Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File:                     K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier:          U0t/lGTgvd3bNZqqykuqj104pHHyyW6CuxJAGqE2c3A=
Subject key identifier:   B6:6F:5C:A9:8D:C5:AC:96:0A:69:7F:67:FE:4E:6A:6C:D9:C0:78:EF
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer:       /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial:       01975B6E5B99A87E230B05886361B742DEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number:          8B
Signing time:             Tue 10 Jun 2025 20:00:48 +0000
Manifest this update:     Tue 10 Jun 2025 20:00:48 +0000
Manifest next update:     Wed 11 Jun 2025 20:00:48 +0000
Files and hashes:         1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: NR6Z09Mg1QWqjP1xEg0zPzeuch28oWr0pCEB8GFHnho=)
                          2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:6e:5b:99:a8:7e:23:0b:05:88:63:61:b7:42:de:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
        Validity
            Not Before: Jun 10 20:00:48 2025 GMT
            Not After : Jun 11 20:00:48 2025 GMT
        Subject: CN=b66f5ca98dc5ac960a697f67fe4e6a6cd9c078ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:02:04:9d:04:e2:0d:59:02:1f:63:d8:eb:
                    ec:b2:a9:7b:86:24:65:f3:3e:91:f3:d7:c2:0d:66:
                    86:cb:69:ff:dc:ec:17:ef:32:20:32:07:d8:48:92:
                    74:24:ea:dc:ca:a1:c9:72:86:c1:b6:49:42:ee:2b:
                    e3:37:23:39:56:50:22:a5:33:eb:32:6e:2b:a0:a1:
                    13:cf:4b:22:a8:21:4b:2e:42:03:7c:56:88:d5:e9:
                    6e:08:33:dc:cc:f7:74:57:54:36:4b:13:bb:22:4d:
                    c7:d3:31:13:fc:d3:49:8d:9d:ec:15:d6:32:cc:6c:
                    36:3e:27:cf:b7:a3:1c:d4:72:e6:10:7a:0b:47:14:
                    70:d7:05:b9:b8:5f:ce:45:6a:82:72:3c:b8:c6:7d:
                    9a:6a:ea:00:b3:0f:93:b0:19:a3:98:2a:39:f3:5c:
                    81:aa:c1:fc:ab:49:ff:e8:89:ea:8b:4c:0e:b7:25:
                    ec:1d:b7:19:de:34:f4:7a:3e:af:58:97:82:ed:6c:
                    70:4a:00:4b:90:14:7c:6e:97:ab:69:4d:57:09:33:
                    29:e0:01:a9:7a:c8:49:4f:0d:22:d3:f2:54:4a:09:
                    68:74:35:87:c9:6c:e2:ab:2c:b1:35:57:84:76:80:
                    a3:36:1b:64:d1:40:ac:6b:59:ef:ae:7b:8a:f8:6e:
                    60:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:5C:A9:8D:C5:AC:96:0A:69:7F:67:FE:4E:6A:6C:D9:C0:78:EF
            X509v3 Authority Key Identifier:
                keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:63:a5:8f:a9:c1:66:82:49:cd:30:8a:c3:54:fd:c5:ac:
         1d:21:25:d4:ba:42:e2:c1:47:71:85:13:9f:0a:92:ea:c1:7a:
         f1:25:32:95:33:3b:08:18:9e:98:d8:6d:07:b6:1f:77:d6:16:
         6b:80:0d:d8:9f:e0:1f:e0:55:d0:4f:62:b0:df:9e:1e:62:d1:
         f8:85:28:78:2a:2e:cd:e2:4b:68:b7:61:dc:b4:50:49:46:9a:
         dd:49:9a:ff:10:19:33:6b:a8:ab:84:20:37:f2:9e:21:88:fe:
         fe:f8:c0:f3:e9:dd:de:e2:73:02:d3:fc:1f:5a:ed:ed:d6:ae:
         81:7b:60:14:5d:74:0f:c9:14:a5:18:eb:ad:11:9c:6c:dc:3b:
         34:74:89:6e:72:86:e9:4c:c1:26:9c:80:53:9f:e1:11:c1:d2:
         e8:95:7e:12:e0:e8:99:8b:7b:2b:aa:03:1c:f4:91:f9:b5:33:
         6b:0c:e6:c4:69:31:8d:8e:58:d5:43:f9:9c:0d:62:71:11:43:
         9d:ce:d4:fa:0a:cd:ba:95:be:95:06:b5:f2:dc:f9:96:d0:a5:
         37:90:8b:1d:34:81:37:6a:6b:d5:b3:bd:3b:5f:64:7c:1e:90:
         fe:c3:76:b3:5a:14:91:c0:77:1c:1e:e6:3e:ec:56:1a:c9:1c:
         5a:44:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:32:14 2025 by rpki-client