Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          MsjRk9lYh9kv7B87/5NiCr2a++U3rAKFsB2QSsujCDI=
Subject key identifier:   C7:54:41:F0:BC:79:BB:5D:C8:54:1C:97:B8:8A:42:34:F0:3C:3C:7C
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       01987C780A242DD15EE54A4D92FE540D4C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          137A
Signing time:             Tue 05 Aug 2025 23:01:38 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:38 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:38 +0000
Files and hashes:         1: 4TAvnt0eG7JuKsSMWZUEgsGMvao.roa (hash: n2Kdbh6aM1gzVM7r4e4o1E7EcRngRjFAuhxJZjUQisg=)
                          2: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=)
                          3: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: ntxUwKfpVznpKVY41gFl7NTAeJZLU7Zr3lNLt0POCww=)
                          4: MniCdS_WZ4lZic5pzyt6lWwynsU.roa (hash: psz4JBmudhLxsVGB1qqd8o8XZ5Wqy2adF+mRTSu5HHE=)
                          5: a5zFl7YfRoI9PIFZlL8A6oYDdmo.roa (hash: TgtuYN4ql3AL9mn3/Ylv463rB0O0GB0BGknf6tE9nvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:78:0a:24:2d:d1:5e:e5:4a:4d:92:fe:54:0d:4c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Aug  5 23:01:38 2025 GMT
            Not After : Aug  6 23:01:38 2025 GMT
        Subject: CN=c75441f0bc79bb5dc8541c97b88a4234f03c3c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:d1:57:0b:56:8d:7e:26:63:10:14:02:e2:
                    19:8c:ae:16:14:4f:17:db:29:92:eb:2e:5f:15:ad:
                    2e:67:f7:64:c1:56:27:10:13:16:1f:04:2d:93:73:
                    c4:13:cf:0a:09:b0:64:b9:a2:e5:c5:6b:f4:2a:91:
                    4d:ae:ef:43:8c:a8:5f:09:b5:79:32:15:cb:7b:1b:
                    78:e6:47:d4:36:28:04:32:5e:86:e0:94:b8:5f:b3:
                    c8:b0:cc:0c:0c:81:ab:14:ec:34:7d:a1:ce:75:97:
                    45:e2:bb:17:1d:77:db:77:59:b5:e7:f3:d3:a4:24:
                    37:f8:5c:5c:6d:cd:02:56:48:1b:1d:7f:ae:8b:4d:
                    79:c7:4b:c5:b7:bf:ee:79:41:ca:23:33:54:ef:4c:
                    89:04:eb:ea:85:60:61:68:23:74:8c:ff:1b:8b:79:
                    bc:60:bd:38:36:43:80:76:43:16:2e:1c:e0:00:73:
                    55:df:dc:56:ba:9c:93:04:e3:b4:ac:f2:64:1f:11:
                    38:8b:50:50:f6:96:06:69:89:8b:ba:67:2c:48:7f:
                    79:0e:2a:65:07:36:3f:3b:7f:f9:94:fd:e4:20:55:
                    08:9b:7c:6d:46:10:d9:a5:8b:e1:cc:c4:1b:2b:9d:
                    2c:0a:53:b4:b9:db:87:28:7f:22:ff:f7:b5:05:d5:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:54:41:F0:BC:79:BB:5D:C8:54:1C:97:B8:8A:42:34:F0:3C:3C:7C
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:61:ab:06:ed:10:bf:01:5f:2c:a3:a1:28:a0:45:98:3c:c4:
         ba:00:27:da:90:61:1e:72:11:9c:5c:02:8f:ab:63:23:04:86:
         df:f1:c5:dd:9d:2a:92:9f:37:3c:77:57:9a:af:e5:9a:86:b2:
         1b:de:c9:ef:81:ab:2a:c1:79:94:1b:1d:29:3f:c1:21:bc:6d:
         ed:38:f9:27:9e:bf:bc:2c:7e:e5:a6:d8:d4:5f:30:d7:93:c7:
         45:51:e6:88:2e:8e:4f:ca:33:f6:a7:96:03:36:7b:b8:2d:9b:
         99:6f:09:a6:7c:a8:70:e6:89:2a:a6:16:53:3e:c3:9a:cb:86:
         a5:56:d2:1f:67:fa:8b:68:1b:ec:aa:59:8f:b5:15:9a:10:bd:
         91:c4:cf:64:d9:8a:45:35:39:b1:a3:21:27:d1:1a:bb:fa:1f:
         7a:ad:0c:62:83:8f:8d:f3:6f:ad:97:76:9f:ec:1c:62:58:a5:
         8a:75:67:7b:63:b1:66:e5:2e:66:fc:e3:57:11:4f:e1:d1:77:
         2a:90:2a:a7:86:8a:b3:1c:9d:1f:39:d1:65:9c:6f:98:ee:a4:
         c4:64:27:24:c4:3d:ab:67:86:22:6b:ce:ea:5e:a1:c5:ab:92:
         0e:41:95:66:3b:83:9f:de:90:eb:cf:9d:8a:43:1f:b8:fe:1d:
         99:de:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:46:04 2025 by rpki-client