Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          BJeXFGqpBPS3akDeaCq7lnoBdByw8HiSjxNcL75cepM=
Subject key identifier:   DC:41:C6:C7:BE:C4:88:AF:23:3D:47:EF:C4:4B:EF:D1:21:B6:C1:58
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       019872CF44197B82587E4DD13BC422733AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 02:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:42 +0000
Files and hashes:         1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
                          2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: G0Kr2pwsPZXxRRVaqFIGnRIHEF7krHHnmuwgZ78X5E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:44:19:7b:82:58:7e:4d:d1:3b:c4:22:73:3a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Aug  4 02:00:42 2025 GMT
            Not After : Aug  5 02:00:42 2025 GMT
        Subject: CN=dc41c6c7bec488af233d47efc44befd121b6c158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:e4:67:9d:8d:51:8c:dd:73:a8:43:fa:11:
                    c9:6a:ce:d9:4a:11:2e:ee:b1:f7:27:2b:87:26:79:
                    1b:4c:fc:42:1e:6b:55:96:af:e4:66:b9:30:85:b0:
                    b7:c7:08:1a:3a:a3:96:4f:58:d0:a6:a4:06:6b:ce:
                    35:cb:c0:eb:53:8c:3c:99:65:28:6d:a8:50:64:e9:
                    dc:c1:b4:2c:3b:d9:73:8d:fc:b0:95:d5:fe:3b:e4:
                    8b:b6:36:97:f9:bc:af:c9:ba:0d:fe:33:a9:f3:bd:
                    a5:fe:e1:bf:60:41:5c:dd:73:ef:1c:b6:73:37:64:
                    4c:13:40:76:9b:de:8d:fe:65:5a:e2:45:15:07:0d:
                    52:6f:21:0b:e0:f0:3b:68:a7:96:d1:eb:81:f2:b2:
                    0f:56:87:49:a5:b6:d6:c7:98:89:d8:1f:e0:e9:dc:
                    49:67:b9:92:d8:e7:9e:45:91:1e:2a:e8:27:25:db:
                    c6:6b:b3:15:f1:34:0e:2d:bf:af:01:33:46:eb:4d:
                    4a:16:91:18:04:0c:de:5a:4e:60:e9:b2:fb:b1:19:
                    9b:17:bd:8c:91:b5:ea:b8:52:c1:1c:8e:f2:73:0e:
                    e7:99:e5:7c:ff:d6:97:3f:f7:28:a7:d4:80:bd:d7:
                    5c:ac:89:ef:c5:cb:60:f8:77:46:b7:f3:d4:88:a0:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:41:C6:C7:BE:C4:88:AF:23:3D:47:EF:C4:4B:EF:D1:21:B6:C1:58
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:52:46:7b:07:ba:bc:fc:e8:ee:4b:6f:7f:4d:e8:a5:60:f5:
         06:a7:f5:59:a2:88:57:7d:1e:ca:94:b1:1a:11:10:00:5d:9e:
         7b:95:b9:13:fc:0e:bd:79:83:86:2c:e6:27:07:b8:27:f2:85:
         ff:ae:81:80:23:08:d2:1a:a9:03:88:27:b3:5f:7c:3a:bc:29:
         f1:3f:70:64:2d:36:1b:47:0f:c4:63:f8:70:e3:eb:0f:56:e7:
         e0:cc:9a:0b:5b:8d:81:c7:14:93:26:d0:7b:e5:23:ec:13:93:
         ff:a7:ef:17:37:68:4c:c2:ab:1a:73:70:57:8f:34:5d:ff:55:
         7f:70:fd:bb:d9:62:a3:f4:06:47:b1:aa:fb:96:5a:9c:92:44:
         7d:7a:ca:e6:d2:f7:e7:3d:55:1f:bd:a5:b4:e6:66:17:bb:f3:
         6e:52:d0:ea:f6:92:5b:37:84:77:f1:25:63:07:d5:06:7c:0c:
         a9:a4:d2:54:ae:28:14:ef:f4:1e:ca:8d:9a:49:55:b9:dd:5b:
         ee:05:70:a7:bb:99:8d:f0:ac:a0:66:a3:cb:4d:40:7a:bf:6f:
         6d:87:a2:22:eb:05:6c:5f:35:14:b2:b1:82:a3:c1:3a:12:93:
         0d:34:34:36:7e:7d:bd:3d:ba:b3:4e:78:0b:6b:31:f5:d4:54:
         d4:14:c5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz0QZe4JYfk3RO8QiczrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMzkxMzUzZjZlMWY1MDI1MDRhMDg2OGViZjhhZDBkZWJj
OWRhNzgwHhcNMjUwODA0MDIwMDQyWhcNMjUwODA1MDIwMDQyWjAzMTEwLwYDVQQD
EyhkYzQxYzZjN2JlYzQ4OGFmMjMzZDQ3ZWZjNDRiZWZkMTIxYjZjMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIPkZ52NUYzdc6hD+hHJas7ZShEu
7rH3JyuHJnkbTPxCHmtVlq/kZrkwhbC3xwgaOqOWT1jQpqQGa841y8DrU4w8mWUo
bahQZOncwbQsO9lzjfywldX+O+SLtjaX+byvyboN/jOp872l/uG/YEFc3XPvHLZz
N2RME0B2m96N/mVa4kUVBw1SbyEL4PA7aKeW0euB8rIPVodJpbbWx5iJ2B/g6dxJ
Z7mS2OeeRZEeKugnJdvGa7MV8TQOLb+vATNG601KFpEYBAzeWk5g6bL7sRmbF72M
kbXquFLBHI7ycw7nmeV8/9aXP/cop9SAvddcrInvxctg+HdGt/PUiKA9MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxBxse+xIivIz1H78RL79EhtsFYMB8GA1UdIwQY
MBaAFJI5E1P24fUCUEoIaOv4rQ3rydp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgt
YjI1NDViNDA0ZWVjLzEva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgtYjI1NDViNDA0ZWVj
LzEva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1JGewe6
vPzo7ktvf03opWD1Bqf1WaKIV30eypSxGhEQAF2ee5W5E/wOvXmDhizmJwe4J/KF
/66BgCMI0hqpA4gns198Orwp8T9wZC02G0cPxGP4cOPrD1bn4MyaC1uNgccUkybQ
e+Uj7BOT/6fvFzdoTMKrGnNwV480Xf9Vf3D9u9lio/QGR7Gq+5ZanJJEfXrK5tL3
5z1VH72ltOZmF7vzblLQ6vaSWzeEd/ElYwfVBnwMqaTSVK4oFO/0HsqNmklVud1b
7gVwp7uZjfCsoGajy01Aer9vbYeiIusFbF81FLKxgqPBOhKTDTQ0Nn59vT26s054
C2sx9dRU1BTFig==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:54 2025 by rpki-client