Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File:                     K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier:          VuPEbOYbr9k/SNNewQgLHq3l2hP81C/SVwfGr+mf4+M=
Subject key identifier:   03:57:CB:CB:6E:E1:82:80:77:4B:42:EB:35:26:1F:B9:BA:21:95:B4
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer:       /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial:       01976CCFD93F795FF560ED95203AF5C47D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number:          94
Signing time:             Sat 14 Jun 2025 05:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:50 +0000
Files and hashes:         1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: 55mifGP9sufU1J5mrWPZ98WcSVz02W2AOtfc9k0PT8U=)
                          2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:d9:3f:79:5f:f5:60:ed:95:20:3a:f5:c4:7d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
        Validity
            Not Before: Jun 14 05:00:50 2025 GMT
            Not After : Jun 15 05:00:50 2025 GMT
        Subject: CN=0357cbcb6ee18280774b42eb35261fb9ba2195b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:00:47:3b:5b:4c:78:8b:b0:87:da:fb:9a:
                    13:9b:f4:56:70:a2:ae:15:e3:c5:9d:a1:7f:68:00:
                    f0:48:b4:15:8f:cc:aa:6a:f4:cc:be:42:5d:82:26:
                    9b:35:62:5c:9c:f4:d6:94:ef:75:c2:2e:80:1a:3c:
                    64:bc:f5:08:4a:c1:99:06:6d:4f:ec:b6:90:61:86:
                    ae:bc:a9:08:0c:14:7a:d4:74:37:ab:89:cd:4d:1c:
                    53:19:47:8a:cc:53:f4:5a:01:65:91:3d:f2:fb:42:
                    b5:93:d7:f9:c7:8e:68:d3:57:db:3b:4c:88:d5:e0:
                    91:72:de:77:97:d9:df:e4:15:f4:67:05:2b:e6:68:
                    b2:4c:33:50:0d:24:23:30:e7:43:69:7a:73:82:ab:
                    20:9b:23:d2:a2:27:a8:d1:e6:62:3b:95:ea:0e:5e:
                    00:ad:c2:21:dd:e9:08:47:91:53:8b:b9:83:3b:2c:
                    ba:7e:9e:98:52:6f:2c:70:a0:12:ee:6b:14:2b:70:
                    85:51:d4:dc:eb:6e:75:8a:0b:43:a3:ce:a0:8a:d5:
                    cb:ed:db:f4:05:ca:54:46:94:86:89:79:9e:e5:50:
                    95:f5:28:a0:7d:2e:1f:62:eb:a2:ce:7b:96:0b:cf:
                    f1:29:6c:ee:c2:3a:f5:9b:8e:58:16:5d:89:0c:2c:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:CB:CB:6E:E1:82:80:77:4B:42:EB:35:26:1F:B9:BA:21:95:B4
            X509v3 Authority Key Identifier:
                keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d8:56:16:df:0a:e7:67:fb:2c:86:ab:15:5d:e3:66:70:e3:
         20:55:1c:57:df:b0:c5:0e:7c:24:04:b4:c5:ed:94:16:67:4f:
         18:c7:9c:6c:95:bc:de:b8:9f:09:e9:8c:d1:cf:66:da:ff:9e:
         1c:c7:e8:cc:9a:18:4e:bf:37:de:88:2a:49:62:8d:e5:db:84:
         54:15:85:28:7d:be:71:ae:1d:94:33:2d:d6:9a:af:05:5e:93:
         e4:c5:f3:56:cb:6e:91:a9:ad:99:f3:fe:76:7d:1b:31:4a:f4:
         eb:cb:5a:17:8e:19:5e:96:96:ab:c5:25:76:84:29:18:85:91:
         dc:3c:e5:26:91:7e:fb:80:61:fc:56:e7:d1:d5:7e:77:98:59:
         21:db:88:74:08:e0:11:28:ec:d4:08:76:32:e9:ed:13:4e:a4:
         a8:d1:f1:8e:71:10:67:36:7b:71:c7:b3:ae:db:06:a8:20:c3:
         a1:3a:bc:7a:21:0b:17:ed:f3:d8:3d:f8:a9:67:71:ce:ca:fd:
         ff:0c:66:4b:04:f5:a8:8d:b8:a5:66:87:9a:70:d0:d2:cc:b7:
         5e:9b:39:d0:5c:4e:d5:74:f1:f9:f7:c7:38:20:d6:dd:52:60:
         00:c7:02:f3:3e:a1:80:a8:1e:0e:7e:55:0d:bb:60:10:8c:c0:
         f8:7a:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:25:33 2025 by rpki-client