Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier:          otaxKCg7hTl3Ne8mosGFwG1CPaf/yQoug/2G3f09olY=
Subject key identifier:   18:60:F8:4F:5B:D8:BE:11:79:6B:2F:4A:59:88:8F:FE:90:8A:10:37
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer:       /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial:       0196C2A6797C6B367E0B414ECBD78D00573E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number:          117B
Signing time:             Mon 12 May 2025 04:00:12 +0000
Manifest this update:     Mon 12 May 2025 04:00:12 +0000
Manifest next update:     Tue 13 May 2025 04:00:12 +0000
Files and hashes:         1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
                          2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: NOdJ/w6Us+g06hU7otSCxqAGKPGB8KnJNY1DT0Mgoek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 04:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a6:79:7c:6b:36:7e:0b:41:4e:cb:d7:8d:00:57:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Validity
            Not Before: May 12 04:00:12 2025 GMT
            Not After : May 13 04:00:12 2025 GMT
        Subject: CN=1860f84f5bd8be11796b2f4a59888ffe908a1037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:38:8b:64:f0:c3:cf:01:ea:16:e2:78:d8:
                    cf:f1:d7:16:3b:19:ae:5c:8a:8a:84:41:6f:c4:6d:
                    55:28:58:21:43:65:3b:cf:54:be:0e:e4:ce:8a:73:
                    25:bd:5f:cd:3a:6e:a6:a6:74:3d:06:af:97:1f:8b:
                    1f:82:0d:e0:70:45:84:c9:28:a9:45:c7:42:2c:eb:
                    0c:7e:53:07:f7:d0:a6:54:6e:0e:4b:7b:b1:45:86:
                    91:41:73:ab:4a:64:d9:ee:12:58:38:98:f2:c5:d5:
                    1e:0b:86:f7:ff:37:bd:eb:f7:b3:eb:15:c3:32:4f:
                    f2:34:69:21:66:db:be:28:4a:cb:bd:36:18:06:11:
                    ef:90:8c:2a:d8:3b:77:9f:0e:83:a8:f8:a6:ef:94:
                    f0:aa:06:2b:c8:31:dc:33:00:c2:a9:c3:42:49:fa:
                    fb:c8:82:fd:09:1d:ef:6c:66:87:d0:4b:d9:50:c7:
                    6d:27:74:f8:28:55:ac:ce:a2:1e:ea:25:60:3b:4b:
                    37:54:6e:62:b1:6e:dc:39:72:0b:e5:7b:9a:dc:76:
                    de:26:56:39:8d:17:00:38:6b:6c:97:e8:e8:5c:ab:
                    c2:d1:5b:b2:71:e4:cf:b7:2a:4c:4b:32:77:09:30:
                    70:89:ab:f9:49:08:52:dd:ac:34:9c:aa:11:90:e2:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:F8:4F:5B:D8:BE:11:79:6B:2F:4A:59:88:8F:FE:90:8A:10:37
            X509v3 Authority Key Identifier:
                keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4a:33:14:e3:3e:70:e4:a8:68:99:b9:93:57:13:42:79:2e:
         e8:64:33:89:47:84:e9:d5:b6:86:53:27:2c:f1:2b:03:88:4f:
         06:77:26:fa:50:67:83:cc:51:15:e4:1f:f9:7a:d4:6a:a6:a2:
         c2:33:b3:df:87:6a:78:7a:22:83:0e:46:9c:d5:46:d4:8c:d0:
         fc:a3:dc:70:3e:20:3f:fc:cf:3f:65:0e:c3:ab:6e:82:63:26:
         48:47:2a:75:5e:52:e9:94:c7:23:6e:2d:83:2d:01:c6:c4:32:
         ac:7f:b0:43:2a:51:81:5c:f1:dd:1e:2f:7a:f0:fd:1a:a8:4c:
         47:5f:ec:1e:9d:ee:d2:85:47:79:f6:c0:b2:53:42:df:bc:13:
         83:5a:13:83:de:b3:71:9b:6a:e2:b8:a1:e1:bb:a4:63:a6:98:
         8c:ed:b1:58:24:31:c2:1f:cb:cf:ca:67:50:f7:82:82:c2:87:
         74:4f:26:0c:1d:36:30:90:e7:3c:b6:ae:ab:b2:f0:ea:c6:5f:
         bf:2b:4e:72:ac:ff:0c:06:ff:db:50:8f:fd:f8:b8:00:ac:c8:
         46:b3:dc:04:1b:57:22:34:98:b7:27:e3:64:3f:9f:6e:1a:b0:
         73:76:06:43:97:d7:4b:3b:16:c1:a4:04:31:a8:2c:fe:6e:63:
         66:17:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:54:44 2025 by rpki-client