Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          5CyLj70zYM5wcaGLEuv4WjCdXfskuRF9nB5WFVlDOxU=
Subject key identifier:   34:94:C2:6D:19:6F:2C:DA:3B:EA:CB:B6:6B:38:0F:FF:A3:E1:20:7D
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       0197B70E7277DF918228CD2A77D04DCA37CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 15:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:06 +0000
Files and hashes:         1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: HMWDxedQ8faxPmSqfiJsabMaOMKeMbRiSt2fU0IswIw=)
                          2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:72:77:df:91:82:28:cd:2a:77:d0:4d:ca:37:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Jun 28 15:01:06 2025 GMT
            Not After : Jun 29 15:01:06 2025 GMT
        Subject: CN=3494c26d196f2cda3beacbb66b380fffa3e1207d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:47:2d:13:0e:a8:3b:87:f5:9d:6a:c5:19:
                    6a:ff:3f:9b:79:51:16:f5:f1:fb:20:25:11:87:ec:
                    9b:18:5f:0d:d7:06:aa:7e:68:3f:3c:63:1e:cf:90:
                    ec:da:e9:33:68:82:f1:40:f1:97:b1:ee:16:b2:c7:
                    d8:33:87:1d:f8:7c:1d:88:d8:d1:4f:09:e2:23:d9:
                    3d:3c:42:6a:73:5a:bd:e0:10:5c:a6:58:c1:f8:b3:
                    c2:ec:97:a6:07:24:75:c5:46:a4:61:21:31:10:fd:
                    5d:7a:fe:b7:a2:54:81:56:b6:c0:ba:b6:ef:38:33:
                    df:cb:ec:29:39:75:fc:4b:aa:ab:58:a8:69:4e:e4:
                    56:c1:03:3b:dd:9c:06:ae:8c:01:50:df:58:1a:da:
                    a9:b9:bf:91:d2:15:fa:ff:c4:b4:4f:fe:7d:e8:80:
                    ef:f8:ab:12:45:c8:48:f8:35:3f:6a:fe:f8:df:8a:
                    e4:2c:45:b3:b7:4a:40:1b:e0:cd:98:dc:8d:a5:00:
                    1e:ac:b3:e4:d3:8a:f4:50:3a:c0:e6:15:b6:69:2e:
                    be:7f:5e:f5:9d:00:3a:4a:b2:28:64:e6:84:ca:33:
                    8d:1f:e8:ee:f0:eb:6b:2c:d2:ae:76:ab:bd:d4:db:
                    f5:83:23:b4:94:ad:bd:e9:92:70:15:8d:be:81:8d:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:94:C2:6D:19:6F:2C:DA:3B:EA:CB:B6:6B:38:0F:FF:A3:E1:20:7D
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:dc:dd:68:c0:5b:21:10:ef:75:fb:a7:94:d0:f7:06:d9:
         37:37:72:22:e1:63:8f:d1:a0:72:bd:95:28:c4:b1:4b:5a:7c:
         fa:df:ef:5f:4d:c8:12:78:fd:b7:99:17:c7:07:9a:37:e0:2a:
         50:95:11:47:09:81:fa:c6:67:10:a1:ba:d5:3c:ba:56:09:64:
         23:cb:2c:0e:b7:28:79:28:12:f7:3e:ed:f8:db:82:58:0b:ae:
         ad:7d:6a:63:55:cf:4a:da:19:3c:f5:84:52:89:dd:b7:45:70:
         07:9f:d1:88:ce:37:1f:69:ae:7c:cf:48:c7:0e:a9:a5:eb:6f:
         56:a2:70:ac:71:cb:bf:92:26:c1:42:e4:3b:25:89:15:f0:fe:
         15:3e:4a:ad:6f:87:22:f9:64:12:ee:8e:08:48:3b:09:05:1b:
         cc:bb:03:8f:4c:29:2c:4c:22:ec:74:e7:db:8d:03:aa:9a:93:
         ff:a5:d8:76:cc:52:2f:53:e6:f7:cf:63:8c:6c:03:04:70:c6:
         f9:65:1f:41:32:37:d1:b3:1c:8d:2f:5b:d2:cc:4e:fa:86:2a:
         f8:37:76:ab:d0:98:fb:1a:2d:af:70:9d:2f:e3:3c:90:08:3e:
         8a:a7:45:40:8d:58:7e:8a:25:64:97:94:d4:79:ac:e2:b5:7a:
         5b:79:c5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:33 2025 by rpki-client