Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File:                     K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier:          EQdTM28ro4kfLwVk9DJj/H/HctOL5wUBPd8FB6Ded64=
Subject key identifier:   F6:67:6E:CC:77:9F:CA:3F:4A:40:67:C5:12:2B:8B:02:33:81:FD:75
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer:       /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial:       01974931A24B0B7AA719B6720AEFDE51028A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 07:01:18 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:18 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:18 +0000
Files and hashes:         1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: eo7VEUN2Z5F+tZv32pA2aWUzDQmpGhERdOtXFIzQ6GE=)
                          2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:a2:4b:0b:7a:a7:19:b6:72:0a:ef:de:51:02:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
        Validity
            Not Before: Jun  7 07:01:18 2025 GMT
            Not After : Jun  8 07:01:18 2025 GMT
        Subject: CN=f6676ecc779fca3f4a4067c5122b8b023381fd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a6:7a:40:d8:d6:36:02:58:00:dd:ca:a7:9a:
                    3d:f5:67:77:a8:38:44:17:c7:3c:14:c5:d7:21:32:
                    ed:1c:87:97:90:f9:8c:df:8d:0d:1c:a7:f5:ef:30:
                    5c:4b:15:0b:18:5d:ee:0a:36:e3:aa:1d:b5:bb:a4:
                    b6:a1:da:6d:ab:98:66:d9:96:b7:6e:79:03:46:25:
                    27:d6:45:25:24:f9:5d:61:94:81:d4:20:0e:a6:db:
                    cf:de:1e:db:a3:2e:a8:57:7e:86:e8:64:8e:24:16:
                    e9:37:7d:1d:64:e1:9f:01:9d:8e:aa:ff:4e:9e:19:
                    14:4d:38:b0:f6:08:b8:54:fb:53:b6:35:93:e0:80:
                    62:19:a9:60:81:9f:e7:2c:c9:2b:95:48:ff:22:4a:
                    1b:9e:7e:97:56:74:41:97:a3:cf:40:62:3d:3e:b4:
                    e7:c1:cf:f7:37:09:d4:69:49:67:fa:d2:dc:0a:36:
                    28:3b:17:33:c3:4f:2d:98:a2:f5:8e:55:ef:77:06:
                    f6:84:bf:a4:36:98:59:fb:50:fb:97:c4:cf:18:27:
                    b4:b6:b7:b9:f8:68:23:e8:52:53:37:40:8b:72:27:
                    8f:bc:36:8c:70:50:6e:28:93:41:da:d0:e8:b5:01:
                    39:10:22:7a:dd:e7:ae:d9:d7:61:da:6e:bf:0f:76:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:67:6E:CC:77:9F:CA:3F:4A:40:67:C5:12:2B:8B:02:33:81:FD:75
            X509v3 Authority Key Identifier:
                keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9f:11:29:c7:53:53:ac:2d:3a:0e:b4:37:d8:71:bf:44:54:
         23:c4:de:9a:b2:6f:06:be:f5:c4:d1:1e:80:62:e1:dc:2e:07:
         64:7e:10:9e:7f:8f:7d:a3:89:17:6b:4d:83:dc:17:66:bf:db:
         cb:e8:0e:de:43:4a:9f:73:8c:58:e1:9a:da:dd:bf:81:1c:3b:
         d9:fa:7e:bd:34:b6:e3:33:93:8c:50:7a:40:98:27:9d:58:55:
         d0:a7:33:a9:64:55:88:c8:8c:f9:bf:0f:79:b1:9d:6d:1c:51:
         fc:b8:de:6f:af:cd:bf:69:5f:1a:78:2c:5f:cc:aa:34:d7:5d:
         2f:92:34:e9:fa:ad:92:79:b7:39:ed:ca:c7:48:f8:6c:9f:be:
         ad:01:31:cb:21:ed:44:6a:6d:84:61:60:8a:2d:36:c7:37:df:
         b7:48:bc:6b:ef:fc:71:97:b1:b6:bf:d5:65:76:2d:db:cf:20:
         b9:84:db:02:bc:64:64:94:b0:cd:92:a2:d3:a7:18:3d:53:4e:
         90:c7:32:93:61:e9:33:6d:cd:96:8f:e8:e4:8f:1c:17:bb:e0:
         b5:d7:f8:9c:a9:51:2d:75:c8:4a:43:5b:5d:54:bf:7c:b7:51:
         b0:88:66:a0:12:3b:59:6f:2d:f9:5e:af:45:78:41:5e:7b:35:
         d4:8a:1f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:38 2025 by rpki-client