Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File:                     K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier:          N8HLX+EbqgA6Hc6ntOPq5MAH2/wO73F+5982wF+DYHw=
Subject key identifier:   59:7F:7D:60:B6:27:F5:4B:7C:13:5C:23:C2:82:D3:6E:2E:39:DF:E8
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer:       /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial:       01974BFB55649395953BCA0C27803D4EFB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number:          0506
Signing time:             Sat 07 Jun 2025 20:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:51 +0000
Files and hashes:         1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
                          2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: GjoPx68+WP/cLDRVAKrz0SjrwWfPsYd8mxP1DR8PGVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:55:64:93:95:95:3b:ca:0c:27:80:3d:4e:fb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
        Validity
            Not Before: Jun  7 20:00:51 2025 GMT
            Not After : Jun  8 20:00:51 2025 GMT
        Subject: CN=597f7d60b627f54b7c135c23c282d36e2e39dfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:7f:78:03:7a:2b:17:4d:59:9c:7f:53:df:
                    41:5e:65:c0:ff:8e:2b:95:45:dc:b3:3f:0c:7c:43:
                    ef:e2:74:74:9a:10:82:1e:06:3e:1c:39:dc:5e:6d:
                    93:ad:9c:81:d5:f3:62:50:01:76:d8:a5:8e:62:28:
                    a5:58:20:38:72:40:30:71:2c:d1:12:f7:93:4b:78:
                    69:4c:03:28:b8:9c:bc:93:52:d6:24:25:c7:5f:6a:
                    79:f7:e6:c3:e1:53:36:c3:e7:a4:99:b7:b1:73:3b:
                    c6:09:27:1b:9c:87:b1:db:41:70:ae:ee:bd:f4:ba:
                    cd:27:7b:9d:71:25:95:7c:8e:c7:13:67:06:21:c3:
                    2d:38:b4:35:e6:82:6b:7b:58:0c:bf:9a:43:dd:8e:
                    d0:a6:38:19:f6:b3:ae:c8:6d:90:85:3d:cf:56:b8:
                    05:a8:45:76:67:3b:35:b3:b8:1b:ec:6b:70:14:ea:
                    02:9b:34:af:ae:98:c9:9e:96:63:8e:49:a0:da:7c:
                    66:fb:e3:fb:66:1c:76:38:53:d2:72:3d:4e:b7:cd:
                    ca:b9:3b:87:df:8a:25:e7:ad:74:7d:4b:82:76:64:
                    c2:63:06:88:37:89:f7:50:22:94:0b:2a:46:e1:17:
                    4f:48:3a:56:d0:fb:d5:d1:8f:86:d3:8e:d4:a7:c1:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7F:7D:60:B6:27:F5:4B:7C:13:5C:23:C2:82:D3:6E:2E:39:DF:E8
            X509v3 Authority Key Identifier:
                keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:53:fd:42:99:dc:e6:f8:db:39:f7:b9:2a:65:62:64:09:a4:
         cf:78:10:17:19:64:76:da:fc:54:0f:82:3d:97:c0:4b:3a:78:
         4c:a0:55:a8:04:24:d8:d5:28:c3:98:22:74:d8:f1:fa:c5:20:
         d4:fa:d0:7c:a2:de:41:ed:43:bb:25:67:37:e6:7b:dd:b3:01:
         8f:c6:6e:4b:4d:b6:78:77:cc:92:f6:04:70:6e:04:bf:be:7e:
         14:2e:63:d1:1e:3c:52:9a:d8:63:d7:e4:63:6d:85:37:33:6c:
         0f:ca:1e:49:e2:38:5e:8e:8d:a1:1c:11:3a:ba:c4:49:86:45:
         f0:75:af:82:77:c6:df:ce:5f:33:fd:e6:90:d7:a1:48:03:ec:
         92:04:d5:ff:5a:31:1c:b6:4b:e5:e4:34:74:07:28:be:de:9a:
         6c:c6:50:fa:91:b6:5c:3b:61:f8:bf:96:c0:4d:e0:09:ac:55:
         a1:c6:70:3c:ea:a7:1c:92:f0:98:27:a8:04:ce:56:df:fe:71:
         74:83:e2:7d:68:c7:df:d5:6c:44:98:05:aa:e9:a3:2b:14:7d:
         fb:d9:9a:ac:b2:40:34:02:bb:23:ae:30:6b:2e:07:7a:14:12:
         11:45:4a:4e:c6:70:f9:f9:5a:8f:54:d2:f0:f9:e0:05:33:a0:
         3a:92:cf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:07 2025 by rpki-client