Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          NXTSELyWHHaes371w4tibpG1g+y3+U15DLpuhimYYf4=
Subject key identifier:   57:D5:B8:DA:93:14:9C:93:33:A2:72:C7:70:97:4B:E1:E2:0B:74:26
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       0198820BDF6F2D5B8AD5E442DA491F71ADC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          1619
Signing time:             Thu 07 Aug 2025 01:01:12 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:12 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:12 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: pXLvGFW93ZEPiGhgX83G0J9d8qBu7nyqaLRgSfhX/KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:df:6f:2d:5b:8a:d5:e4:42:da:49:1f:71:ad:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Aug  7 01:01:12 2025 GMT
            Not After : Aug  8 01:01:12 2025 GMT
        Subject: CN=57d5b8da93149c9333a272c770974be1e20b7426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:53:01:a7:aa:62:ec:e0:9e:c9:53:8a:6a:
                    2d:59:a2:93:58:d4:2f:98:d2:b2:b3:c3:0c:70:e5:
                    72:60:a9:a9:5b:83:e4:71:1a:36:4d:d8:f4:92:96:
                    d1:e7:83:9f:ad:58:45:38:94:ab:dc:54:bf:29:88:
                    04:ad:2c:3e:92:ab:31:10:88:ec:39:ce:79:68:3c:
                    52:27:d7:ec:62:c5:4e:d7:e7:ab:63:25:a7:10:34:
                    07:6f:bb:ed:d7:28:20:e9:dc:3c:a9:5c:d2:a2:2b:
                    97:d0:f2:fb:68:c3:10:2a:14:40:fe:cc:53:a4:7a:
                    94:4d:f6:5f:de:63:36:55:80:80:c1:99:86:e1:e0:
                    d3:6e:4a:14:8b:f1:2d:2a:32:44:93:24:bb:c8:d7:
                    6e:1c:b8:f1:30:25:93:51:43:b8:da:ae:b1:10:c8:
                    6b:a1:da:af:cc:58:fe:3e:d3:f9:b8:9d:3a:43:46:
                    12:3d:e8:4a:c2:fc:52:5c:da:31:f3:86:b0:a1:57:
                    9f:05:92:fa:eb:c9:49:1e:76:7e:22:93:a8:ab:1e:
                    0f:20:71:d1:35:e9:ed:c9:b5:47:84:00:d6:e5:45:
                    eb:84:b3:66:a4:c0:e1:cc:b0:87:07:43:cd:4f:cb:
                    e3:64:ae:6e:0e:32:3a:60:34:c9:6f:45:a9:09:f1:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D5:B8:DA:93:14:9C:93:33:A2:72:C7:70:97:4B:E1:E2:0B:74:26
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6c:b8:01:71:70:28:f3:72:48:67:ec:85:57:40:25:ba:3c:
         62:c9:37:5a:7c:5b:d6:d2:6d:fc:82:d3:1a:6b:83:36:a3:f8:
         ba:7e:4f:3e:69:33:f3:5a:38:a3:ef:96:24:ba:a7:74:a2:44:
         f3:b1:21:a8:ca:5a:a5:92:be:18:de:3e:92:02:10:18:82:79:
         a5:4f:18:8b:16:39:16:a0:82:78:2f:b7:64:c9:9e:09:97:f2:
         a2:95:da:5e:cf:73:c7:44:fe:03:08:96:7d:a7:c1:b8:e0:5c:
         4e:38:ea:63:4e:df:4d:bb:dc:33:b8:ce:7c:78:ef:9f:2e:2e:
         37:6a:c2:e2:6a:a6:16:c5:f0:a5:b1:19:7e:f7:24:3b:ae:0e:
         7b:7e:c6:54:e8:05:f0:85:d3:4f:61:ac:78:c3:b5:24:23:f9:
         fb:e3:d1:69:8f:19:69:b4:01:4d:41:65:9d:a6:2f:e3:f1:45:
         15:f9:7f:af:93:81:f9:ae:94:a9:9a:c2:fb:7c:13:b7:39:d6:
         46:d2:d1:56:b3:96:12:b2:44:a7:ae:79:1c:2d:be:c9:74:fd:
         d5:7d:7b:95:c2:9c:48:a2:06:1d:9c:c3:5b:9a:c6:b8:32:76:
         b8:f0:42:06:53:ba:09:96:f6:ec:44:08:d8:9d:d3:c9:7d:d4:
         da:28:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:23 2025 by rpki-client