Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
File:                     JNnaT_sbttJz3hutXbvw0f9H8M8.mft (raw, json)
Hash identifier:          UqgElaErpm5SWuoE6Da+efF0EnLRuYrvmL5VNAQgUMs=
Subject key identifier:   72:B0:10:AF:6B:19:A5:7D:BE:A7:7F:DA:B6:6A:02:2A:79:35:63:74
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       0197B745A8C2B9FC2CA2AD639A44B3D3DB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
Manifest number:          0900
Signing time:             Sat 28 Jun 2025 16:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:25 +0000
Files and hashes:         1: JNnaT_sbttJz3hutXbvw0f9H8M8.crl (hash: ftQp0SNb7M3McR0c+iWznCWfGfrIxse4Pl16dmN0W/A=)
                          2: ZKIQ0gO0k0HulusytHqIVVfsl6g.roa (hash: OGX/2AITBSzFYbp6p/kOSU9cFnFuNH1/qnCYIq2S7Ig=)
                          3: ma8zfvdT_VIzhcZ-Lp3w2kWF5zA.roa (hash: ioXdT326LeLVRC17TKm62fh113i8VMK3qPoClNNWHik=)
                          4: xWH61H-UcUY6ZJDt-T0XZrm3Kd0.roa (hash: I6W0yqhD6f0inkp6BbBz5CSZ4vRRv1c8dDwlJ+6LOEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:a8:c2:b9:fc:2c:a2:ad:63:9a:44:b3:d3:db:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Jun 28 16:01:25 2025 GMT
            Not After : Jun 29 16:01:25 2025 GMT
        Subject: CN=72b010af6b19a57dbea77fdab66a022a79356374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:62:bf:f9:fa:81:bc:aa:67:5b:c8:c5:31:
                    2d:13:95:50:0a:1c:20:4b:e6:13:9f:e8:bd:46:4f:
                    0a:87:ec:39:61:73:da:96:6d:ec:9b:9b:4a:dc:28:
                    b7:67:43:a9:5f:a1:03:7a:04:a0:a5:37:29:95:6f:
                    1c:bb:d1:2c:55:5d:bf:da:41:ad:ca:6e:83:af:e6:
                    61:79:7f:ab:29:47:cb:93:f4:e6:db:36:1a:f8:7a:
                    4c:14:d5:cc:cb:37:63:cf:77:8d:d0:dd:c6:37:af:
                    26:ea:dd:cb:38:a4:8a:04:6e:05:6d:d7:98:f4:a5:
                    99:6f:b7:8a:5f:6d:1b:8c:4c:a8:9d:5a:6c:87:7c:
                    49:2e:0d:dc:f2:2b:fe:87:5d:22:34:ab:42:e7:36:
                    4f:ec:2a:11:7f:eb:3f:7c:12:24:08:de:b2:49:8a:
                    3a:c6:80:16:72:e4:cd:00:12:6c:66:6a:a1:a6:f9:
                    d5:7a:aa:16:9f:26:76:6f:a0:c5:f7:c0:07:bc:9e:
                    c8:f7:43:b1:b9:e2:8c:4b:3d:fa:95:1e:ff:ea:10:
                    68:f9:b8:c7:f5:24:25:03:0e:c7:f6:5e:08:5c:af:
                    5f:55:10:86:70:93:7a:e7:e3:c3:da:c9:b0:b4:02:
                    27:18:28:88:24:42:c9:da:37:c7:44:db:d0:61:e0:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B0:10:AF:6B:19:A5:7D:BE:A7:7F:DA:B6:6A:02:2A:79:35:63:74
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:35:40:db:e4:e1:df:d3:df:f9:9e:f8:bc:99:11:a5:cd:a0:
         72:9a:16:f3:94:12:50:90:92:05:fa:dd:fb:5f:20:b9:09:78:
         68:09:fc:7c:bd:9a:8e:6d:54:54:db:d0:11:69:e6:15:94:37:
         c1:08:9a:3c:0b:ba:ce:ac:9b:be:d5:98:d1:02:b6:eb:a0:eb:
         15:de:9b:a0:dd:3a:39:05:61:f1:50:68:fc:e5:77:f6:a6:af:
         38:91:7b:03:38:71:08:fe:4a:b4:f3:67:00:79:89:b5:07:54:
         cb:03:b5:52:2e:6b:2a:a0:31:fa:fd:db:f4:93:3e:f2:a3:d3:
         f3:0c:05:ad:8b:99:c6:69:b6:ec:37:4f:db:79:79:d2:0b:a1:
         52:a5:90:9a:91:01:24:ba:df:8a:d3:3e:8c:01:d0:cf:09:93:
         be:9c:24:57:42:9c:bd:a6:18:1a:39:3a:7c:4a:be:a5:ed:c7:
         ce:16:1c:5d:e0:56:b7:41:a3:19:4d:da:7f:5e:7c:9e:f9:ba:
         19:df:3d:aa:11:ab:9d:3d:82:e2:ce:22:fb:fc:4d:a9:e7:c5:
         cf:69:6c:02:85:bd:e5:cd:5b:ba:cd:27:ce:73:4c:7a:ca:f1:
         fb:00:b6:af:71:87:d3:fe:cc:d8:bc:33:5e:dd:b5:7b:b1:38:
         b6:8a:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:08 2025 by rpki-client