Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          vZg16eVUshXK5yYB5hV4nv6B9hwKEWYAeV3mLWLiD3g=
Subject key identifier:   EB:F7:C6:C4:5C:EB:75:8D:10:B8:0D:FD:5E:E6:CD:8C:C5:5C:E0:F1
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       0197477A0E9AFDC52BA83095477846834687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 23:01:10 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:10 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:10 +0000
Files and hashes:         1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
                          2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: A2DezhdXUfD8j6jGtcWvg/jOFicaGHWZBAbOFHp0HuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:7a:0e:9a:fd:c5:2b:a8:30:95:47:78:46:83:46:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Jun  6 23:01:10 2025 GMT
            Not After : Jun  7 23:01:10 2025 GMT
        Subject: CN=ebf7c6c45ceb758d10b80dfd5ee6cd8cc55ce0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:b9:44:c1:73:42:47:4e:0d:76:ae:0a:35:
                    ee:11:6b:c2:a1:fb:29:5b:e8:f5:75:6b:a6:18:f6:
                    93:8d:8f:a1:b6:fe:f7:cd:e1:ab:57:d4:3e:11:9a:
                    07:56:5c:52:d5:9c:b5:9c:3c:8f:47:cc:7b:c0:e0:
                    0b:84:f3:d2:3d:b8:a0:87:f5:50:22:1e:fb:cf:02:
                    b6:ca:16:e3:fd:82:ef:ed:a7:90:b1:1e:39:11:1e:
                    b0:26:de:01:72:0b:1c:a0:d4:ba:cb:9a:36:35:bf:
                    0a:ca:cb:ff:2a:da:2b:ab:e9:6c:22:7f:c5:72:9c:
                    3f:bc:34:93:1d:74:ee:d4:07:68:f9:d3:a3:a9:e4:
                    bb:69:8e:c7:e3:20:b8:9b:7d:d8:82:0f:38:76:f5:
                    dc:2f:7a:e4:1b:5e:30:70:da:9d:41:3a:52:7d:0a:
                    dd:87:d5:71:60:57:c4:3c:fb:4b:57:fe:ab:70:d0:
                    1c:a8:28:5c:ad:75:d3:62:22:a1:6a:5e:14:75:e5:
                    9b:37:61:21:aa:bd:3b:15:57:cd:32:e4:85:76:69:
                    ad:ad:dc:42:dc:81:70:70:9d:bb:75:41:e4:a0:f0:
                    b2:71:91:11:8e:ed:64:68:30:d4:3d:fe:36:1a:e4:
                    17:86:2b:c1:be:73:3b:b7:38:2e:28:d7:88:91:d3:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F7:C6:C4:5C:EB:75:8D:10:B8:0D:FD:5E:E6:CD:8C:C5:5C:E0:F1
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:c8:3e:37:7c:4e:13:bf:1f:b6:04:eb:9e:01:ab:9c:c6:
         f4:44:43:db:3f:8a:f7:0a:7f:0f:de:e5:da:50:0f:6f:26:c4:
         8d:64:67:45:06:91:fb:9d:51:9c:da:bb:b3:63:80:21:ae:d6:
         f6:38:6c:3c:0b:a5:ba:eb:25:e1:fc:da:4f:7e:8f:58:6d:f8:
         46:72:a5:66:e8:af:e8:c3:86:2e:71:da:bc:2a:3e:c2:dc:03:
         57:6d:41:f2:2c:0b:7d:b5:14:35:be:63:06:58:4d:65:f0:2b:
         ae:8a:7e:d1:9e:5b:ab:e1:82:ad:48:0b:14:e5:b7:14:1c:be:
         e0:82:cd:b4:be:d7:c4:82:e7:93:40:0d:9e:03:80:28:65:94:
         64:cb:4f:9a:60:31:1b:be:13:aa:ee:c9:ab:8b:38:be:87:eb:
         32:91:4f:49:6c:df:b8:14:98:14:d5:40:fc:c8:85:45:4f:fa:
         4c:e6:13:74:88:11:03:d0:d1:fa:dc:c5:23:e1:5c:83:bd:5a:
         1a:50:5b:b9:df:97:7e:a3:d6:a5:fa:b5:c0:94:70:85:d7:89:
         64:05:dc:78:c8:ee:05:26:e0:a4:46:04:97:c4:9b:99:40:a5:
         e8:c3:ad:00:13:75:a5:0b:4e:83:d2:9a:ab:67:46:ba:1a:52:
         b0:7b:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:38 2025 by rpki-client