Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File:                     kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier:          r6JP7yvrkBPerr5YWnPd8eGUH2DR59CGpKciz6K/iHs=
Subject key identifier:   B5:48:0E:3E:15:9E:70:13:09:98:6F:CD:EC:F1:6A:F3:34:8A:5D:E6
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer:       /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial:       01974CD7660D48050FA246584A8FB028D909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number:          0E1B
Signing time:             Sun 08 Jun 2025 00:01:14 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:14 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:14 +0000
Files and hashes:         1: 9Bw4s7L1PZyJ0cmK8dHggvZkyc8.roa (hash: k8G5zSf+pp8Di/1i1Rk8bBBXkqYoG95ba1/+ZDXAe1E=)
                          2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: 3XwiJGc3oKrE6Y07QCgGvmLHpkHG3vbxw72hysmf10c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:66:0d:48:05:0f:a2:46:58:4a:8f:b0:28:d9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
        Validity
            Not Before: Jun  8 00:01:14 2025 GMT
            Not After : Jun  9 00:01:14 2025 GMT
        Subject: CN=b5480e3e159e701309986fcdecf16af3348a5de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:89:3d:1a:a9:6d:cf:3c:e6:6e:6e:99:6a:
                    ee:70:31:15:69:16:51:b6:53:ce:d3:4c:db:c9:cf:
                    a1:bb:b3:0a:d9:2d:c1:37:2a:2e:2d:64:61:aa:fe:
                    82:23:04:1a:ab:90:39:23:67:72:f5:f4:a6:3b:67:
                    85:1e:bd:b1:50:c5:18:ba:e8:89:2a:a9:28:98:06:
                    14:40:6d:71:55:95:cd:15:d9:42:07:eb:ee:88:8b:
                    76:35:7f:3d:7c:40:ec:e1:fb:76:6b:26:da:fe:88:
                    59:a6:1b:64:41:eb:6a:50:2a:1c:83:41:28:7f:6b:
                    fa:af:30:69:30:95:19:bd:50:b7:91:c6:4f:66:8a:
                    58:82:9b:f0:c1:39:57:d4:71:87:7a:7d:6d:95:fe:
                    d1:e5:22:f6:36:f6:9f:f0:45:9c:58:ed:6d:d0:02:
                    5d:dd:94:ec:03:87:ba:46:6c:85:be:15:11:6d:4d:
                    d4:17:c5:ea:dc:08:ad:2f:f2:99:11:fc:65:2f:77:
                    fb:e0:9a:d1:af:d9:fb:34:76:34:5c:b6:4a:71:37:
                    ce:90:e0:9d:7b:09:32:70:b2:da:e3:04:a0:79:54:
                    aa:5c:f1:6a:c5:5b:eb:ec:4a:10:af:49:39:e2:08:
                    9b:32:37:ad:da:f1:bc:bc:67:dc:ac:59:64:f3:68:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:48:0E:3E:15:9E:70:13:09:98:6F:CD:EC:F1:6A:F3:34:8A:5D:E6
            X509v3 Authority Key Identifier:
                keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fd:8e:ab:2c:d7:11:35:74:fa:21:e7:3f:1a:ad:be:2e:46:
         37:02:05:fc:42:28:be:58:3b:7e:89:99:02:7b:d5:c0:42:35:
         ce:f1:10:af:ae:41:13:e9:30:36:b6:77:4e:22:f2:79:c9:84:
         16:4c:5f:6a:69:7b:f0:6d:22:df:a8:27:eb:b1:55:f5:4f:a8:
         e8:8e:ce:23:a9:85:f9:66:8a:7d:a5:a2:0f:6b:af:06:6a:65:
         4d:9b:31:d5:24:48:85:ab:0c:64:8e:5f:a4:40:0f:ad:7e:c1:
         d2:32:a3:85:91:58:65:f1:e1:c2:b3:6f:74:1d:aa:2b:9a:48:
         a2:56:ea:dc:3b:b7:43:9e:ca:89:e9:92:75:5b:57:4e:a7:95:
         53:66:07:68:fb:17:1e:46:a3:6c:f6:0e:16:bd:7d:cc:87:4a:
         9c:31:97:a5:57:7c:2b:b6:e4:2d:73:b9:c6:d7:5d:25:ea:5b:
         73:09:41:60:68:70:d1:18:1c:09:0a:9e:d8:bc:3f:8a:e8:2f:
         41:29:c9:c5:7e:83:dd:57:ea:57:7d:21:7d:06:25:ba:aa:04:
         21:23:f6:b8:eb:01:36:06:ef:f9:1e:11:3c:af:e9:5f:2c:36:
         cd:0a:39:ee:9a:27:3d:4b:1a:8a:83:15:2e:13:68:c2:70:25:
         29:cd:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:52 2025 by rpki-client