Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File:                     jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier:          DR/rwNJJxI5VjLtHWdZpIB3XMDUQfzPzfygocJ1hHpA=
Subject key identifier:   2D:39:B9:A2:AA:B4:62:D2:EE:98:98:B6:C7:97:07:63:E3:B8:14:87
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer:       /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial:       0197B74542DE7F6B5E8EA9FD13A948A16930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number:          0253
Signing time:             Sat 28 Jun 2025 16:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:59 +0000
Files and hashes:         1: EdJTz8Dy_KYllN7oDQj7wcm2rcA.roa (hash: fBqhHICDr0X6YXFTTdlTIs7rIkllOmDVf3b+eCpH7zk=)
                          2: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: RWYi92wlQegOia+7FGJ9hbbE+j+Y6C7eRvIb68ZHYZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:42:de:7f:6b:5e:8e:a9:fd:13:a9:48:a1:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
        Validity
            Not Before: Jun 28 16:00:59 2025 GMT
            Not After : Jun 29 16:00:59 2025 GMT
        Subject: CN=2d39b9a2aab462d2ee9898b6c7970763e3b81487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:0c:38:ab:f4:30:f9:9c:53:d8:b8:6b:fa:
                    5a:4b:6c:e9:2f:66:a7:87:34:3c:cc:e0:5e:04:51:
                    98:2e:83:4c:a1:b0:f4:17:ee:cb:ba:35:cb:9c:fd:
                    9a:76:c6:2b:bf:7f:b0:a7:71:06:8e:2c:e0:17:09:
                    d4:af:9e:18:bf:03:83:86:47:74:93:02:3b:5a:54:
                    80:87:7e:67:e6:43:b0:28:1c:6c:bc:41:4b:0a:1d:
                    19:e8:6c:63:2d:ce:13:33:ba:e3:f3:6f:6e:1b:c6:
                    c8:85:81:61:c9:72:cc:a0:e7:34:6c:5b:53:47:18:
                    82:9d:7c:94:01:34:ec:52:12:68:d5:18:e8:d5:95:
                    19:d4:59:1e:34:0b:0c:ee:dd:9f:ec:14:c8:8c:1c:
                    68:cf:1d:dc:34:5a:5c:74:85:8f:b9:32:7f:fb:04:
                    80:29:09:03:88:e7:af:18:2a:03:6f:a6:95:12:db:
                    e4:9c:c4:72:c8:fa:86:bc:78:4f:19:c1:ad:bc:f7:
                    0b:69:06:37:14:1d:37:e2:44:7f:5f:56:b3:fa:d3:
                    6e:05:a3:b7:30:3c:42:e3:96:b1:e2:42:3e:c4:34:
                    c5:71:04:39:64:5d:b8:db:3c:d6:80:1f:04:17:9b:
                    bc:57:c1:ed:96:09:75:9e:41:64:dc:0d:33:09:3b:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:39:B9:A2:AA:B4:62:D2:EE:98:98:B6:C7:97:07:63:E3:B8:14:87
            X509v3 Authority Key Identifier:
                keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ca:dd:5e:8e:c5:3a:d0:50:95:b0:16:65:29:49:6f:b9:c5:
         67:1e:a7:f9:bd:1f:85:3b:91:c2:8a:5c:12:52:fe:63:1b:25:
         31:1b:8c:44:8f:3d:83:61:cc:61:a7:f3:d1:08:2f:da:4e:6e:
         88:9d:58:92:5d:a1:7e:33:93:3e:1d:80:ac:f1:0f:be:99:53:
         33:54:57:c3:27:02:95:7e:58:6f:81:0b:29:2a:c8:7a:8c:66:
         d6:2d:e5:6f:58:db:df:77:81:db:05:35:35:63:f4:34:6d:61:
         c5:ac:bf:3c:70:fb:af:39:7b:b0:5b:45:31:06:f5:62:66:e9:
         34:8f:a2:0f:f0:a3:20:d6:15:c3:8d:fb:1d:83:2a:a0:7d:cf:
         87:61:02:f9:8f:28:21:c3:9a:92:aa:f2:7e:26:b2:65:6d:e0:
         12:a8:01:f1:c0:74:f9:05:21:23:2c:0e:65:40:80:56:94:01:
         93:07:03:7d:65:f4:22:6c:98:78:57:b2:54:cf:d9:dd:3d:47:
         ca:d0:00:ee:62:dc:aa:01:c7:ae:53:f0:42:81:29:fc:a0:53:
         d5:5b:16:c6:f9:34:e4:ad:06:c8:19:85:cc:0a:74:c2:4d:84:
         a8:9b:c2:7d:88:6d:a9:7f:9d:e6:47:f9:e3:2a:20:e7:86:bd:
         71:cc:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:34 2025 by rpki-client