Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
File:                     jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft (raw, json)
Hash identifier:          hrukXHzqEJe4+udGUdJG6Q/i6yqO6VBIHXAbipKEiZU=
Subject key identifier:   28:E2:A1:53:20:46:FD:2D:96:C0:68:25:54:69:84:F3:C2:E7:5C:3C
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Certificate issuer:       /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial:       0196BDB772D2F088165CB912EBCC8DBED1D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 05:00:38 +0000
Manifest this update:     Sun 11 May 2025 05:00:38 +0000
Manifest next update:     Mon 12 May 2025 05:00:38 +0000
Files and hashes:         1: 5QH7uoE58dfucr5l0cknmb5_6nM.roa (hash: am7mbJzCmfdx1pMjvSb/IknD/TSfo87lHt1mL7pdZCQ=)
                          2: U9TChuEsKrileu5LPlClTPiblHw.roa (hash: iW3rj/qTsfRQaeDi2vFF7FLZOCFmBBPXZ/tRsBWwt4A=)
                          3: botr4mqTB6e3Z366JpSN6qT4H4s.roa (hash: aKjhoPVp3MyiJCkQJ3KF625JVgfmfjs5tdeStuyIYnY=)
                          4: jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl (hash: 9k4Q7k2MKr18ZYtAN462vEY2jripPBRXMBe1qx9aOHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:72:d2:f0:88:16:5c:b9:12:eb:cc:8d:be:d1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
        Validity
            Not Before: May 11 05:00:38 2025 GMT
            Not After : May 12 05:00:38 2025 GMT
        Subject: CN=28e2a1532046fd2d96c06825546984f3c2e75c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:44:3d:6a:e9:3a:76:37:6b:4c:1f:2a:64:
                    3a:77:13:9d:d3:0b:7f:81:fb:9c:62:f2:15:08:71:
                    ea:f7:fe:4d:24:d6:5d:0d:e3:f8:e1:6e:89:e3:67:
                    3b:20:a0:fd:7c:d9:2b:95:6d:73:7b:51:b7:c2:10:
                    f7:66:c1:e8:be:57:5f:8f:3b:36:1f:fe:60:1c:b5:
                    ab:a1:6d:be:22:cb:00:a4:31:31:6b:62:f4:95:30:
                    96:5b:c8:8e:55:93:13:9b:8c:e7:c9:08:5b:49:ec:
                    46:f1:00:ec:d8:a5:c6:96:0e:e9:f4:15:01:c2:0e:
                    c3:fb:d1:47:91:0d:15:44:46:7c:4c:9c:9a:2e:f3:
                    9a:c4:3b:c0:70:b9:89:9b:9f:b0:25:f5:6c:b1:4d:
                    2e:50:53:af:26:64:7c:e4:c2:72:1c:cf:34:59:fa:
                    ba:2c:39:b0:8e:c1:74:a3:d0:c6:57:9e:b9:da:53:
                    64:be:cc:80:63:ab:af:99:dc:3b:e4:de:e2:04:81:
                    cc:05:dd:47:6e:da:09:c8:39:fc:f7:6b:0c:58:88:
                    0f:11:7c:6e:35:71:ca:a8:48:d7:bf:10:bd:2e:04:
                    f1:0c:a6:f4:9b:9d:e7:d1:8f:b0:d2:24:ac:42:39:
                    b1:04:6e:11:4d:9f:c3:94:fa:39:85:a6:c6:10:4c:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E2:A1:53:20:46:FD:2D:96:C0:68:25:54:69:84:F3:C2:E7:5C:3C
            X509v3 Authority Key Identifier:
                keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:9d:67:5f:b8:93:18:c5:dc:9b:d3:50:40:62:68:98:bc:
         89:6e:8e:1c:48:43:eb:91:72:25:56:12:1d:89:30:0f:c3:53:
         95:2f:1c:55:54:f0:6c:63:7a:e8:8c:cc:40:1a:70:18:51:87:
         76:08:bd:e5:b7:21:01:39:6e:1e:83:bc:01:45:4f:8e:de:d2:
         2a:df:ba:44:01:5c:19:e9:97:45:6f:58:00:de:29:ab:b0:63:
         0b:49:1f:4b:8f:c0:7f:6b:92:ec:d0:fc:8e:b7:f1:fd:4d:86:
         21:ac:94:2b:6a:34:f7:06:7e:4a:5e:77:aa:fd:01:f2:3a:48:
         18:19:b2:d0:bd:87:ce:9c:ba:cd:ff:98:c8:27:6a:3e:09:2c:
         7f:52:b9:57:1b:c2:3f:04:5c:93:4d:1e:7f:ad:df:45:d9:2c:
         84:d2:30:80:ab:f6:5d:6e:de:be:c2:b3:69:2c:70:1b:94:85:
         97:3a:a3:55:35:1e:1c:09:80:2b:fb:04:fc:58:61:95:8a:82:
         c8:46:b5:6b:d6:eb:1e:87:e7:c1:45:de:0b:7c:18:b4:de:7f:
         20:bc:8a:62:5f:d3:e1:94:cd:37:9d:20:18:0c:b1:74:5f:ea:
         45:ab:74:b3:14:ec:99:56:c3:20:46:2b:0b:bd:7b:fb:7d:19:
         fc:1c:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:25:34 2025 by rpki-client