Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          GU2NQEaLCMmCDgqBUwDioXPT+y6iVuMT8/uQujRXSPw=
Subject key identifier:   C6:CB:5D:B9:B7:BC:69:C5:30:2C:07:5F:EC:B4:6C:55:78:23:6D:25
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       0196C1CB63DF87943E22AEC9E4081AF95321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          08D2
Signing time:             Mon 12 May 2025 00:00:54 +0000
Manifest this update:     Mon 12 May 2025 00:00:54 +0000
Manifest next update:     Tue 13 May 2025 00:00:54 +0000
Files and hashes:         1: 4EZAXXjg-wdq7F5nmE22LQpMjC0.roa (hash: kcJ5zcoJ0uYbLEoOLz0za2EfJtjkENsqcX3HW2ukm9E=)
                          2: 8eOXfqAkJqXP3wXDUaIxraOki3I.roa (hash: R7bxKwNtqC/oTBwL83XqaIAv5I/52rZnoW3WSovbBso=)
                          3: AXHQCfctIE8qm3CfgJv5m741MvA.roa (hash: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=)
                          4: D39tyqkHzUar743HSOtaz_PbEVw.roa (hash: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=)
                          5: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (hash: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=)
                          6: MLfn1YOL41jf_jxhYVmNtYMo6UI.roa (hash: Rc+RrvU5X1JONVLCHy+aTfK3D2oQUU5dYj6tePTJUyE=)
                          7: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (hash: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=)
                          8: PBJjwWm3FNYmKDKlr11pHLlOrGk.roa (hash: /EDjQB/ySBsTi6pfh4zRjgsPbhtNFWDlr8va/X/KOwc=)
                          9: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (hash: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=)
                          10: Uam3fdY-U_8FUcIs9C1Cu9j0kXU.roa (hash: lAwNykQezUevV1G5+PHKNJlIk5Yd8h58FItNjQ6jmrw=)
                          11: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (hash: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=)
                          12: XJQW6cjujhEORDl3asfzceRsQq8.roa (hash: YLe1WKPBAxaQWWhGaDY3bNQMSMuaVm8vzXhx0IIMUzM=)
                          13: b6Nmax07-I7tddxfBlPtNVrrpoA.roa (hash: 882i5LCYTS8Ako1ajCDIZ6BePqu9LMB0nNQt34alqTY=)
                          14: eKnO05dB5vIDo5g5lEqriGppj5Q.roa (hash: Pg/wHgKw59kIgeWzKbHYp0qEn0pGvDQCAyOOST+PDe4=)
                          15: ey5hfbdWQgMGlLLRhHk4lxjHzcs.roa (hash: 5pgkYJemSZ81sP39WKzYABVimxvElpEgqAb4FFIhI2k=)
                          16: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: D51nWzdmYoEkQgE4il7OvlnnLEEqdSNW09mbm2wBOQE=)
                          17: lXFx9ALxZQorihL48BvDF3NJkOc.roa (hash: XO0/325FUJcPPA5WPlVW2WrXVo9UePYr9iPMeGFfH+o=)
                          18: pJgeOKkaI2IaIkWKQLfbLk35a4w.roa (hash: Coq6w5jiaEk77XJ1mE7tTSL+fJ0vuxmv1bAzLJXfEwY=)
                          19: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (hash: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=)
                          20: roxXwaFrf3KkjRm0sygAv7oGPuc.roa (hash: +XL9L+dok2bHXelVksLQxh9+U/cP9zrebc0SlrcIfKY=)
                          21: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (hash: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:cb:63:df:87:94:3e:22:ae:c9:e4:08:1a:f9:53:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: May 12 00:00:54 2025 GMT
            Not After : May 13 00:00:54 2025 GMT
        Subject: CN=c6cb5db9b7bc69c5302c075fecb46c5578236d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:b4:c8:5c:89:ac:bd:46:e5:6e:c7:8b:f5:
                    b7:6f:54:cd:a3:5f:e6:63:81:a6:7d:f2:aa:88:4a:
                    af:ed:36:53:75:ab:20:4a:1d:96:84:c3:c5:ad:d5:
                    95:3d:0f:58:9f:90:58:8e:11:9c:b2:4f:85:e6:69:
                    2a:a2:0d:32:e1:c9:23:41:8e:ba:94:51:8d:3d:4b:
                    d4:7f:ed:cf:db:1e:0d:d1:9c:8e:2f:c4:b6:91:10:
                    c7:04:98:b8:de:ad:be:7d:83:1b:e5:69:34:a7:3a:
                    bb:ea:f8:a9:e2:be:da:fb:64:c3:57:75:22:5b:9a:
                    d0:48:30:3e:6e:13:90:33:20:dc:8c:ac:45:da:73:
                    03:e9:db:71:bf:11:5f:4b:a3:83:92:8f:d2:c3:20:
                    6c:f0:20:c1:02:d4:9d:4f:e8:cd:5d:aa:44:09:ec:
                    7c:44:8d:8b:ae:c3:ea:ee:1d:e4:f3:af:82:9b:26:
                    99:f7:1c:16:ee:65:0b:ed:6e:ab:3b:9c:53:3a:79:
                    3b:d0:9a:d0:ef:df:75:61:8d:85:1e:f1:8d:58:78:
                    fb:a2:f3:63:dd:61:7a:c8:74:31:46:9c:3d:9a:a2:
                    d3:cc:65:4a:6e:0f:0e:0b:a8:b2:e9:35:9a:20:04:
                    db:cf:38:0f:a0:e1:97:52:2c:23:df:6d:3f:ec:30:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CB:5D:B9:B7:BC:69:C5:30:2C:07:5F:EC:B4:6C:55:78:23:6D:25
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:57:1a:86:6f:1e:f3:25:d0:46:94:2f:dc:bd:8a:94:79:ee:
         77:6d:e9:2f:30:b4:01:24:57:aa:30:af:08:52:fe:50:ef:02:
         6e:e4:78:23:a4:e4:fd:d6:c5:e2:6b:5c:f4:a5:78:a6:88:9d:
         18:9f:4b:f7:ec:04:3b:2b:94:9d:b7:24:3b:bc:09:88:01:ee:
         cf:6f:67:0c:85:72:4a:dd:08:fe:2f:04:30:e3:03:3e:12:cb:
         b2:a2:59:00:b2:56:e4:d8:8c:4f:fa:92:a2:ce:c6:10:fd:37:
         9a:ec:7c:26:16:ca:8f:e9:f8:fd:75:02:ae:a6:41:57:92:88:
         44:a8:da:81:5d:aa:61:b1:90:4f:5f:02:76:53:15:b7:bc:1e:
         26:84:33:90:71:0e:29:7d:c8:c5:b7:a4:46:68:1d:1e:b6:01:
         0b:ba:d4:90:04:99:66:14:51:95:9c:6a:9f:75:57:6a:48:5d:
         41:e1:ca:25:2a:57:84:77:88:7a:19:7b:8b:f8:c6:c1:0e:25:
         f1:45:f5:d4:e2:19:73:b7:75:83:1a:fb:70:aa:eb:d5:1b:80:
         e3:36:50:20:f6:73:e9:04:09:83:e1:9f:b4:97:f6:18:ee:70:
         25:d4:e4:98:03:aa:0b:7a:20:34:00:10:03:1e:d0:1c:9f:16:
         e6:9f:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:40:08 2025 by rpki-client