Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          drH7N9TLjwGRTaVdqsuMiQ91LklLItKX3ymr45RauA8=
Subject key identifier:   78:BA:19:3B:6D:A3:6E:E2:A4:CC:A6:08:A5:FB:2A:17:5B:18:6B:9F
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       0197C6154E86E25F6883FF6705D6F77218E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          15C2
Signing time:             Tue 01 Jul 2025 13:02:54 +0000
Manifest this update:     Tue 01 Jul 2025 13:02:54 +0000
Manifest next update:     Wed 02 Jul 2025 13:02:54 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: 9nkPVnil2qwuPWREbHmO71X7RZywBI9vKYaV2uiIoJU=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:15:4e:86:e2:5f:68:83:ff:67:05:d6:f7:72:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Jul  1 13:02:54 2025 GMT
            Not After : Jul  2 13:02:54 2025 GMT
        Subject: CN=78ba193b6da36ee2a4cca608a5fb2a175b186b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:71:9a:2f:ca:2f:15:ee:d6:05:70:c1:82:b6:
                    60:b7:05:50:b1:d4:5e:0c:6f:04:52:26:6e:3e:d0:
                    6b:ae:c0:f3:e8:b4:ba:2c:06:53:e4:f6:a1:16:81:
                    ad:fd:dd:61:84:6c:bd:04:f8:d7:52:db:fd:79:55:
                    98:84:f1:f0:ad:f2:53:c6:e2:c8:2c:db:8a:c2:14:
                    cc:d5:b0:05:25:51:d7:f5:c8:cb:78:31:0a:f2:48:
                    f1:31:53:e1:9e:24:fa:35:a6:7c:98:86:3a:c5:91:
                    8e:1a:c5:73:cd:e0:c7:04:4d:1c:33:30:20:d6:14:
                    f1:33:b7:24:e9:36:bb:32:15:63:62:48:70:f5:97:
                    d2:f2:1a:ca:6d:f2:40:55:34:c9:be:1a:f3:4d:f7:
                    4a:7f:5d:b6:02:31:04:28:36:56:f4:91:63:73:06:
                    f5:07:f1:7c:95:51:5e:a1:f5:88:db:bb:71:31:1d:
                    88:64:12:45:0d:d2:24:fc:74:59:0e:ef:85:6d:47:
                    e9:4f:60:98:06:07:04:5a:47:f7:89:ea:6a:92:ea:
                    19:e3:e1:5f:a6:af:be:5d:a6:b6:55:8b:26:8f:d2:
                    f4:85:5e:84:22:f6:01:71:89:c5:7f:68:65:79:6d:
                    b4:09:31:4c:93:28:04:7f:0b:b8:12:56:be:05:6e:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BA:19:3B:6D:A3:6E:E2:A4:CC:A6:08:A5:FB:2A:17:5B:18:6B:9F
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:76:ad:e7:3c:67:dd:f7:2c:28:98:89:6e:10:5d:2f:01:
         c3:4f:92:1e:1e:7e:3f:15:93:e5:62:90:a2:f9:c1:33:f0:ed:
         9e:be:49:61:d1:a4:15:a7:d7:fd:30:d5:97:17:45:77:ea:49:
         d4:b8:e1:14:c2:4a:98:a9:1c:10:fa:35:a5:29:e1:ba:f8:21:
         90:90:d1:ef:11:8f:07:d8:89:1f:97:fa:be:0e:70:b1:12:36:
         9f:99:6e:f5:6a:35:ab:5a:b2:2e:37:d5:a4:2d:b4:df:6c:40:
         1f:fe:0d:bb:0f:7e:86:0b:6b:33:dd:12:fd:af:40:cb:44:b9:
         fb:0c:89:74:01:95:d1:58:a0:cb:68:0d:b6:d8:b6:d4:44:85:
         86:8e:06:8c:23:eb:c6:44:fd:20:aa:c2:3d:3a:91:c0:76:f4:
         8c:d1:bc:3c:4c:0f:43:7b:a9:8a:71:a3:f6:8d:dd:05:a5:ea:
         53:b9:57:6d:f2:ba:4e:8a:dd:48:ca:de:a6:85:18:20:f4:82:
         2c:3d:a8:bb:1d:ec:78:22:bb:42:c2:54:b4:3e:85:da:f7:e0:
         2c:85:53:25:83:4e:83:5b:24:29:1b:12:7c:2a:ac:f2:8e:f1:
         89:2e:78:9a:95:ac:98:99:fe:f3:c5:fa:1e:30:15:21:c5:fb:
         57:39:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:14:56 2025 by rpki-client