Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
File:                     j35CW5mA3j5tTVVraau_8SVIZ7E.mft (raw, json)
Hash identifier:          JtNGZ87RriN17/QeYr8mzF+Vfcmd7Blr6thEjT9aHr4=
Subject key identifier:   E7:B1:B5:79:17:F8:E7:3F:75:72:60:9F:17:FA:87:08:13:43:2F:FB
Authority key identifier: 8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
Certificate issuer:       /CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Certificate serial:       0196C615FDB0276842C44B32B53D6FC2529A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
Manifest number:          5B
Signing time:             Mon 12 May 2025 20:00:52 +0000
Manifest this update:     Mon 12 May 2025 20:00:52 +0000
Manifest next update:     Tue 13 May 2025 20:00:52 +0000
Files and hashes:         1: FsU8rSGyQb0kGFvbxmQ4nDDUBg4.roa (hash: xmWHpgYL9RCJue+qrtt+Eau987wbwxVuh1gIf8HMA3I=)
                          2: j35CW5mA3j5tTVVraau_8SVIZ7E.crl (hash: f5cVBV3xiaEoNeuMLk/hutY/MZv1tieqFaB3hBQ9l3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:15:fd:b0:27:68:42:c4:4b:32:b5:3d:6f:c2:52:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
        Validity
            Not Before: May 12 20:00:52 2025 GMT
            Not After : May 13 20:00:52 2025 GMT
        Subject: CN=e7b1b57917f8e73f7572609f17fa870813432ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:5e:91:45:3c:87:ae:78:d3:ab:04:09:72:
                    ba:8c:93:85:cb:3a:38:55:00:0b:1b:d9:e1:41:17:
                    a1:4b:61:f7:f4:cd:5c:ad:a5:8a:6b:25:a9:fa:e4:
                    9d:43:dd:a4:bc:59:5b:b8:30:64:80:d0:29:11:e5:
                    9b:02:92:f7:c3:ae:29:aa:49:05:49:25:56:53:fa:
                    9d:5d:99:4e:dc:a0:af:2e:b8:77:ba:6e:e9:cb:a5:
                    cf:77:d7:33:09:e8:53:df:ae:0f:63:17:00:1b:4d:
                    b1:2c:01:71:3f:d3:3d:92:c1:ff:83:73:ba:b9:f4:
                    3a:9c:14:a3:c2:67:ea:63:5d:99:48:6f:59:01:33:
                    bb:b8:97:39:6f:83:f7:ee:d9:6a:27:d6:d8:a8:e1:
                    b4:0c:49:4f:9a:6a:fd:51:98:4c:17:38:a8:82:6a:
                    20:26:9d:b7:4c:a4:39:ea:18:31:4b:b9:2b:29:09:
                    78:ba:39:d7:ef:97:ff:8f:00:f1:57:5a:f5:88:69:
                    bf:a3:ca:07:4c:3e:af:9c:1c:5a:e1:f9:ce:5a:1e:
                    4a:52:c8:28:21:81:f1:41:11:41:fc:70:1d:ed:d7:
                    ec:01:28:c6:53:ba:54:bb:4d:ce:dd:93:a7:be:25:
                    d2:23:85:ca:03:b4:28:fb:94:32:53:2f:9d:70:cc:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B1:B5:79:17:F8:E7:3F:75:72:60:9F:17:FA:87:08:13:43:2F:FB
            X509v3 Authority Key Identifier:
                keyid:8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:26:55:3f:56:53:49:d8:7d:c8:db:c1:56:7c:d5:44:90:7b:
         16:80:ba:82:f2:5e:79:68:09:e4:79:f0:7d:fb:f7:07:b0:fd:
         26:fd:dd:22:2b:5d:5e:de:6f:22:5c:50:b9:46:e5:f9:8e:01:
         8a:53:82:a3:f6:f7:1f:3f:e9:46:cf:49:7f:2b:c3:ab:20:a9:
         f2:9d:23:ce:34:87:c2:06:e4:b5:e1:3e:e2:65:05:44:79:ce:
         d3:24:cf:54:6f:6b:64:3b:da:64:c3:bc:93:81:cf:e6:25:fc:
         e9:61:fc:fd:a0:ef:91:12:eb:cf:9d:b4:a8:dc:bc:da:ba:98:
         23:a1:63:b7:5e:0d:41:fe:70:27:8a:27:ab:66:0b:b2:3a:7d:
         38:7d:e2:06:c1:8a:76:2c:b5:f8:24:bf:29:c0:a9:7f:f3:45:
         2f:d5:0a:26:dc:de:9d:16:38:52:d7:89:38:b1:37:dd:99:99:
         fd:e2:d1:50:81:ce:5c:e1:9a:81:3f:51:59:ed:eb:b4:47:da:
         e8:c6:47:29:93:0f:94:53:28:07:f6:ce:1d:71:0d:a7:4a:d8:
         28:4c:75:af:0e:5b:ec:9f:f4:ba:a3:23:18:2b:df:36:51:72:
         70:0d:a0:ba:77:0a:05:0d:db:fa:96:32:d6:17:f8:35:4d:33:
         b2:ea:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:20:36 2025 by rpki-client