Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          KuoZZduH+zzGLO28uIDfFmS6sW/DIwl23AxNIvcCYTo=
Subject key identifier:   A1:7F:35:F5:25:30:8A:64:7F:E1:30:AD:DD:66:32:5C:9E:FF:2D:0E
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       01976BBD460BFAD17CF08E5D27149D49D702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0A0E
Signing time:             Sat 14 Jun 2025 00:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:55 +0000
Files and hashes:         1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=)
                          2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: QCF/69appIhDoUS5QAcjjreofscNxpYz210cIEoRL3w=)
                          4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=)
                          5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=)
                          6: tgAHftofsUlrut1OVcO8hHTBTbc.roa (hash: tgkhROI0aApXAU3ooNKzzNjHjSmQxJBLSWJU0UDgdqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:46:0b:fa:d1:7c:f0:8e:5d:27:14:9d:49:d7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Jun 14 00:00:55 2025 GMT
            Not After : Jun 15 00:00:55 2025 GMT
        Subject: CN=a17f35f525308a647fe130addd66325c9eff2d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:60:46:6f:73:6e:ab:40:86:14:01:82:1a:
                    71:cd:8a:98:af:2a:e8:bc:d6:cd:d0:76:53:6c:7d:
                    17:58:3c:06:fe:2f:08:53:3e:c9:41:56:e5:60:64:
                    f7:e7:5f:e2:b8:ac:4f:50:17:3c:69:da:25:b5:7f:
                    ac:a5:cd:95:9e:2a:2e:78:6b:28:8b:94:3b:8d:11:
                    0b:61:d3:d1:c4:18:98:6a:03:ca:c9:bd:5b:d0:ef:
                    99:3d:1b:4f:67:f9:34:89:7b:16:e1:b9:44:12:e1:
                    89:0e:da:9a:00:11:b2:de:3b:2b:86:67:3a:56:aa:
                    00:e0:68:c5:59:73:38:19:01:76:8f:8e:e5:97:78:
                    4b:68:58:24:b6:02:1d:fd:e9:8f:32:14:3d:4e:fc:
                    f9:f4:31:26:29:95:5f:43:46:40:38:6f:91:fd:be:
                    dc:5a:e8:3f:4b:32:5f:6c:f7:fe:ca:9b:02:75:ac:
                    db:c2:39:41:22:97:36:5d:07:1e:13:dd:39:35:9e:
                    c2:d5:ab:5d:c3:42:8b:07:cf:18:d6:a4:48:a2:02:
                    2c:77:cb:3e:f1:08:78:c2:9d:db:41:3b:8f:bd:0b:
                    33:fc:9f:59:24:e7:df:dc:fb:06:6f:3e:46:ef:aa:
                    60:e0:6a:97:ce:cc:ff:ec:85:48:3e:b4:6d:e6:6a:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7F:35:F5:25:30:8A:64:7F:E1:30:AD:DD:66:32:5C:9E:FF:2D:0E
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a0:a8:ae:99:f6:10:42:0a:e3:ae:6a:cb:ed:17:98:af:de:
         22:50:c9:09:e1:f9:da:ca:1d:f1:cc:64:f2:0b:ad:a1:47:2c:
         5a:69:94:c2:93:28:b2:d7:80:ab:97:d4:5b:8d:01:99:5d:75:
         db:5b:ae:11:30:0b:93:8e:b5:52:66:5c:f3:d2:79:11:c3:ad:
         77:c9:8a:3b:96:58:29:d9:c4:6f:09:cb:6a:62:7b:45:81:fa:
         d3:cc:00:d6:cc:1f:88:99:1e:38:2d:f8:44:31:44:f3:bf:72:
         81:1f:93:77:67:42:c7:ed:bc:03:8d:00:d1:c3:70:88:b7:83:
         4f:92:b9:06:72:8e:26:ca:a0:a8:b2:48:82:73:d2:e1:c2:bd:
         1f:91:b3:66:78:78:00:f3:95:6c:14:68:b7:e6:a9:b1:af:66:
         bc:8e:84:d6:6d:79:c5:55:34:92:c1:6a:04:fe:ce:db:2d:47:
         3d:18:70:58:97:07:00:69:2d:1a:88:c3:d4:30:c7:43:85:c7:
         09:64:20:06:0d:9f:3b:ca:a2:b1:ec:57:22:13:61:d5:7c:a4:
         76:17:f5:90:62:36:24:57:24:a1:f2:78:a9:a2:b2:58:45:9d:
         f6:a3:b1:bb:d7:a6:9a:d4:57:e9:eb:8a:09:d3:d7:30:37:db:
         da:f9:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:50 2025 by rpki-client