Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File:                     kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier:          FuNA7+Se2UDm1yR4HCk2qR0wDDTBk4IPnjfiFps2d2k=
Subject key identifier:   C5:A2:06:A7:F6:45:58:48:40:DD:54:6B:34:5F:99:90:48:A3:75:69
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer:       /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial:       01977A54763CA09A71F7AB7D3646278C1590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number:          146E
Signing time:             Mon 16 Jun 2025 20:00:45 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:45 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:45 +0000
Files and hashes:         1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
                          2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: k3EZvcQzLBgvxqb7dF/pRP4+/s2GNmn22ZWrGnx8OUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:76:3c:a0:9a:71:f7:ab:7d:36:46:27:8c:15:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
        Validity
            Not Before: Jun 16 20:00:45 2025 GMT
            Not After : Jun 17 20:00:45 2025 GMT
        Subject: CN=c5a206a7f645584840dd546b345f999048a37569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:69:6a:50:72:ad:23:34:b7:b8:28:3c:95:
                    a2:0b:f7:21:70:78:2e:11:d1:98:0b:b4:ff:2a:c5:
                    22:69:19:4d:0f:63:1f:9f:18:dd:3f:8d:7e:34:20:
                    be:f2:c4:a5:23:ba:2f:66:8c:17:a3:39:3b:36:22:
                    6a:86:38:1b:c3:41:bd:22:5b:9e:e4:18:90:c5:7b:
                    76:52:48:25:6e:4d:fa:3a:70:60:0d:80:ec:bb:d8:
                    a1:f6:f5:a6:bb:fa:fb:5d:3b:1a:1a:b7:54:e5:57:
                    52:26:c1:62:5a:c9:27:ca:a4:62:94:99:24:47:c8:
                    00:8d:5e:f6:33:32:b5:c3:51:28:25:3a:d2:60:d4:
                    f5:5a:f3:00:97:65:03:12:10:49:4e:9b:a4:45:de:
                    05:32:c3:a0:15:4f:17:f2:19:ec:82:0e:b3:3f:86:
                    f6:f7:42:66:a6:90:b3:14:1f:c3:78:fd:49:68:36:
                    bd:c4:88:16:87:76:ad:3d:76:47:bd:50:1f:31:f1:
                    bd:5e:45:7c:aa:3b:e9:05:0e:ae:93:af:72:95:de:
                    ef:8a:c0:b0:b9:b3:47:87:e8:b5:c3:16:d4:b2:a9:
                    c2:59:bf:a5:d0:6b:e2:d6:ac:0b:a3:b5:8e:30:77:
                    72:4b:6e:71:c6:a4:1a:55:ac:98:5a:77:25:cd:24:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:06:A7:F6:45:58:48:40:DD:54:6B:34:5F:99:90:48:A3:75:69
            X509v3 Authority Key Identifier:
                keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:97:0e:c1:3a:bc:d3:ed:b5:be:90:37:e6:de:61:fd:69:
         96:c1:19:d5:6c:53:b9:36:65:09:9c:51:a7:ed:f0:bd:65:d7:
         88:43:9d:ff:54:be:d0:3c:fc:16:1e:9f:c1:e1:b5:36:91:24:
         e6:a2:4c:91:0b:46:cc:32:40:0c:2e:38:1b:e1:3a:d9:6d:88:
         29:66:44:85:2c:79:52:67:b4:35:b4:94:19:52:e7:c5:ea:6c:
         f6:59:a7:b9:11:8c:5a:2b:a2:36:48:81:2c:45:b6:0e:64:be:
         bb:2b:22:cf:db:25:64:9f:82:c5:7d:0b:9f:20:c0:af:df:ee:
         57:d3:68:6b:0b:08:40:13:a6:5f:58:8f:84:86:54:17:06:3b:
         2c:91:cc:ac:e7:1f:7f:6d:1a:9c:bd:65:02:ff:a3:2a:bb:16:
         c4:ed:1d:e3:4e:57:00:2f:bb:89:fa:9e:46:5b:df:bc:83:07:
         06:50:b9:0c:ae:e2:19:33:a9:75:c9:d9:75:de:fc:ac:5c:3f:
         86:57:1d:5b:14:d4:a2:e5:3a:fc:3e:e7:2b:19:83:0d:cb:e3:
         e4:ea:a4:63:ea:47:87:49:6b:c6:9e:9e:3b:e0:68:29:39:11:
         85:25:91:ed:22:01:d4:42:c2:e7:f3:86:da:60:61:b1:ef:28:
         ca:6d:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:52:24 2025 by rpki-client