Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
File:                     JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json)
Hash identifier:          DD7NKl7u3b2NnsuPbe0cpribyA5Ro7/Eka2D4HlzI6w=
Subject key identifier:   4D:C4:C2:12:D6:88:BC:94:B0:26:61:4B:A6:E1:4F:FC:28:07:EF:6D
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Certificate issuer:       /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial:       0196C9F2F151B179A38D6FD745E1E2129D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
Manifest number:          115D
Signing time:             Tue 13 May 2025 14:01:03 +0000
Manifest this update:     Tue 13 May 2025 14:01:03 +0000
Manifest next update:     Wed 14 May 2025 14:01:03 +0000
Files and hashes:         1: 7Dych4zveyHs0pzibZ9uvQtJ2wM.roa (hash: CW7T4TaO0Ki1j/sE/BefdFndXGm6ZNbOz4E1BOqKMT8=)
                          2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: X77i/LZ2wqbq1Ij2uhCsyx/jWXFYPCXjx/I6cwDHLrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:f2:f1:51:b1:79:a3:8d:6f:d7:45:e1:e2:12:9d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
        Validity
            Not Before: May 13 14:01:03 2025 GMT
            Not After : May 14 14:01:03 2025 GMT
        Subject: CN=4dc4c212d688bc94b026614ba6e14ffc2807ef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:a8:24:ff:75:78:c3:95:ad:e3:ad:56:13:
                    0d:06:c9:72:3b:28:49:1c:d7:82:4e:e6:3d:d1:02:
                    2e:85:19:a1:b6:61:96:0c:8a:1e:b5:d0:02:0a:6a:
                    75:2e:e0:71:a2:18:36:5a:78:1f:49:90:74:60:81:
                    49:56:2c:88:9b:47:ea:45:11:f2:c5:d1:ec:9a:4d:
                    69:ef:28:79:aa:a1:71:f3:0e:55:51:2c:77:89:53:
                    08:de:c9:9a:4f:42:c8:fa:6e:d9:fa:df:2a:a3:16:
                    45:c3:ca:fd:87:ed:70:fe:e6:6e:50:02:44:ab:12:
                    07:4f:85:b4:ab:93:d5:b4:2c:b0:5d:a7:b0:3b:52:
                    45:e1:e9:4e:28:bd:49:5b:7d:7f:f6:04:c7:04:07:
                    51:35:f5:e5:24:7b:3c:24:76:fd:0d:95:be:14:fa:
                    30:7e:7d:b6:50:f6:95:a7:98:3b:19:42:bc:6d:eb:
                    f4:61:22:7c:1c:f3:b5:be:7b:e1:07:d3:ab:5c:6e:
                    9d:6c:68:87:33:7d:8a:36:46:95:dc:e5:69:b5:56:
                    0b:76:eb:12:ce:0b:b7:6f:60:70:c2:3e:69:23:4b:
                    6c:43:62:c2:e6:1a:7a:b7:84:45:81:2f:43:6b:dd:
                    cd:61:27:78:43:3d:47:a0:19:f1:8d:16:02:5b:f5:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:C2:12:D6:88:BC:94:B0:26:61:4B:A6:E1:4F:FC:28:07:EF:6D
            X509v3 Authority Key Identifier:
                keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:6a:c9:9d:b1:a3:96:f8:be:95:ce:9b:2e:b8:6a:6b:46:
         5c:44:5d:61:72:07:77:c0:75:39:82:35:c0:18:8c:24:cb:9c:
         04:de:49:9d:80:cd:27:6e:a7:18:0d:5f:af:20:56:65:db:dc:
         a1:1e:3b:d8:52:e0:c3:10:36:c8:01:38:32:33:98:74:f9:1a:
         c2:56:05:bd:85:1b:36:ff:83:22:f0:0d:c6:42:ac:c9:65:09:
         ae:2e:3a:d2:12:66:0b:4a:44:29:08:40:86:2c:79:12:9a:92:
         0d:18:e5:89:86:aa:b4:0c:3a:5e:0b:3d:91:be:69:26:85:07:
         a7:97:1d:68:8b:ca:3c:da:fa:f1:12:5f:33:39:9b:ee:c6:04:
         0f:89:f2:75:25:b8:43:4f:e9:53:72:9f:8b:de:ed:8e:30:64:
         a5:98:6f:99:2e:65:c5:5a:5b:62:a6:3d:79:4c:23:f5:81:1f:
         c1:91:2f:0d:38:0e:06:c0:ab:f4:1c:fb:b3:40:c4:21:8f:6e:
         10:f4:a3:07:98:68:ce:2a:2a:a3:c3:6b:67:71:2d:59:71:16:
         5d:4a:3b:c4:f3:22:65:96:d7:46:91:84:ce:ec:7f:4e:36:f4:
         e0:34:75:7d:8f:23:5b:a1:14:82:5d:ad:b2:91:07:91:39:fb:
         16:71:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:37:12 2025 by rpki-client