Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File:                     jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier:          oOO89cUVsoJ7WG9cp4Wq1vPBfRAAbn06XjCpNWpQQys=
Subject key identifier:   CC:E1:F0:FE:75:76:C9:97:A5:FA:CC:F7:08:A8:A9:F9:87:97:79:D9
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer:       /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial:       0198D54E5D2FE6EBC9EFA55E85402BA704C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number:          12F0
Signing time:             Sat 23 Aug 2025 05:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:19 +0000
Files and hashes:         1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=)
                          2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: uo60ouh/+1dQgRZY4TN6fX9I98PwJ1raKenPJcJQmWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:5d:2f:e6:eb:c9:ef:a5:5e:85:40:2b:a7:04:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
        Validity
            Not Before: Aug 23 05:02:19 2025 GMT
            Not After : Aug 24 05:02:19 2025 GMT
        Subject: CN=cce1f0fe7576c997a5faccf708a8a9f9879779d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:a6:56:53:b2:61:2e:31:d1:a4:14:5c:35:
                    05:21:44:2e:7c:4c:1c:96:b7:ee:01:cd:93:e9:12:
                    25:83:86:17:df:53:26:99:68:d6:75:52:4c:21:04:
                    30:38:7b:97:28:23:c1:c7:6d:e0:d3:90:66:b2:f1:
                    39:6b:24:28:05:85:35:c3:63:d7:04:b8:86:82:c9:
                    6e:c8:ad:c0:90:c5:72:dc:0b:93:7b:41:3f:5a:08:
                    db:d5:bd:83:ef:ac:9d:3c:6f:2b:9f:51:72:9a:89:
                    a0:63:98:e8:3d:92:19:cf:46:5f:dc:99:ba:f9:f5:
                    98:ec:d0:76:5b:b7:04:0b:ff:e1:fc:0a:90:d1:92:
                    f9:16:ac:ba:67:ec:9c:0d:97:74:cc:df:0c:be:e2:
                    4c:6b:c2:87:1d:3a:6c:a1:d3:20:f4:29:00:64:c0:
                    82:1b:a6:28:5b:32:68:1b:66:37:0f:ee:e2:4f:32:
                    25:a5:05:2f:33:82:de:33:ab:01:d9:79:c7:7c:7c:
                    5c:a9:3d:65:eb:e6:6e:ae:f3:c5:d9:85:14:7c:b4:
                    73:be:f6:10:2a:eb:9a:53:f2:f2:48:2d:15:a8:8e:
                    cc:c2:ba:3f:5a:2a:2c:29:ba:83:1a:81:ac:40:79:
                    b5:25:6e:f0:06:18:be:c7:00:0e:20:69:41:5d:cd:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:F0:FE:75:76:C9:97:A5:FA:CC:F7:08:A8:A9:F9:87:97:79:D9
            X509v3 Authority Key Identifier:
                keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:49:ff:b4:ab:74:78:6c:bb:18:82:c9:7e:3b:d9:96:72:95:
         07:82:06:33:be:d2:b2:34:58:2c:57:49:10:87:f7:0e:a0:41:
         4c:d9:a6:47:5b:81:b2:f8:ec:4a:c7:8a:20:2a:d5:16:52:03:
         15:ce:82:21:ef:0c:b7:25:4c:78:58:8d:dc:8f:04:ab:e4:8b:
         7f:54:10:5a:4f:41:0b:e1:45:92:82:1f:7c:10:7b:85:82:0d:
         6a:fa:61:61:c6:f7:11:4d:5f:80:43:1d:53:d0:1c:80:a1:d4:
         41:32:d6:ed:1c:bd:8f:a1:d1:86:c9:79:f5:1b:7c:a5:56:6e:
         6f:5c:d6:52:63:9f:5b:f7:dc:a5:66:71:2e:0a:08:d6:c4:7b:
         14:d0:1f:c8:e1:ad:33:52:74:c2:bd:96:f5:42:47:63:55:aa:
         de:26:cd:ae:51:e0:d5:8d:82:3c:87:15:11:88:94:2b:d1:7c:
         7c:cc:2b:9d:50:70:59:32:a6:5d:1a:c1:e8:fc:f8:3c:f0:b2:
         0f:f2:d2:66:43:ea:88:77:bf:aa:4d:7e:39:a9:48:11:aa:fa:
         a9:3d:30:00:02:be:15:21:8a:95:1b:ef:10:0e:d4:62:f8:82:
         16:17:4a:bf:9a:72:03:c8:c4:e7:ac:47:cd:23:87:77:e3:09:
         d7:34:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:46 2025 by rpki-client