Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File:                     KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier:          c+qm44QMH/2VBSJogLzQVuhht+C/c3X4tyQEQOEG9bY=
Subject key identifier:   4A:70:2A:38:59:10:E7:67:DE:F6:13:C8:CB:D3:FA:27:67:6D:13:F9
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer:       /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial:       019768BC18D7E15BA502E71B211D42B0242B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 10:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:46 +0000
Files and hashes:         1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
                          2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: QP7TtpBdgbitU0Mg3Dr6qaOyl70yZ3/6sCT699mjt3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:18:d7:e1:5b:a5:02:e7:1b:21:1d:42:b0:24:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
        Validity
            Not Before: Jun 13 10:00:46 2025 GMT
            Not After : Jun 14 10:00:46 2025 GMT
        Subject: CN=4a702a385910e767def613c8cbd3fa27676d13f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:4b:47:95:bd:14:39:89:b7:93:ad:53:c1:
                    70:3d:c1:9f:1a:eb:4e:70:db:27:f4:48:bf:f5:26:
                    33:6e:f8:16:a1:3f:af:ba:06:28:dd:50:34:c1:77:
                    f1:6b:30:61:26:60:66:ed:c2:8c:2e:f2:a7:fc:db:
                    d1:7d:b9:f3:c9:cb:03:a0:c7:4c:c0:6a:4d:0e:ec:
                    74:98:af:c6:5f:95:51:a7:6b:8b:26:cd:cb:fc:79:
                    32:47:3b:db:9b:bc:d2:2b:41:d4:c5:e1:3a:16:41:
                    d4:1c:b1:16:b4:1e:07:b2:63:06:a9:8f:98:a0:2a:
                    ab:53:69:aa:d6:35:08:7b:91:33:11:dc:53:48:ad:
                    be:8d:f8:be:eb:1b:84:d7:a7:3e:d0:c1:4a:29:d0:
                    0c:fe:1d:f9:de:03:05:7b:fe:f5:21:03:19:4b:9d:
                    a4:b9:50:7d:6d:87:14:70:ac:d1:fe:9d:db:c0:c8:
                    2c:48:df:db:a8:cb:09:47:98:65:7a:0c:bc:77:05:
                    8b:16:47:11:2c:f7:38:a0:d8:e6:c8:2d:8b:2d:03:
                    14:a0:7b:b3:c0:95:e3:e9:46:72:73:50:3e:85:18:
                    d1:b9:be:b1:21:8c:79:4d:bf:9b:25:b5:92:94:9f:
                    c7:40:23:9f:5f:6a:af:26:d5:d4:37:86:00:e9:f3:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:2A:38:59:10:E7:67:DE:F6:13:C8:CB:D3:FA:27:67:6D:13:F9
            X509v3 Authority Key Identifier:
                keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:77:71:24:b8:c5:4a:45:cb:1f:15:c1:41:5d:a2:70:bd:75:
         82:42:dc:08:ad:6d:9e:5f:c1:5b:51:66:09:73:7a:93:af:db:
         8d:6b:d2:7b:10:5d:25:a7:52:06:a8:b3:d6:d2:73:f4:c9:1a:
         35:84:6e:f3:73:8f:0e:e5:95:3b:4a:40:a7:28:6f:0a:a8:39:
         97:ba:b1:55:d2:c3:83:2a:6a:13:32:13:b2:68:ab:2a:fb:e5:
         92:9a:bd:f0:28:d6:88:da:6a:73:68:3d:49:59:5f:4e:7e:ac:
         d4:41:8e:97:7e:7b:4f:96:79:79:f7:c6:d6:c7:af:8c:70:a5:
         08:b4:c9:d6:a8:ca:f7:73:98:87:a7:13:78:6d:24:4d:6b:2a:
         9c:13:9c:1d:12:58:a2:cb:f7:35:10:29:25:19:29:7f:73:06:
         ad:3f:df:32:9a:43:61:42:3f:5d:25:c6:86:72:70:de:34:7d:
         4b:f7:d8:75:a2:0f:ef:e5:78:7a:07:b7:ad:a4:4e:c0:81:25:
         d8:69:79:29:7c:cc:d5:46:bb:52:4b:77:46:fb:c4:9a:f4:15:
         f6:39:3a:bf:3d:8c:ed:d7:3c:0b:4d:ac:89:f2:7a:f0:a6:d8:
         0b:5b:76:9e:e0:ef:08:33:8f:8d:40:84:0f:a8:03:9d:b5:c4:
         d2:01:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:55 2025 by rpki-client