Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
File:                     KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft (raw, json)
Hash identifier:          I1tSKQi12jHEP134ZkiFWN9sOzakRw0S9bfBR//vwbg=
Subject key identifier:   BA:A8:93:CA:5A:33:9E:0E:0C:7D:79:3D:4A:4F:D0:67:E1:2F:14:6C
Authority key identifier: 28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96
Certificate issuer:       /CN=2818d893a699561a94d058574c62eefd514b7f96
Certificate serial:       01977978C9C6A7DE36CEAE8547A359CC30AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
Manifest number:          0F
Signing time:             Mon 16 Jun 2025 16:00:48 +0000
Manifest this update:     Mon 16 Jun 2025 16:00:48 +0000
Manifest next update:     Tue 17 Jun 2025 16:00:48 +0000
Files and hashes:         1: KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl (hash: rK89ZVOo9vOXaB7L1CPHW369a3pGBNdU7QJCIagHhm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:78:c9:c6:a7:de:36:ce:ae:85:47:a3:59:cc:30:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2818d893a699561a94d058574c62eefd514b7f96
        Validity
            Not Before: Jun 16 16:00:48 2025 GMT
            Not After : Jun 17 16:00:48 2025 GMT
        Subject: CN=baa893ca5a339e0e0c7d793d4a4fd067e12f146c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:df:a6:47:e2:56:07:83:ed:d8:83:d7:3d:
                    0c:31:65:2f:ea:d0:f7:eb:22:c5:c3:18:58:95:2b:
                    f3:b4:95:19:95:50:fb:cf:e6:5c:37:b9:de:99:03:
                    d3:75:74:8f:c6:52:2d:b7:1f:3d:fa:42:5c:a0:24:
                    0a:c9:44:a1:e7:22:4f:2a:a4:72:58:1c:2d:6e:47:
                    94:f4:23:15:50:f2:e9:b9:e3:0f:ea:3c:e6:6c:e9:
                    2f:73:9e:8e:82:ef:1b:17:62:93:63:5b:c4:4a:fb:
                    17:b1:85:95:20:e2:16:d5:57:b3:22:b4:92:75:7f:
                    d6:ac:30:d7:b0:76:bd:5e:d0:90:95:62:7a:9d:fa:
                    5a:ff:5a:4f:29:4d:9f:6d:3e:bd:bd:04:a5:3d:06:
                    50:e5:e6:9c:4d:1c:e7:0c:e9:04:1b:ea:a4:6d:26:
                    8a:78:a3:75:b4:3c:86:16:3d:2c:9f:78:26:53:a7:
                    02:4f:9c:da:86:e1:a5:4e:a2:d5:8e:5f:cf:54:b7:
                    cd:66:10:49:06:ea:e8:c6:d6:46:2c:3e:14:74:0c:
                    87:04:b5:10:2e:59:92:bc:d5:59:ae:15:1e:75:b3:
                    e7:9f:54:2f:d3:7f:8f:3a:78:ff:e2:a6:dd:87:4e:
                    bc:74:c6:a8:e6:3b:f2:84:e7:2a:dc:7d:a1:32:f9:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A8:93:CA:5A:33:9E:0E:0C:7D:79:3D:4A:4F:D0:67:E1:2F:14:6C
            X509v3 Authority Key Identifier:
                keyid:28:18:D8:93:A6:99:56:1A:94:D0:58:57:4C:62:EE:FD:51:4B:7F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/971371-eedf-4d66-8b5f-e41706bf1231/1/KBjYk6aZVhqU0FhXTGLu_VFLf5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:57:ab:c7:69:72:16:41:9a:15:38:58:8d:31:3a:3a:14:8c:
         eb:4d:ca:2c:3a:be:58:e7:16:66:15:5d:5c:c8:33:93:00:98:
         a8:ca:72:5e:ee:e9:49:b2:fb:c6:c3:2c:c6:1d:25:ae:e0:9a:
         04:98:79:e0:b3:7b:5b:2b:3d:81:be:99:34:6d:f0:6e:ca:33:
         4d:07:6e:99:da:af:2d:f3:37:53:e2:3a:ff:49:57:42:a8:cb:
         df:bd:ba:d6:c5:13:ef:43:b6:84:34:58:cf:01:d6:4a:30:33:
         b4:60:b1:06:0d:73:a7:e3:fa:14:f3:38:92:f4:30:48:56:bf:
         a6:7e:6c:6c:21:2b:99:b5:2d:49:cc:0e:6a:6b:a6:71:5a:6b:
         82:88:33:84:13:20:21:98:52:5c:58:43:04:7b:24:9d:cf:bb:
         6b:ab:a8:38:2d:f5:bb:3a:aa:3d:8b:fd:11:c0:b9:dc:9e:ec:
         f2:45:28:b3:0f:21:5a:0c:57:6f:99:c6:f2:6b:f4:0b:d4:7f:
         d2:a6:fd:28:60:5a:c3:c0:7b:06:11:cb:27:78:84:e6:85:f9:
         6e:cf:11:31:78:57:fe:bc:fc:35:36:66:83:f5:16:78:8f:fe:
         38:2d:12:f6:ab:9d:9b:e1:c5:a7:1a:c4:d5:f9:70:a5:df:6a:
         f5:a6:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:43:20 2025 by rpki-client