Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          bghK0IHA6h7YnVJuOz9Jk6splP6vGy168sTTPAGjZvw=
Subject key identifier:   0C:B7:8B:E0:D1:45:66:A3:CF:97:23:90:8B:19:3D:E5:FF:79:BE:70
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       0197CACBF119D6E7ED12E7052F8621714383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          15C2
Signing time:             Wed 02 Jul 2025 11:00:52 +0000
Manifest this update:     Wed 02 Jul 2025 11:00:52 +0000
Manifest next update:     Thu 03 Jul 2025 11:00:52 +0000
Files and hashes:         1: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (hash: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=)
                          2: I-Uqa1zPH3U2lg8ZFnzuOmPnTWg.roa (hash: u740YP79Lg/XA3U3RRNbSWSMGjpptyvItjaGSDwTCrE=)
                          3: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: f7xj7AUcqq9aHyKswP8NbnTf7csw1vxt9SQnfyIaHh8=)
                          4: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:cb:f1:19:d6:e7:ed:12:e7:05:2f:86:21:71:43:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: Jul  2 11:00:52 2025 GMT
            Not After : Jul  3 11:00:52 2025 GMT
        Subject: CN=0cb78be0d14566a3cf9723908b193de5ff79be70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:8b:ac:53:9f:e7:14:3c:f6:ba:3f:84:fa:
                    84:eb:f9:d4:5f:2d:53:d9:1e:0b:32:6c:4e:b2:6a:
                    71:c3:31:2a:39:39:c9:61:73:db:ba:a5:7c:9d:3a:
                    90:39:b8:2b:4a:9f:fc:4a:1b:50:b1:4c:12:e9:b8:
                    98:47:d5:69:c1:b1:b7:e1:d1:71:04:0e:af:cb:69:
                    90:53:f4:41:7c:74:5f:82:60:d3:62:c3:c5:7f:e7:
                    89:c5:65:3d:54:0c:8b:f2:46:3b:95:fd:51:c1:3c:
                    e1:a9:c8:e6:28:fc:d5:bb:85:f1:32:38:62:1d:ba:
                    63:74:3d:40:5a:71:5f:c4:05:a3:27:56:f0:26:ad:
                    a4:43:f2:77:60:c7:96:57:ab:33:fb:7e:c2:98:8c:
                    49:58:d4:fd:09:be:e5:ac:2d:25:bd:57:9a:6c:74:
                    4b:36:52:f3:26:38:2f:a2:55:23:26:6c:91:9e:ec:
                    f1:bc:58:44:7c:2c:51:89:cf:6a:63:2a:44:8f:0c:
                    53:2b:49:5a:47:31:4f:e0:f0:c9:76:c7:95:5e:80:
                    d2:65:05:00:f1:fc:33:49:c9:70:26:04:a6:72:b2:
                    7e:98:7a:11:97:64:36:54:44:d6:59:10:aa:c5:81:
                    24:14:ca:26:c0:bc:83:10:d0:98:24:29:9c:80:b3:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B7:8B:E0:D1:45:66:A3:CF:97:23:90:8B:19:3D:E5:FF:79:BE:70
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:10:89:f9:5e:8a:cb:64:e9:bf:80:0e:7a:30:71:a7:48:b0:
         ab:d4:7a:58:91:ac:fe:9c:0c:a9:82:78:6a:03:69:ae:3e:a4:
         60:df:e2:33:b5:a7:6e:f2:5e:16:d2:2d:35:f7:36:e5:0c:58:
         66:56:54:c1:ee:ff:bf:fb:36:21:a0:dd:1f:82:c7:c5:46:e8:
         39:bf:c3:bd:70:db:b3:1f:47:1a:65:14:8f:2f:fc:92:62:6e:
         48:17:73:d0:8c:3a:8c:88:f7:26:a4:3d:ff:43:33:6b:85:cd:
         cd:91:cb:63:4b:67:22:e1:2f:03:7a:0d:07:57:0f:7f:ed:a1:
         3a:da:fa:13:d7:e8:be:66:72:d7:8d:aa:95:4b:2d:d2:52:64:
         95:72:9a:96:4a:60:3c:ce:e1:eb:ef:4b:69:97:e2:ed:e8:4d:
         2d:c4:95:e6:a1:30:e5:b3:86:d6:ea:b8:96:61:bb:2f:48:fa:
         15:b2:d8:c0:0a:e6:8b:30:6c:bd:d7:01:11:53:41:b1:4c:7b:
         db:86:07:cf:10:99:d4:d9:e1:ce:d6:d7:07:8b:05:04:ed:3f:
         5d:0f:3a:75:ee:10:ad:dd:c5:45:1e:ae:f9:ab:41:43:33:75:
         a2:8f:31:b4:dd:70:18:b0:a7:7d:da:89:06:e2:03:aa:be:ab:
         52:21:7a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:03:44 2025 by rpki-client