Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File:                     kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier:          /Aoo7wIjCqF3q1U1oBMsMQKqaecHbEf1EvNxiP/Ui5I=
Subject key identifier:   06:FA:C2:8D:52:AB:C0:F4:A1:34:60:CC:BD:DF:8D:3B:07:6C:F9:E4
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer:       /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial:       019848F7A187C65E2624C5CD81D996B0C5A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 23:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:44 +0000
Files and hashes:         1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: Ec17zBK0ly9MdwLLDAQ/9FjOHt5K8mdakTG3979ly8k=)
                          2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:a1:87:c6:5e:26:24:c5:cd:81:d9:96:b0:c5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
        Validity
            Not Before: Jul 26 23:00:44 2025 GMT
            Not After : Jul 27 23:00:44 2025 GMT
        Subject: CN=06fac28d52abc0f4a13460ccbddf8d3b076cf9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:a6:89:2a:24:ab:b5:64:c6:93:88:10:2a:
                    47:e1:ad:55:15:28:b6:fd:9b:d7:1e:31:be:d5:6a:
                    c9:40:63:e7:ae:df:7c:1b:50:ac:62:1e:3a:95:c5:
                    89:88:57:b5:8f:9f:93:47:eb:af:13:e5:dc:70:08:
                    2f:5e:c3:60:ed:65:3f:b8:38:46:93:0e:a9:27:9f:
                    55:da:c1:27:fc:6a:92:e9:4e:17:27:98:7f:58:18:
                    ff:54:e6:f0:39:dd:c9:54:11:b1:3e:7f:30:a6:35:
                    50:12:24:3e:a9:39:87:17:42:bc:e0:27:52:9b:55:
                    0e:e9:06:7c:d4:52:b6:58:c2:5f:f0:f2:5a:1d:1b:
                    3a:ed:bc:ff:7a:ad:6b:7b:5a:c8:90:98:20:41:a3:
                    3f:2b:a0:df:c5:59:61:4e:cc:f1:81:4b:46:39:82:
                    83:92:cf:0f:88:37:cc:34:16:47:8f:31:7a:93:c9:
                    62:1b:f2:4a:93:69:cf:a1:71:df:00:ae:b3:ef:fb:
                    96:75:78:c6:c3:5e:05:75:9d:e4:1a:f8:22:dd:06:
                    7b:ba:56:1b:aa:8e:db:c4:f1:5a:86:23:85:04:d2:
                    90:9e:30:ab:75:1a:61:71:62:96:e1:b2:58:6f:cd:
                    5e:b4:0f:2e:82:9c:6e:b9:3a:5e:6f:12:82:a3:b9:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FA:C2:8D:52:AB:C0:F4:A1:34:60:CC:BD:DF:8D:3B:07:6C:F9:E4
            X509v3 Authority Key Identifier:
                keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d9:9b:74:e9:9a:09:d8:49:67:f9:e2:44:fd:a4:41:0e:f8:
         46:de:c0:e7:17:f0:da:1a:dd:a3:53:32:c6:1d:49:db:d3:a3:
         8a:84:4a:ff:1b:43:de:7f:00:3a:7b:b3:1b:da:c1:77:e9:39:
         06:00:de:1f:0f:70:3e:35:5b:bb:97:c6:68:56:d6:f6:ff:9f:
         79:ae:95:67:f9:f6:7d:41:0e:bd:7b:23:b3:50:f8:2f:15:16:
         9a:fe:0b:98:86:d2:58:6d:da:0d:23:88:76:fe:e8:45:48:fa:
         02:f2:c9:9e:b5:3a:0a:9a:61:40:24:9b:ad:3f:cf:5a:50:1f:
         b4:68:a1:e7:10:e3:0c:d2:f9:9d:ec:bc:ca:e9:2f:11:36:dc:
         d6:c5:ff:c0:8a:88:d1:5f:b8:a6:67:2e:60:89:ea:79:d0:23:
         f7:97:59:88:db:8a:cf:91:56:7d:9a:5a:2d:0a:4f:7b:27:e1:
         c8:7e:2f:65:9b:7a:db:cb:be:b0:e9:97:b8:c9:36:20:b6:4b:
         43:c8:5f:95:de:f4:f2:9f:c3:3b:0e:20:45:ec:54:80:a9:80:
         da:4f:20:43:c6:77:a1:b2:bd:c3:4b:91:39:09:11:99:f7:92:
         af:57:99:65:be:20:cd:a1:b5:af:35:e7:46:e9:02:14:51:97:
         3c:cf:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:47:33 2025 by rpki-client