Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File:                     R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier:          LxtnV8lVhLa3yDZ/5M5iMCfxJcEzNMtyXbyZ8U3TYtY=
Subject key identifier:   BC:48:78:27:1C:B8:5D:E6:81:09:03:92:62:F0:52:83:9E:7D:1F:32
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer:       /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial:       0197617045C0CC572A0EFBD8ED559BE0F737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number:          1589
Signing time:             Thu 12 Jun 2025 00:00:37 +0000
Manifest this update:     Thu 12 Jun 2025 00:00:37 +0000
Manifest next update:     Fri 13 Jun 2025 00:00:37 +0000
Files and hashes:         1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
                          2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: O/Hu2sbn+d1ESqkJ/f6U4YQ/jHSIXeV4wJEDp4OG1T0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:70:45:c0:cc:57:2a:0e:fb:d8:ed:55:9b:e0:f7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
        Validity
            Not Before: Jun 12 00:00:37 2025 GMT
            Not After : Jun 13 00:00:37 2025 GMT
        Subject: CN=bc4878271cb85de68109039262f052839e7d1f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:11:8a:d2:79:63:df:6a:dc:70:9d:b3:45:4d:
                    ca:b9:30:7a:66:a6:76:c6:2f:b7:2b:75:8f:c5:dc:
                    81:87:e3:8a:63:2e:9c:6c:69:b5:ec:a9:b5:f0:bb:
                    b9:43:41:3c:cf:40:8c:65:09:15:ba:fc:de:b5:61:
                    3e:2f:07:67:73:d5:d5:a8:f3:9e:1d:f8:5a:a8:6b:
                    44:74:91:d2:7e:89:b2:d8:a2:c3:21:d1:01:c5:79:
                    27:89:d6:f6:fd:1c:b4:4a:31:b8:98:7e:77:9a:14:
                    05:e0:4d:19:9d:96:ee:0b:6d:63:6a:dc:3f:af:15:
                    fa:40:cc:0d:30:23:b3:d0:94:da:d6:00:ef:77:e9:
                    07:1a:43:0b:71:77:76:86:cc:57:e7:8d:21:e2:7b:
                    89:e7:49:06:42:cd:4c:69:d0:59:ee:ba:3e:59:3f:
                    11:32:c5:2a:d4:1f:2a:b8:d3:8e:9a:33:cc:ae:74:
                    65:3c:b6:98:94:78:a7:30:31:28:24:9c:57:dd:4c:
                    8f:8f:c5:fd:c6:72:14:d8:e5:1e:f4:84:c7:ab:65:
                    d2:2b:39:b2:df:89:46:97:f0:2a:08:b7:8f:f8:40:
                    ac:e6:a8:76:14:ae:49:c3:f0:8a:49:62:b2:b6:40:
                    88:30:f0:2f:88:e7:8f:2d:fb:67:35:fd:29:c8:8a:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:48:78:27:1C:B8:5D:E6:81:09:03:92:62:F0:52:83:9E:7D:1F:32
            X509v3 Authority Key Identifier:
                keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:04:88:45:ed:6a:71:c3:77:a7:45:6a:44:76:4b:74:a2:e7:
         af:8d:1d:9c:7d:21:61:ce:82:cc:1e:1f:c7:4c:82:e2:3b:99:
         d3:31:63:8e:e3:9d:a1:95:9a:98:8b:9e:f2:7e:1e:26:fe:c0:
         66:ab:69:4b:26:8e:5d:33:74:06:80:9a:53:b5:3d:4d:6d:63:
         7d:98:71:31:a4:2a:15:a1:45:78:51:4e:24:a5:96:54:7f:f1:
         8f:c3:dc:34:9e:5e:b2:9a:1e:df:14:22:7a:80:07:16:50:15:
         da:e1:14:6d:ed:d0:31:bd:d8:95:17:3d:54:a2:0a:17:11:0a:
         56:c9:53:bd:2e:4e:91:c8:ae:63:33:14:6e:b4:2f:65:04:2e:
         e1:6a:10:ec:2c:eb:45:7a:de:05:2f:d3:f7:f5:e1:ca:f5:91:
         c9:7c:cd:9b:44:c4:2f:8e:5f:c6:18:ae:ee:1a:43:65:de:32:
         9e:ce:6e:8b:72:5c:e4:45:b2:b0:0c:73:a7:b0:8f:d7:c7:8d:
         cb:ef:58:b6:ba:e1:c7:32:28:2e:74:2a:1f:dc:cf:fe:d0:09:
         45:ad:fc:15:f3:39:7e:d4:74:12:ae:45:8e:e2:85:b0:be:00:
         84:17:8d:f4:10:2a:94:21:15:9e:14:47:3d:7a:f9:d2:f8:91:
         99:17:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:33:50 2025 by rpki-client