Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
File:                     KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json)
Hash identifier:          V9q6tQRyZm0tFnshndIZYZ0lQ0HRYX3CGvbtY2K80So=
Subject key identifier:   F2:58:CD:4B:B6:68:B7:E8:3D:41:69:41:8A:E4:CD:04:59:A4:14:46
Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Certificate issuer:       /CN=285feec87d1959340872f8f79831202f24c80c9e
Certificate serial:       01976C98961BE6BA665C13AE34C96EEFEF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 04:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:28 +0000
Files and hashes:         1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: bwgGRNnm9KjYja61BLrwEcTwJCtV60h/2NJ+UxfBpPg=)
                          2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:96:1b:e6:ba:66:5c:13:ae:34:c9:6e:ef:ef:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e
        Validity
            Not Before: Jun 14 04:00:28 2025 GMT
            Not After : Jun 15 04:00:28 2025 GMT
        Subject: CN=f258cd4bb668b7e83d4169418ae4cd0459a41446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:ed:a8:fc:c2:7e:44:aa:0a:1f:28:19:8a:
                    33:e9:4b:a6:9f:5d:63:e4:41:1b:4d:cb:66:47:c6:
                    2a:17:c8:01:8e:96:a1:4f:91:3e:c9:d4:64:ad:63:
                    50:d4:17:71:49:17:23:42:5d:87:48:25:cf:ef:15:
                    69:78:32:32:ad:5f:47:80:6f:e9:03:bf:43:c7:b0:
                    cf:fe:b3:0a:ef:fb:f0:0e:2d:e1:1f:4f:80:c0:be:
                    f6:5c:f9:72:d1:25:26:f1:bc:79:34:10:7c:12:d2:
                    7d:1f:98:b9:35:96:8b:fb:d4:56:2d:94:70:18:0b:
                    20:5b:f1:24:c6:4a:78:2f:61:09:97:b8:69:4e:dd:
                    41:51:fb:7d:a3:13:b3:81:c8:e7:a8:30:bb:a6:e7:
                    83:76:dc:11:1e:78:01:37:8c:19:ee:4f:54:ff:ec:
                    94:2d:5d:d4:87:50:26:49:f7:bb:da:27:df:f0:bc:
                    8d:be:3e:d4:6a:5b:4c:c2:93:a0:66:70:06:84:57:
                    69:fc:85:02:5e:59:a6:47:2e:f6:5f:74:28:aa:88:
                    d8:3e:a1:04:f9:39:3b:4b:18:e5:9c:a0:0d:87:cf:
                    af:a9:69:a6:6d:26:9d:32:13:25:24:62:b6:7a:7e:
                    9c:65:1c:cf:60:29:2d:a7:e7:97:7b:d1:0c:f9:94:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:58:CD:4B:B6:68:B7:E8:3D:41:69:41:8A:E4:CD:04:59:A4:14:46
            X509v3 Authority Key Identifier:
                keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:4e:00:55:ce:7d:81:32:ed:cc:6b:10:e0:5e:d1:98:80:
         6f:38:1b:58:f4:14:d3:e6:55:fc:ea:33:26:bd:63:18:9a:7c:
         24:ce:9a:d9:ac:fc:8d:c0:bd:c9:c1:7a:cd:eb:3b:4a:d0:ec:
         8a:47:ec:02:6f:b1:6d:cf:7b:9e:5f:45:74:56:50:9c:24:5d:
         32:19:c4:0c:ee:46:2a:10:06:89:79:25:3b:e0:7e:c6:25:75:
         4e:37:f2:50:b0:b9:df:12:9f:e0:e4:74:6c:89:3c:b1:d3:c7:
         b2:d2:b3:bb:5d:13:7a:a2:71:60:54:c4:82:8e:75:a8:50:8a:
         6b:99:1f:d3:ed:bc:dc:d4:2c:0d:9a:f5:34:63:d8:82:8f:97:
         3f:f9:37:d2:13:ac:bf:72:ef:28:8b:c2:ed:91:d9:5b:cf:e5:
         97:96:5f:de:43:a9:f7:2e:11:5f:ac:b7:9b:e6:5b:44:cf:aa:
         ef:b2:8c:7b:34:b6:c9:bf:2e:33:52:54:b8:bc:05:b9:b6:6b:
         c9:a7:6a:ee:7d:38:41:ba:cf:83:7e:47:2c:fd:cc:e9:27:f9:
         c2:99:d8:53:53:28:ae:57:90:a9:ca:27:db:37:e2:10:e6:8d:
         ae:00:5f:54:31:6c:19:26:8d:cd:31:0f:91:76:ea:86:d8:02:
         cd:70:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:03 2025 by rpki-client