Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
File:                     J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json)
Hash identifier:          Kq7PFkFmQa+rbqMaScNpX43uuhV563e1u/o074wV1M4=
Subject key identifier:   F6:2A:C0:39:34:F7:FB:35:31:9B:94:53:EF:3E:49:86:A3:C4:3D:6F
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Certificate issuer:       /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial:       0197B77C5A30F1360CA1CDE7FE28381F9778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
Manifest number:          063C
Signing time:             Sat 28 Jun 2025 17:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:09 +0000
Files and hashes:         1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=)
                          2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: NTO04v7/Yyy7H6HG/4c/d+prCyOYfVML8WkcbvkE0eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:5a:30:f1:36:0c:a1:cd:e7:fe:28:38:1f:97:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
        Validity
            Not Before: Jun 28 17:01:09 2025 GMT
            Not After : Jun 29 17:01:09 2025 GMT
        Subject: CN=f62ac03934f7fb35319b9453ef3e4986a3c43d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:31:03:63:3d:31:2e:12:08:26:a2:11:0e:
                    e4:97:a5:cb:5f:65:54:48:43:9a:06:f6:9c:96:c1:
                    99:41:9b:76:98:3a:e3:1c:6e:5c:51:56:e3:7f:aa:
                    73:44:42:d4:0d:57:1e:b6:d7:d5:9d:49:f9:04:b1:
                    a3:bb:1c:46:0b:ee:b8:e1:43:c7:fa:a9:42:38:1a:
                    80:23:56:1a:0e:64:0d:a0:23:ca:b2:70:d3:e7:81:
                    8d:23:59:4b:7c:3c:55:73:34:a6:e7:c8:da:19:56:
                    56:f5:d7:6c:4e:69:9e:0a:69:87:9b:ce:f8:7d:51:
                    32:37:8b:7b:00:57:32:c8:5c:60:ac:3d:8e:fe:0c:
                    fc:3d:eb:93:e4:e1:d4:87:d2:03:24:ea:ef:d9:77:
                    c1:55:38:ea:80:7c:af:5f:96:a9:aa:f0:3d:6b:6c:
                    53:f2:ad:9c:69:d0:9e:e6:c6:b7:9f:58:dd:6e:33:
                    a3:6a:a2:1a:18:52:9e:a2:bb:1a:75:cd:13:4a:93:
                    af:80:ef:8e:b3:b3:f1:f6:f4:90:ed:a0:de:e0:96:
                    47:59:a4:e9:68:1c:49:08:b1:d5:46:d8:5e:e9:35:
                    85:ce:8d:9f:c6:46:1d:98:38:95:b5:37:bd:06:f3:
                    12:9a:d4:9e:11:ba:d5:fa:d9:47:35:ff:c2:f6:52:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2A:C0:39:34:F7:FB:35:31:9B:94:53:EF:3E:49:86:A3:C4:3D:6F
            X509v3 Authority Key Identifier:
                keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:e4:1d:b5:64:6c:97:9d:83:77:32:9c:bc:cc:b6:b7:01:
         f1:db:2b:2e:91:35:fc:86:b7:0a:90:23:84:63:3d:f3:02:f4:
         de:a5:32:f4:20:51:e4:c9:a9:84:77:92:b6:12:3d:f0:d7:73:
         87:e8:49:bc:3e:ae:50:c8:b9:91:ed:8f:89:90:f0:71:4b:10:
         21:de:22:ed:e2:b8:7f:7f:6c:e6:b3:dd:5d:92:99:f1:61:d3:
         21:8f:bc:f4:6d:fa:06:2d:3f:7f:40:16:4d:c2:8d:b7:9f:c9:
         59:b2:38:17:70:04:43:2d:f2:65:68:5b:d2:d5:f8:5f:54:bd:
         73:ae:a4:76:8b:3e:9b:24:a7:89:b7:da:17:9e:84:72:16:08:
         1e:23:99:75:15:cb:07:d3:14:2c:2e:32:45:85:68:13:b6:82:
         56:1d:4f:a6:29:1f:4e:01:41:4a:20:05:b2:68:a0:81:fc:9e:
         e1:86:57:2c:0e:ad:31:b0:96:58:35:d1:db:b0:81:b6:36:9e:
         3b:10:00:3a:b0:66:ee:dd:85:a6:aa:3e:b1:2d:75:95:b0:94:
         b1:87:1c:0c:65:13:83:86:f5:b4:06:cb:b8:af:eb:b3:2d:ce:
         1e:e3:4f:6e:cb:f8:15:ef:2b:2a:34:6e:85:8d:2c:6a:d8:5a:
         f8:4d:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:34 2025 by rpki-client