Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File:                     jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier:          M1I/ca7ulli3Ft8tdSD3rXLCsawKPWPgy2BC/ECrxow=
Subject key identifier:   A0:99:5C:75:9D:DE:EC:16:3B:B2:61:2C:FF:5B:26:61:AF:2A:3A:33
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer:       /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial:       0197B6D79CDAE9DC44AEC6BD596B13E8206B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number:          1548
Signing time:             Sat 28 Jun 2025 14:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:13 +0000
Files and hashes:         1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=)
                          2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=)
                          3: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (hash: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=)
                          4: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=)
                          5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: aFG/4GD5G7OnQ67EqkDe2XciTxO3TunRx01I2bvBZCo=)
                          6: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:9c:da:e9:dc:44:ae:c6:bd:59:6b:13:e8:20:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
        Validity
            Not Before: Jun 28 14:01:13 2025 GMT
            Not After : Jun 29 14:01:13 2025 GMT
        Subject: CN=a0995c759ddeec163bb2612cff5b2661af2a3a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:37:f0:17:94:21:35:28:86:cb:39:68:88:
                    8d:c3:9a:f1:70:3e:ce:eb:65:3b:b7:9a:dc:de:6b:
                    b0:1d:ee:8e:e1:e4:87:fe:18:7e:1f:62:c4:04:74:
                    89:1d:fa:01:05:f1:c4:66:8d:99:58:cf:54:a1:28:
                    f7:a2:83:8d:29:90:fd:d6:70:0c:48:5a:71:77:58:
                    92:e0:f0:2b:ca:80:8a:aa:f9:ec:ff:1c:4a:9b:5f:
                    ff:d5:5d:2a:55:5e:97:8f:af:85:82:3a:b2:81:6a:
                    61:54:2f:06:2d:9f:6b:dd:83:e6:89:a2:d5:d9:6b:
                    ce:23:1f:65:b6:45:75:5d:6d:8d:76:99:0c:3b:64:
                    f8:2a:ee:61:ad:02:14:2c:8a:91:1e:96:2c:3f:a5:
                    09:db:f6:90:9a:6d:e0:ad:f1:26:34:1b:d8:4b:17:
                    8c:b9:ef:5d:67:17:f6:df:4e:28:df:68:56:f3:4e:
                    81:c5:7d:7a:d4:f3:d5:f8:cc:46:22:5e:c3:69:8b:
                    7c:92:59:65:59:17:78:8b:ff:cc:30:eb:36:f2:64:
                    d5:ae:57:00:d1:4d:dd:e1:23:11:ea:ba:6d:bd:90:
                    40:3a:87:5f:13:ae:fb:ac:91:d8:58:36:ff:26:20:
                    f7:4c:03:94:cd:52:5c:5a:23:9d:f9:a4:56:a9:93:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:5C:75:9D:DE:EC:16:3B:B2:61:2C:FF:5B:26:61:AF:2A:3A:33
            X509v3 Authority Key Identifier:
                keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:68:d8:a1:06:ee:37:33:ee:59:f5:92:5e:58:45:99:06:ed:
         6a:c4:8e:9a:56:8e:30:48:7d:68:80:89:fc:c5:a0:ea:66:43:
         db:de:59:6a:9b:14:4d:96:eb:c8:d1:51:9f:33:45:c0:05:6e:
         01:30:1f:a9:ae:74:f3:d8:14:36:8b:9f:67:60:7a:18:6b:5f:
         a5:d4:40:e0:69:dc:0c:b6:cb:de:35:d1:36:f0:8e:70:b8:6e:
         7e:09:62:2c:69:4f:ae:26:61:a2:8a:31:63:6a:15:c9:0c:f6:
         35:8a:aa:67:a0:c3:d7:e5:45:9b:81:d3:9e:18:44:32:c1:de:
         05:5c:20:36:07:ed:d3:8d:00:0c:b0:43:77:8b:a6:77:96:17:
         5a:34:71:6a:72:c7:90:47:2c:d4:b3:a3:63:23:5e:14:79:cf:
         e4:73:35:d9:a7:65:36:0a:6a:70:21:c1:bc:e6:bf:32:e5:c1:
         f1:ca:db:8f:5a:1d:50:da:d2:fc:93:1e:e2:33:a3:a2:9d:8f:
         eb:5e:97:4e:70:9a:34:48:3c:04:c3:77:b2:eb:0d:e3:3a:54:
         fd:55:2e:21:54:92:a1:4e:04:0a:ef:0c:9a:7d:a9:9e:d9:d0:
         b6:c4:3c:7d:bd:c5:b0:a2:82:8f:12:59:c1:20:b0:a6:f0:7e:
         3e:f0:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:21 2025 by rpki-client