Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          HA/I8JKM+wHqiDym3Crs+E+ymrXxqzWxwQbkXMRPEZw=
Subject key identifier:   BB:55:F6:8B:8C:31:0F:67:44:1E:F5:C3:AF:12:CC:CC:75:61:B8:17
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       01964D0FEAC747089E688D91EA416BFAC33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          0482
Signing time:             Sat 19 Apr 2025 08:00:10 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:10 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:10 +0000
Files and hashes:         1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
                          2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: hNaVwse4BwfzZTwPILRVGuskzFttIRdTThODB97nVzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:0f:ea:c7:47:08:9e:68:8d:91:ea:41:6b:fa:c3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Apr 19 08:00:10 2025 GMT
            Not After : Apr 20 08:00:10 2025 GMT
        Subject: CN=bb55f68b8c310f67441ef5c3af12cccc7561b817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:92:fd:31:cb:39:a9:9c:e2:7a:1a:21:43:
                    15:e8:88:90:31:83:b3:1a:58:a3:30:93:14:2d:6c:
                    b6:a2:30:77:d7:2a:bd:9a:4f:16:d5:d9:82:14:6b:
                    4a:cf:51:f2:68:a7:73:c4:78:27:06:6a:2f:4d:dd:
                    aa:45:7e:bf:4e:76:fa:d7:10:ad:ae:57:40:c8:43:
                    a4:0b:07:8a:c2:61:12:a6:7f:23:be:39:72:c2:cb:
                    be:d5:98:61:cb:2d:27:0b:8d:99:f3:33:e2:5a:85:
                    c5:01:3b:fe:5b:5e:3f:62:4a:ec:2a:b1:a7:e0:56:
                    fc:93:26:de:5d:4d:1d:bb:2c:41:75:ac:01:f2:8a:
                    a8:ed:1f:83:a1:d7:c6:d7:13:f4:1c:91:78:45:d0:
                    dd:7c:87:c1:dd:fd:1c:75:d3:0e:1d:da:dc:1f:0a:
                    f8:5d:b8:cf:c0:73:bf:b2:fe:10:ea:3e:e5:4c:a4:
                    5f:0d:94:e2:09:d7:3f:66:5b:61:6d:e6:48:aa:61:
                    65:9a:a2:e0:04:e8:12:e5:f5:00:da:6e:df:90:cb:
                    15:a4:19:74:53:f1:78:80:03:5c:c9:9d:ad:21:c7:
                    91:6c:f3:84:48:3e:0c:0c:81:01:4c:88:f4:9c:07:
                    67:79:b5:04:6e:67:6d:36:57:5b:cf:91:bc:46:d4:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:55:F6:8B:8C:31:0F:67:44:1E:F5:C3:AF:12:CC:CC:75:61:B8:17
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:8b:25:f1:07:78:e1:58:b1:f9:f7:cf:5d:ca:d8:54:d8:
         46:ca:9e:d0:c7:56:9d:66:57:af:56:65:4c:b5:97:de:0d:ae:
         f5:af:14:18:07:46:2a:44:2a:bf:13:49:4b:56:cd:af:2e:90:
         ea:c8:75:bf:c9:33:b5:5c:a6:bc:45:72:df:5f:47:84:09:ed:
         7a:5b:89:28:7b:f3:02:35:19:71:1a:79:d1:19:f2:b3:67:d1:
         62:50:f2:37:98:96:30:4e:0f:c0:00:c2:49:3f:d0:29:1f:ae:
         2a:d8:94:0e:da:f4:1c:67:7e:84:97:e3:09:69:32:0e:96:64:
         4b:8c:2d:cb:aa:f8:e1:dc:e8:ec:e0:08:63:b8:b0:5f:ca:c9:
         98:4f:2f:cc:f6:7c:24:cd:2c:ac:3c:f1:d9:ac:a9:34:72:81:
         13:31:12:1a:b3:e6:46:01:b1:79:6b:7a:13:e8:9d:75:24:60:
         a6:76:de:34:97:3c:f4:ae:04:9e:9a:a2:9e:80:0b:56:1e:83:
         26:8d:d8:70:9e:e7:9f:1e:f8:a4:3d:5c:a2:94:50:ea:c7:48:
         8c:df:0e:37:7e:db:48:f2:d2:9f:15:c1:25:66:c7:b5:6a:b9:
         d8:10:6e:b6:3e:f0:bd:40:9d:b0:3c:21:bb:f9:50:4a:98:90:
         91:7b:f4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:07 2025 by rpki-client