:dd:
                    ea:93:b4:18:58:4b:82:3d:54:66:06:a3:79:15:5a:
                    d6:e0:df:9e:69:56:07:e0:13:98:ad:16:af:ec:48:
                    d8:58:c2:76:16:d0:ca:09:e1:ac:06:04:bb:e0:ce:
                    d8:ad:2c:a6:0f:b5:cb:5a:f8:84:e8:fb:f1:3e:af:
                    7d:f8:be:51:b0:be:58:4f:65:8e:63:c7:c4:10:da:
                    8b:58:87:4f:57:15:19:e5:b9:e7:6c:3f:f0:09:b7:
                    96:bc:2e:ce:4d:f5:14:5e:9e:ca:3d:9d:4f:18:f4:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2F:48:B5:E7:23:09:3D:70:77:01:44:83:E1:6A:85:75:E4:2F:01
            X509v3 Authority Key Identifier:
                keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f5:60:1b:e2:f3:d8:e9:22:3f:b9:43:ff:86:fb:d7:12:65:
         d7:30:45:48:86:5d:55:2a:93:e0:5a:b1:e2:f1:88:3d:e1:1b:
         9c:6d:33:e3:52:3e:bd:3d:27:c2:39:34:08:1d:8f:44:ca:ae:
         1d:fa:50:fb:70:d8:b8:dd:2b:a1:65:59:a0:6c:5c:93:09:20:
         6d:de:bf:b6:c2:dd:21:ec:12:9d:fa:80:58:5d:e7:90:9f:1b:
         f1:2a:3a:24:7a:79:6f:e4:31:96:0a:21:c6:4f:81:91:72:0e:
         2e:47:c5:df:08:05:04:79:ea:d5:0a:f4:a4:3b:3e:be:90:2e:
         49:06:03:1f:30:89:37:16:1c:1a:6a:ca:da:76:03:cb:f1:2d:
         cb:71:74:2e:63:3a:51:5c:86:74:b5:0a:f9:b8:c9:ca:f1:6e:
         3f:8c:d6:fa:03:88:cc:52:17:d1:95:82:c8:39:3d:c4:8d:b9:
         23:4b:38:aa:fb:88:b6:88:19:7e:df:68:34:b7:6b:d2:db:a3:
         c6:e5:7f:32:41:da:b5:32:48:79:00:6d:19:9e:a3:4d:44:a8:
         d9:4c:28:fb:30:ff:0e:e8:d6:09:6c:6b:e6:f8:a9:9b:4d:98:
         da:39:cb:02:cd:6d:57:3c:39:f3:9c:dd:6b:81:11:a5:38:9d:
         1c:32:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:37:52 2025 by rpki-client