Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File:                     jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier:          iWLaxBnVGYsaGhkPrGr/g19aSQiAoC3/Q0F98eJLZkA=
Subject key identifier:   2C:32:C0:5D:E3:DE:26:1F:2F:6B:C7:6A:B8:E3:50:8B:9F:51:85:15
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer:       /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial:       0196C23953A07734BDC48ABEA75A3B3290BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number:          07C2
Signing time:             Mon 12 May 2025 02:00:58 +0000
Manifest this update:     Mon 12 May 2025 02:00:58 +0000
Manifest next update:     Tue 13 May 2025 02:00:58 +0000
Files and hashes:         1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
                          2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: b8w0FSLiI6kZt+uSQmAcEsgWlCbX4U5Es+qszAZH4+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:53:a0:77:34:bd:c4:8a:be:a7:5a:3b:32:90:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
        Validity
            Not Before: May 12 02:00:58 2025 GMT
            Not After : May 13 02:00:58 2025 GMT
        Subject: CN=2c32c05de3de261f2f6bc76ab8e3508b9f518515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:4c:b5:19:d7:ef:31:26:f6:7f:59:45:5c:
                    5e:0f:5c:0b:42:24:49:c0:d9:1f:65:e4:85:d4:be:
                    af:34:a0:78:c9:f6:20:ff:55:d6:f5:82:d9:5c:fb:
                    cc:ed:cf:d8:e6:29:3c:93:01:39:cd:0c:0a:19:d0:
                    e2:67:1e:a3:64:83:55:52:7f:fd:8b:a3:f5:55:57:
                    29:eb:a1:7c:aa:2c:e0:a3:93:96:4d:52:83:26:7f:
                    7c:20:51:af:c3:21:4d:a5:31:c7:c8:4c:d7:38:4d:
                    4b:2b:79:5a:be:49:72:97:25:d4:be:85:9a:e8:84:
                    98:2c:7b:24:44:13:35:10:34:9f:29:d6:20:4e:d4:
                    39:0d:01:b2:ee:da:2a:cf:b9:28:12:b2:bb:5c:34:
                    4c:74:e0:bb:31:5c:38:57:4b:c8:e8:e6:64:5c:ac:
                    26:04:85:1d:ee:2f:ac:f7:13:f4:ff:71:0d:5a:b1:
                    e6:65:7b:eb:8c:ab:f0:25:7b:79:3f:c9:35:de:af:
                    fc:b2:53:e9:3d:e9:f1:d7:1a:aa:6a:01:b1:da:5f:
                    11:20:f6:a4:63:16:37:be:df:f9:aa:5d:a5:6a:61:
                    bc:f3:ff:bd:4a:e5:e0:35:c3:28:e5:a0:10:fc:b0:
                    ea:e8:aa:d1:9c:9b:50:aa:3c:93:c6:b9:29:b8:a7:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:32:C0:5D:E3:DE:26:1F:2F:6B:C7:6A:B8:E3:50:8B:9F:51:85:15
            X509v3 Authority Key Identifier:
                keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:72:dd:48:48:10:9b:4e:22:56:71:95:df:7a:0e:dc:01:
         3b:ff:91:e5:6c:ef:b2:a0:44:dc:5e:8a:7e:92:13:a1:34:94:
         1f:b8:d2:53:a1:d2:2b:b4:7a:89:8d:05:f2:1d:36:5d:1b:41:
         6b:20:fa:7c:3f:82:62:3e:cf:79:36:47:48:82:40:98:c8:22:
         32:5d:fc:31:d6:f9:9d:b6:bf:16:d4:6b:a4:f0:78:30:f5:4e:
         db:44:1a:33:67:b3:ce:e9:fc:20:32:5d:a5:25:38:34:22:01:
         d0:3b:93:1b:c7:70:8d:b3:34:9c:0d:bd:40:9c:83:23:ed:8b:
         42:72:fa:94:c6:d3:5a:58:19:b8:8d:c2:26:f4:4f:ec:24:10:
         ff:01:59:69:18:d4:3d:6d:f1:6c:12:62:cc:c5:10:97:ab:e0:
         25:1b:40:79:de:5b:f9:fb:97:98:a4:fd:9d:4b:85:9e:9e:77:
         9d:8b:ca:41:13:c3:04:bc:98:68:4b:0b:fd:5f:9b:41:cc:58:
         50:7c:b5:c6:e3:b4:6e:bc:67:37:3b:70:38:fc:7b:c0:d5:33:
         68:48:00:41:15:74:92:ec:4d:49:a3:16:21:70:5b:cf:e0:d4:
         30:39:81:b3:20:3f:78:89:bd:95:83:eb:34:7a:9c:7b:73:ee:
         b2:d1:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:01:16 2025 by rpki-client