Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          k12WIx4HVciDfuGp7Bdyq9kv7j3mE261CZnvPWK/KLs=
Subject key identifier:   86:C6:ED:99:B3:43:82:D0:80:FB:7D:2B:26:90:D0:E0:CF:4E:CB:95
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       0197B820CF0536C09929533569C293E4EA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          10F7
Signing time:             Sat 28 Jun 2025 20:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:47 +0000
Files and hashes:         1: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: wW5wMfsoCIIJPPyceTywuSTjVe9KdDymRCZowzMq+PA=)
                          2: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (hash: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:cf:05:36:c0:99:29:53:35:69:c2:93:e4:ea:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Jun 28 20:00:47 2025 GMT
            Not After : Jun 29 20:00:47 2025 GMT
        Subject: CN=86c6ed99b34382d080fb7d2b2690d0e0cf4ecb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:11:8f:b4:1d:1f:56:d0:91:05:f8:dc:c6:
                    8b:96:7a:e6:5b:f0:e1:9f:12:87:f9:cf:e0:d2:bf:
                    a3:52:2a:f8:1d:ad:f3:a4:66:15:b3:a5:2a:39:a2:
                    4f:c5:96:57:27:a9:7a:e0:6a:04:25:40:d2:d3:8d:
                    e2:ee:1d:8d:38:ca:60:7b:d5:b7:0b:4c:a5:6b:54:
                    b6:21:70:c1:be:65:eb:d1:2e:99:56:2c:b5:21:87:
                    5f:14:88:a3:2a:fd:45:22:a6:0e:c1:0e:24:78:11:
                    b8:89:d9:31:7d:ee:b4:51:1a:61:86:51:71:24:08:
                    97:4b:3c:84:fe:24:22:7c:b8:a5:0f:70:aa:2c:b4:
                    4f:d5:3f:5e:89:0a:ce:9e:2d:0c:52:4a:5b:86:a4:
                    e5:81:56:23:26:c9:f1:13:e9:48:5f:a5:41:05:a8:
                    d4:5e:94:18:66:a4:e5:d0:28:a5:99:f2:32:65:d6:
                    bc:1a:2a:77:c8:02:e9:43:18:67:db:bb:e7:eb:be:
                    a2:92:8a:78:80:56:93:1d:35:00:10:55:cc:b7:ee:
                    d6:28:d6:4c:8a:07:6b:8a:4d:8e:76:a9:07:0c:cb:
                    fe:7f:14:01:b3:92:7b:61:29:24:9c:26:a5:07:2f:
                    06:e6:1f:80:84:ca:f5:0c:39:5e:e6:ae:be:aa:05:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:ED:99:B3:43:82:D0:80:FB:7D:2B:26:90:D0:E0:CF:4E:CB:95
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:ac:2a:39:3f:aa:bb:7a:99:a9:c3:16:ef:69:d5:e2:fa:
         30:ac:8d:77:d3:62:a5:ec:f3:27:24:0b:7c:cb:8b:3a:3c:6e:
         b4:ab:51:c2:81:bf:5b:87:5b:ee:c3:f7:f7:32:11:e4:39:19:
         8d:e1:fe:75:6d:7d:85:aa:98:a3:20:4e:1e:f0:ea:fb:f8:cb:
         bd:47:23:9b:fb:b4:c4:f4:0c:21:77:1a:11:62:43:07:e5:d9:
         09:98:b5:85:94:a1:1d:a5:81:4f:d7:68:77:be:ef:73:5e:38:
         36:a1:cb:76:c2:aa:8a:15:2e:90:51:ee:2d:3e:84:3d:c6:2c:
         f5:0f:97:6b:31:0f:1b:0c:01:27:cf:9a:a3:1a:be:98:e8:d7:
         c4:c7:8e:f5:a5:6f:23:a0:bf:06:02:2b:41:7d:76:91:24:02:
         f1:d7:05:f3:1a:2b:50:c6:34:5a:e6:51:07:57:a2:95:9d:81:
         45:5a:13:dc:93:2c:22:c0:c5:c9:c6:d4:86:39:c7:e5:ec:96:
         cc:5b:3c:b7:c3:32:f3:6c:64:1b:ec:e3:a6:8a:e8:62:80:7f:
         6f:80:37:82:5c:34:a8:fb:a5:e0:a0:a6:13:82:4c:06:83:38:
         66:91:6d:f4:b4:11:12:b8:32:dd:bc:b1:c9:92:76:0a:a4:a0:
         97:ee:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:11 2025 by rpki-client