Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File:                     R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier:          lVPkZBvY8PdQ1C8tiF8QhzlYyOompk/Dce6yCkG7mDM=
Subject key identifier:   6D:B7:D5:50:B7:04:E8:AA:D9:A2:8E:63:B8:8B:80:43:6A:11:A6:F0
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer:       /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial:       019892C9139A5145A67BAE59486229BA547D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number:          1627
Signing time:             Sun 10 Aug 2025 07:01:47 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:47 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:47 +0000
Files and hashes:         1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
                          2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: 2Jcttk6p5402NstGBNMshPxeMmXpG+BGu+VfFjqBPN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c9:13:9a:51:45:a6:7b:ae:59:48:62:29:ba:54:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
        Validity
            Not Before: Aug 10 07:01:47 2025 GMT
            Not After : Aug 11 07:01:47 2025 GMT
        Subject: CN=6db7d550b704e8aad9a28e63b88b80436a11a6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:81:21:d8:59:f9:7c:21:61:66:7d:86:52:
                    02:0b:49:31:e3:b4:c1:03:1f:cc:0f:cd:1d:ab:00:
                    07:60:b4:31:99:ea:f7:44:72:1c:0d:1a:b2:69:9c:
                    ca:a3:47:c1:b2:13:7e:39:47:99:79:b5:19:c9:99:
                    63:5e:43:a2:1a:35:04:27:9f:13:00:fa:24:03:01:
                    34:d0:63:15:93:e7:15:b6:10:33:57:8f:1d:1e:5c:
                    58:57:d8:85:9e:27:c1:90:21:38:6f:61:63:72:c7:
                    85:79:46:1f:49:34:be:25:4a:64:06:a2:a3:6e:29:
                    8a:28:d9:9d:07:e0:40:b4:6a:64:ec:b4:91:7d:8a:
                    89:34:c8:f0:31:63:e9:38:b0:f0:1b:38:c7:28:6e:
                    f6:b2:48:dc:5c:1a:a4:62:93:0b:23:4c:14:b0:32:
                    d2:f3:c0:4f:3b:37:8b:c2:51:75:34:eb:b9:e9:dc:
                    a2:e7:68:94:a9:e1:97:8e:8a:70:42:d4:04:a2:8c:
                    8f:0b:fb:b5:e7:7c:88:9e:28:ae:47:19:89:75:b5:
                    42:06:3c:e3:a1:a6:37:26:23:2a:b4:93:32:a5:8c:
                    fb:34:9b:02:97:0a:4d:d1:6d:4c:40:e7:2c:bd:1b:
                    ca:8f:f3:9e:8b:ae:e3:60:76:cf:87:78:e6:34:6d:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:D5:50:B7:04:E8:AA:D9:A2:8E:63:B8:8B:80:43:6A:11:A6:F0
            X509v3 Authority Key Identifier:
                keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:76:68:62:14:76:37:4f:d9:72:e7:9c:c3:fd:d1:b1:ae:34:
         49:86:25:82:06:0b:4c:77:76:76:5c:a0:be:13:03:cb:13:34:
         36:c5:3f:12:c7:89:53:7f:e6:de:20:b7:17:e2:5a:6d:c0:c9:
         fc:aa:8a:45:22:6c:c5:80:e7:42:9b:07:40:04:db:fa:0e:f9:
         26:bc:f7:60:18:da:68:13:22:d5:cd:e7:4b:e4:dc:5d:a8:e0:
         21:8f:31:7a:5c:02:8b:3b:b9:6d:97:5d:76:45:d3:eb:cd:ca:
         6f:2d:b7:31:95:cf:8a:07:e0:15:c8:0c:a3:1d:de:04:02:4e:
         ef:56:8d:c1:5c:d7:86:01:ba:45:95:1d:c8:f5:5f:20:c7:74:
         37:f1:37:5b:ae:ef:6f:b7:ca:ed:a7:a7:35:07:29:cf:7e:b1:
         dc:28:14:90:5c:e3:94:ce:9f:83:ef:16:46:5c:a0:a8:07:01:
         52:e2:7c:92:29:65:a6:5b:5e:9b:99:fe:82:a1:7c:32:97:3b:
         21:0c:93:a2:0a:34:e0:9b:e6:23:f0:88:bd:0d:f2:d5:6c:ca:
         05:92:2e:03:b8:91:73:4c:1c:94:b0:78:04:86:c1:39:64:d1:
         90:79:4d:33:bf:07:20:73:11:37:37:79:70:7c:fe:48:c0:f9:
         81:13:de:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyROaUUWme65ZSGIpulR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5
MTUxODEwHhcNMjUwODEwMDcwMTQ3WhcNMjUwODExMDcwMTQ3WjAzMTEwLwYDVQQD
Eyg2ZGI3ZDU1MGI3MDRlOGFhZDlhMjhlNjNiODhiODA0MzZhMTFhNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxWBIdhZ+XwhYWZ9hlICC0kx47TB
Ax/MD80dqwAHYLQxmer3RHIcDRqyaZzKo0fBshN+OUeZebUZyZljXkOiGjUEJ58T
APokAwE00GMVk+cVthAzV48dHlxYV9iFnifBkCE4b2FjcseFeUYfSTS+JUpkBqKj
bimKKNmdB+BAtGpk7LSRfYqJNMjwMWPpOLDwGzjHKG72skjcXBqkYpMLI0wUsDLS
88BPOzeLwlF1NOu56dyi52iUqeGXjopwQtQEooyPC/u153yIniiuRxmJdbVCBjzj
oaY3JiMqtJMypYz7NJsClwpN0W1MQOcsvRvKj/Oei67jYHbPh3jmNG3kWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG231VC3BOiq2aKOY7iLgENqEabwMB8GA1UdIwQY
MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt
MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2
LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnZoYhR2
N0/Zcuecw/3Rsa40SYYlggYLTHd2dlygvhMDyxM0NsU/EseJU3/m3iC3F+JabcDJ
/KqKRSJsxYDnQpsHQATb+g75Jrz3YBjaaBMi1c3nS+TcXajgIY8xelwCizu5bZdd
dkXT683Kby23MZXPigfgFcgMox3eBAJO71aNwVzXhgG6RZUdyPVfIMd0N/E3W67v
b7fK7aenNQcpz36x3CgUkFzjlM6fg+8WRlygqAcBUuJ8killpltem5n+gqF8Mpc7
IQyTogo04JvmI/CIvQ3y1WzKBZIuA7iRc0wclLB4BIbBOWTRkHlNM78HIHMRNzd5
cHz+SMD5gRPekA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:31 2025 by rpki-client