Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File:                     K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier:          C5cQ06jkoNFPm9CFiqKG3jU4OggH6NVdkUWHkwadG0E=
Subject key identifier:   B1:53:82:39:3E:4F:0B:99:3C:C7:91:78:94:49:53:88:D8:44:F8:BB
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       01989FA868CE924DFA78D018C221D3335C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number:          07EA
Signing time:             Tue 12 Aug 2025 19:01:10 +0000
Manifest this update:     Tue 12 Aug 2025 19:01:10 +0000
Manifest next update:     Wed 13 Aug 2025 19:01:10 +0000
Files and hashes:         1: Jm_xi_s9C4HueOQpadAteqzC5iI.roa (hash: nbZ24fnK71pZ0lURFKjMf67hub71ZiuhlPq0UEHzTVw=)
                          2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: vE+fs3+df65JFlGzDlW1UUJ2jBjF5p3fhR40MvSwlOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:a8:68:ce:92:4d:fa:78:d0:18:c2:21:d3:33:5c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Aug 12 19:01:10 2025 GMT
            Not After : Aug 13 19:01:10 2025 GMT
        Subject: CN=b15382393e4f0b993cc7917894495388d844f8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:7d:b1:2a:c6:f1:60:a4:be:56:92:bf:e6:
                    3f:28:d1:29:47:9f:e0:bd:57:04:43:b4:a4:de:57:
                    35:0d:a7:60:2f:10:c8:5b:60:f2:33:3d:9a:1b:b9:
                    ec:87:4f:11:7e:9f:68:82:e5:37:a0:d5:62:cf:05:
                    34:d1:41:0c:3d:94:68:ba:f8:2c:7e:33:00:12:ee:
                    42:52:8c:15:db:8e:d3:9b:08:84:34:42:04:ce:c7:
                    b2:33:2f:26:68:f1:17:1d:60:3d:ee:e8:78:33:10:
                    03:79:9f:b0:69:b5:81:85:ff:2e:a8:35:7d:40:84:
                    e5:b2:c7:e2:7e:ef:cd:19:ec:78:bd:46:ae:f9:dd:
                    a4:a2:1a:5b:e2:38:8a:2d:dc:ca:a0:96:eb:20:92:
                    ce:9e:20:25:29:bd:1a:88:67:22:68:1c:c7:91:e3:
                    79:89:e4:58:54:27:3b:36:fb:30:64:13:cb:a7:23:
                    a3:e5:3f:d0:21:8c:ec:5b:dc:f3:c0:73:84:2f:4d:
                    57:f1:da:42:dd:97:b4:1c:33:a9:e3:27:9f:cc:9e:
                    8d:80:de:1d:18:86:4e:6c:27:62:7d:9f:44:3e:81:
                    20:6d:22:0b:c5:ae:8f:c0:82:bb:12:d6:6e:cf:c9:
                    96:ae:b1:c6:17:1c:bb:f4:ef:3e:e3:2b:c5:f6:3c:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:53:82:39:3E:4F:0B:99:3C:C7:91:78:94:49:53:88:D8:44:F8:BB
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3d:84:9f:9e:66:89:e5:66:70:5c:98:9a:d6:e2:2c:bc:f0:
         9b:e3:4a:ee:ff:ad:8f:5c:1f:4b:11:1b:36:fc:7d:8f:46:39:
         2a:72:f9:24:5a:20:63:98:3e:b3:a3:47:41:11:47:91:22:73:
         5b:fb:91:47:af:28:63:d1:77:ea:79:6c:88:01:13:b8:22:06:
         1e:a7:7f:30:ed:5c:b3:15:c9:61:21:87:05:bf:44:d7:f7:2a:
         6b:72:9c:38:ec:08:c2:f8:51:4f:93:2b:68:a7:53:d8:8e:91:
         f3:87:6e:1b:5a:02:09:a4:15:db:c9:fd:73:fb:bc:74:43:07:
         e4:cc:7e:14:7e:0e:12:55:c8:81:20:c2:30:6c:dd:99:a6:69:
         74:b8:0e:24:83:79:d5:da:9d:5f:20:d4:e4:2e:92:23:c0:2d:
         44:51:e1:c4:82:9f:55:ce:09:12:4d:ba:98:81:7e:94:a8:40:
         34:dd:2c:30:f6:92:4e:05:6a:3f:90:ee:89:17:0b:57:69:22:
         a4:00:a7:12:56:95:fe:e8:53:1b:78:4a:a5:6e:a6:2d:1c:65:
         7b:58:01:c8:ad:e2:6e:b2:61:f6:27:a6:7a:6c:60:6b:cb:31:
         1b:01:9c:52:41:d9:1c:56:c9:15:4c:ce:fe:5c:ef:e4:fc:b3:
         d0:ec:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:22 2025 by rpki-client