Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File:                     KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier:          ETMO13DhlAMCjx+d7cMY1HlLkqK/j/PfzhWOTRg9b/o=
Subject key identifier:   BC:8B:D7:3C:C5:26:33:93:DB:BE:C4:C4:58:9E:06:34:75:B7:40:36
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer:       /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial:       01974D7BEC13C41785FE7068A471E81CD273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number:          147C
Signing time:             Sun 08 Jun 2025 03:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:56 +0000
Files and hashes:         1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: yXDvvMXTh0dpwKb3yVUFeDgRqj0S1IwK5uatxazuhrc=)
                          2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:ec:13:c4:17:85:fe:70:68:a4:71:e8:1c:d2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
        Validity
            Not Before: Jun  8 03:00:56 2025 GMT
            Not After : Jun  9 03:00:56 2025 GMT
        Subject: CN=bc8bd73cc5263393dbbec4c4589e063475b74036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:8d:d4:2e:e2:0d:5f:3c:69:01:55:84:df:
                    53:8c:75:91:d2:bc:c3:85:8e:ce:b5:8f:1d:47:a3:
                    17:ee:d0:bb:a8:90:fa:76:88:fa:aa:66:0d:72:9d:
                    82:e4:b7:8e:80:8c:d5:09:81:0f:0f:5e:2d:2d:14:
                    74:17:77:87:c9:b0:3d:ab:79:42:54:5b:92:08:81:
                    c7:74:79:01:7a:fa:bf:8c:82:5c:c2:72:1a:32:ce:
                    93:c1:d2:66:2c:e6:c0:07:86:d8:d1:75:f5:ff:29:
                    95:ce:35:56:fb:8f:ee:7e:bf:07:33:95:28:d3:88:
                    d9:c7:1a:8c:c2:cb:e4:e2:04:50:db:0e:0a:ff:d5:
                    3f:d0:c1:55:aa:8a:1b:20:3e:51:4e:ea:98:32:f7:
                    04:6a:8d:8a:f6:4c:3e:30:fd:bc:cd:7e:3c:22:24:
                    53:f0:43:64:3f:19:e6:b1:50:98:a1:83:08:17:7c:
                    e6:9d:44:c1:ac:ad:0d:0f:30:b3:23:87:e2:8b:f4:
                    51:15:ee:c8:8e:cb:4c:32:c2:e3:c0:7d:a7:ab:f3:
                    a2:bf:5f:a7:7a:15:5a:45:29:94:66:98:0a:bb:11:
                    45:42:04:7b:62:5b:06:8d:74:f5:e6:d2:ce:93:9f:
                    4f:f5:31:1a:f8:74:6e:91:3b:8a:8d:2b:e1:51:e9:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8B:D7:3C:C5:26:33:93:DB:BE:C4:C4:58:9E:06:34:75:B7:40:36
            X509v3 Authority Key Identifier:
                keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:a5:96:81:e1:ad:76:c8:06:2b:ff:f2:b5:d7:8d:75:f8:
         bf:d9:72:08:8f:29:39:ff:10:a6:d8:92:f4:43:a9:93:75:70:
         3a:42:ec:de:e2:93:6a:73:69:31:d9:61:10:90:63:74:ef:fa:
         2a:aa:8a:7d:16:50:5d:99:fa:48:bb:f1:1f:08:0d:c4:a0:dc:
         e2:2f:22:06:1e:d0:4c:a5:3b:ed:2d:b3:b3:62:75:8e:7c:7a:
         47:ef:c8:b0:86:a2:6c:b4:b5:a4:63:18:17:ac:d9:5d:b0:2e:
         70:10:de:cd:15:4e:37:38:40:cb:2d:a9:92:ca:39:32:35:d5:
         25:81:6e:0d:dc:0f:da:5c:e4:72:0b:fe:f3:7a:52:ae:a2:cf:
         ff:2f:0c:50:f6:e4:0f:59:d2:6d:ae:12:46:58:98:bc:b2:91:
         4d:bb:dd:e1:3a:48:88:c7:3d:f2:64:ea:39:d9:4f:e0:5c:dd:
         d2:e4:fd:fb:6e:d1:a5:21:ff:6f:da:11:93:16:fd:3a:6a:9d:
         9b:34:0b:8d:1b:6e:66:94:05:0c:92:76:ac:04:d8:bc:92:a9:
         7a:e8:c4:d4:63:3c:f3:80:e4:00:36:67:d2:8a:95:cc:2b:74:
         8f:cc:ba:aa:25:36:96:ee:03:16:28:11:77:f3:c4:b4:42:8a:
         4b:1e:7e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe+wTxBeF/nBopHHoHNJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTVmYmNiY2Y4OGQxYWQ5YjE5ZmM0MmM3YWExMWFkM2Qy
YTdlYTAwHhcNMjUwNjA4MDMwMDU2WhcNMjUwNjA5MDMwMDU2WjAzMTEwLwYDVQQD
EyhiYzhiZDczY2M1MjYzMzkzZGJiZWM0YzQ1ODllMDYzNDc1Yjc0MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+2N1C7iDV88aQFVhN9TjHWR0rzD
hY7OtY8dR6MX7tC7qJD6doj6qmYNcp2C5LeOgIzVCYEPD14tLRR0F3eHybA9q3lC
VFuSCIHHdHkBevq/jIJcwnIaMs6TwdJmLObAB4bY0XX1/ymVzjVW+4/ufr8HM5Uo
04jZxxqMwsvk4gRQ2w4K/9U/0MFVqoobID5RTuqYMvcEao2K9kw+MP28zX48IiRT
8ENkPxnmsVCYoYMIF3zmnUTBrK0NDzCzI4fii/RRFe7IjstMMsLjwH2nq/Oiv1+n
ehVaRSmUZpgKuxFFQgR7YlsGjXT15tLOk59P9TEa+HRukTuKjSvhUemdhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyL1zzFJjOT277ExFieBjR1t0A2MB8GA1UdIwQY
MBaAFCiV+8vPiNGtmxn8QseqEa09Kn6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTIt
NDk2NmIzY2ZjODdkLzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTItNDk2NmIzY2ZjODdk
LzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEulloHh
rXbIBiv/8rXXjXX4v9lyCI8pOf8QptiS9EOpk3VwOkLs3uKTanNpMdlhEJBjdO/6
KqqKfRZQXZn6SLvxHwgNxKDc4i8iBh7QTKU77S2zs2J1jnx6R+/IsIaibLS1pGMY
F6zZXbAucBDezRVONzhAyy2pkso5MjXVJYFuDdwP2lzkcgv+83pSrqLP/y8MUPbk
D1nSba4SRliYvLKRTbvd4TpIiMc98mTqOdlP4Fzd0uT9+27RpSH/b9oRkxb9Omqd
mzQLjRtuZpQFDJJ2rATYvJKpeujE1GM884DkADZn0oqVzCt0j8y6qiU2lu4DFigR
d/PEtEKKSx5+VA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:09 2025 by rpki-client