Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          axIInOvJ1WQ1uDgKSk63lT+1XhA8eDQ/Ywaalho+DmY=
Subject key identifier:   65:06:38:DB:EF:A9:FD:1A:62:4C:4D:13:1F:7A:82:93:4E:38:7B:83
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       0197B70E5A1F656EDC917B9FD3DE08F61046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          0690
Signing time:             Sat 28 Jun 2025 15:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:00 +0000
Files and hashes:         1: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: KmIzTr2KaNYST9oCeN2Nho0BMnLGmYWI1Pq/v413ZzA=)
                          3: rDlkyigziSazpq7KkBehs1Ktw-g.roa (hash: 0blcMDi8SQKGoP7zdqimF2o0peaDeYPg+Ie2kFh43K4=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:5a:1f:65:6e:dc:91:7b:9f:d3:de:08:f6:10:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Jun 28 15:01:00 2025 GMT
            Not After : Jun 29 15:01:00 2025 GMT
        Subject: CN=650638dbefa9fd1a624c4d131f7a82934e387b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:03:1b:bd:f4:eb:f7:c6:1e:35:d7:5f:f5:
                    d2:6b:9b:d7:f8:3b:41:7a:a5:ca:5c:f3:ae:00:41:
                    44:46:f7:7f:b6:63:bd:5f:80:fd:83:61:5e:45:7e:
                    bd:1a:e2:18:f7:d7:2c:3e:1e:7a:ef:92:a8:fa:09:
                    e5:ca:5e:3a:5d:22:a2:02:4d:02:f7:e1:fc:a4:b3:
                    73:8d:98:7e:9e:f9:07:99:f7:49:e0:35:00:f7:62:
                    b9:75:b1:52:66:73:f2:3e:63:5e:4a:54:49:29:90:
                    5e:50:56:c6:cd:3f:fc:17:3b:11:c1:37:44:26:ba:
                    56:af:fe:89:64:6d:27:a4:e8:59:5c:5b:fa:e7:a2:
                    80:65:0d:73:9e:84:f5:5d:9b:17:96:01:ed:68:32:
                    c4:c4:03:6f:66:ae:b9:5d:2b:2c:83:f8:1a:27:9e:
                    2a:87:35:fe:5c:39:a4:d8:2e:2b:54:32:6c:48:b0:
                    3d:b3:80:7f:5e:4d:b6:7a:d9:43:8f:f0:bc:b8:db:
                    94:a4:1e:2a:47:09:c3:01:c7:76:b1:de:4a:0c:2b:
                    5f:ff:ba:da:84:f3:42:d2:ae:1c:63:e0:89:2a:09:
                    1c:ff:6d:d6:8b:52:1f:d3:8b:b5:96:fc:8c:d6:52:
                    0f:14:6d:5f:05:69:06:28:81:07:27:ba:fc:18:dc:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:06:38:DB:EF:A9:FD:1A:62:4C:4D:13:1F:7A:82:93:4E:38:7B:83
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:22:89:ee:d6:cf:46:ee:82:bc:bd:1d:10:53:af:35:34:da:
         c2:a1:42:d3:10:69:16:a6:2b:72:c1:3f:13:63:c3:d8:d6:50:
         6e:10:e5:d3:25:c6:51:b3:d9:07:3b:34:0b:7c:df:40:2d:7b:
         d8:02:bf:7f:27:b3:17:ab:27:e0:20:07:38:3f:21:a2:d8:df:
         8c:1f:9b:6b:5a:80:ad:ef:e9:58:c2:f5:71:74:5f:2d:f2:59:
         e2:0f:79:68:b4:af:b9:46:3e:44:90:ee:f1:8f:42:59:b2:ab:
         e3:4b:05:46:1a:a4:f9:06:48:05:4b:a7:f0:a8:e5:46:3d:40:
         c7:88:36:8e:93:41:5f:48:ac:e5:b2:a2:e1:07:cf:42:60:ad:
         95:05:d8:42:ce:05:2f:0b:6b:51:47:cf:eb:3f:a2:e0:9d:52:
         b7:69:60:e8:6c:8b:74:89:94:80:b2:e6:89:ad:be:fc:3c:ba:
         8a:55:34:ca:7a:2f:ed:31:64:36:9e:7f:e4:73:bf:a6:62:27:
         40:c2:31:49:1c:be:3b:24:52:78:5d:ec:39:e6:bb:fe:9a:8f:
         35:aa:bd:d3:6f:0b:5b:45:eb:be:51:af:06:36:20:34:ae:da:
         ba:c2:4b:98:00:b5:ea:2a:84:a1:88:83:bd:61:62:0a:c7:d7:
         fe:ef:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:06 2025 by rpki-client