Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File:                     jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier:          Hu3V4gj2+AqZJ2mtvX5llM/JrEhzl7g/OcOGKezDsB0=
Subject key identifier:   6D:0B:FC:7A:8C:DD:8A:63:A4:67:E5:85:A6:40:2A:CB:62:30:00:B0
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer:       /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial:       0196A8E728D968F8569D5C5FA3453884DD18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number:          1213
Signing time:             Wed 07 May 2025 04:00:43 +0000
Manifest this update:     Wed 07 May 2025 04:00:43 +0000
Manifest next update:     Thu 08 May 2025 04:00:43 +0000
Files and hashes:         1: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (hash: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=)
                          2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: Bf578Vq/CcurOklrtKyBUoisj1hR8FuHaqq+BxyBFbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:e7:28:d9:68:f8:56:9d:5c:5f:a3:45:38:84:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
        Validity
            Not Before: May  7 04:00:43 2025 GMT
            Not After : May  8 04:00:43 2025 GMT
        Subject: CN=6d0bfc7a8cdd8a63a467e585a6402acb623000b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:71:05:4a:04:57:ec:a7:17:83:a7:5c:a1:
                    f8:52:cf:05:53:fc:5b:08:dd:fd:93:34:08:36:7c:
                    46:8c:ef:66:a3:41:aa:43:cc:b6:78:62:67:62:25:
                    1a:5a:c3:ab:ff:19:fd:e6:4f:d0:37:fd:0a:cc:1a:
                    ba:8e:06:cb:1a:ed:17:1f:dc:e5:5d:5e:ae:4c:d7:
                    d0:da:da:a3:f7:dd:b4:12:9f:8b:c3:d0:62:c8:2d:
                    3e:1d:5c:ab:58:cf:54:82:29:fb:5b:f6:90:02:19:
                    b1:d7:7f:18:cb:0d:81:4f:15:a3:78:58:00:cd:72:
                    03:19:5d:26:7f:8d:8c:01:73:40:56:ee:67:a9:e9:
                    07:1a:83:18:22:80:91:13:1a:65:25:84:b8:71:8d:
                    3d:22:6e:85:71:db:7c:3e:96:8c:ff:2e:2c:6a:09:
                    ec:fa:8a:29:f0:e6:4d:f6:ed:53:a1:5f:93:43:18:
                    9e:a1:c2:59:7d:0d:11:0f:82:6a:65:9c:bc:80:9a:
                    19:8c:e3:0d:ba:15:b0:80:0b:c1:aa:d4:48:c6:0c:
                    21:f1:64:b9:cf:39:ee:db:07:a1:be:52:17:7c:31:
                    ea:4c:1f:d5:24:a7:72:ea:57:86:54:f3:44:d9:33:
                    9c:1b:83:83:57:bd:71:58:81:63:e0:f8:14:d1:75:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:FC:7A:8C:DD:8A:63:A4:67:E5:85:A6:40:2A:CB:62:30:00:B0
            X509v3 Authority Key Identifier:
                keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:bc:2e:b2:a6:e3:b6:b8:78:8a:a8:31:18:bd:25:71:54:
         bd:a5:25:b7:f0:f0:7f:00:a2:3b:1e:ea:9a:74:a2:f6:2a:01:
         01:af:42:6c:26:d4:fc:58:2b:69:d3:cd:01:41:f2:9e:2a:15:
         3b:fd:cc:37:65:ff:23:6b:fa:2f:70:ee:0f:81:47:9f:ab:f7:
         56:39:95:7e:40:25:15:93:30:0c:3c:a9:1a:43:07:34:6b:43:
         fc:1b:af:39:d4:18:c3:13:c2:0b:a5:e4:55:eb:ca:fa:c1:29:
         18:14:5e:f4:b1:47:eb:46:e9:c0:44:2e:4b:73:38:74:42:04:
         c3:4a:d1:ad:f2:a9:cc:ca:d7:76:55:66:f4:59:00:5c:1e:38:
         bb:7d:40:0b:d4:08:35:15:dc:85:ce:8b:d0:4d:51:0b:e3:ce:
         0a:7b:51:e3:3f:d7:97:d3:6b:4d:fb:43:b6:7e:43:8a:f1:5f:
         46:33:f8:8c:90:5f:26:82:c3:81:5e:c4:ff:36:13:1d:41:a0:
         40:68:2a:15:a2:12:bf:f5:59:1a:45:ab:20:8a:c2:0b:f6:b4:
         a6:5c:b7:88:75:46:a9:f9:bb:06:a0:a3:95:bc:51:97:7a:2f:
         5b:c7:69:da:04:37:7b:1d:51:be:73:c9:8f:10:92:1b:b6:f0:
         91:a8:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:09:41 2025 by rpki-client