Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier:          qnJCNcuu3v7aINsYE3yhj8ttAZxMy+wCX7aeqj1Se7k=
Subject key identifier:   F6:6E:F5:66:5A:16:98:55:A1:A0:92:09:CE:0B:8B:68:5C:C7:A4:72
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer:       /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial:       0196BDB748F86EF49D02A0F8EC74AED41399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 05:00:27 +0000
Manifest this update:     Sun 11 May 2025 05:00:27 +0000
Manifest next update:     Mon 12 May 2025 05:00:27 +0000
Files and hashes:         1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
                          2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: KlUdfFsQvtv98r67VO2ZNSZ5vpvemVctneXVjEkIEHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:48:f8:6e:f4:9d:02:a0:f8:ec:74:ae:d4:13:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Validity
            Not Before: May 11 05:00:27 2025 GMT
            Not After : May 12 05:00:27 2025 GMT
        Subject: CN=f66ef5665a169855a1a09209ce0b8b685cc7a472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:fa:37:79:41:32:dc:7a:60:3d:5e:0e:d4:
                    8f:d7:3a:af:31:d3:6a:ce:d6:ce:af:d0:78:b6:4f:
                    7a:f3:5d:42:b1:75:e4:17:88:ab:73:61:45:ad:41:
                    bf:26:21:a7:a2:68:ce:cc:4a:4d:7e:30:a8:9e:27:
                    bd:11:6d:e8:ae:2f:0e:31:50:de:a2:aa:74:81:a8:
                    08:64:65:4d:1b:4b:3e:33:8e:6c:8d:c0:4f:26:47:
                    37:77:8b:ed:c5:82:69:73:b6:1d:2c:8f:c6:f5:de:
                    5b:3f:86:f1:8f:03:66:f9:20:bd:a1:d8:91:c2:ea:
                    27:fd:77:21:fd:9b:1e:9e:44:01:1b:7b:e3:5f:77:
                    11:df:e4:a3:28:c4:be:a0:ae:7a:e2:d9:84:33:fc:
                    16:26:61:8a:0c:d9:03:09:b7:a2:17:dc:e0:3e:4c:
                    5d:6f:23:c4:9a:f0:03:b6:e4:9b:78:9b:cc:bb:63:
                    3e:03:65:20:41:fb:18:b8:8f:ef:d8:be:61:f7:81:
                    43:1f:43:f5:ef:22:16:c1:d9:32:8c:7a:d1:80:ef:
                    c2:c5:93:29:34:69:b6:fe:9f:fa:e1:6d:2a:d3:70:
                    29:39:c7:23:4a:6a:38:ea:96:a9:bf:70:95:74:10:
                    e2:91:a8:32:7a:16:ad:43:cb:8e:a3:2f:bd:4a:21:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6E:F5:66:5A:16:98:55:A1:A0:92:09:CE:0B:8B:68:5C:C7:A4:72
            X509v3 Authority Key Identifier:
                keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:03:6a:01:ad:03:9d:1d:24:f7:09:eb:55:cc:07:16:c8:
         6d:58:2d:97:a2:0d:0b:7b:de:bc:ac:63:27:0c:23:08:bc:5e:
         bb:08:bf:ba:ba:f6:33:f7:6d:93:26:36:33:58:d9:f6:5d:b8:
         76:62:c5:60:64:3f:d2:11:d8:3e:af:91:8a:61:bc:50:f6:7b:
         2b:ef:e0:10:4c:62:a3:23:51:2f:5e:2c:4c:95:50:33:c2:c4:
         fc:63:e1:db:75:f8:93:ff:62:f6:3d:14:c0:fa:b2:33:ec:84:
         32:4d:ed:88:54:1e:f9:10:d5:e8:f7:13:1e:73:14:e8:83:3c:
         c5:63:5e:46:4d:7f:8f:41:5d:82:34:03:ab:51:99:29:dd:9e:
         52:ce:ad:a6:d1:b6:ad:2f:26:2f:34:18:9b:6e:33:7b:28:21:
         91:2f:68:01:1f:3f:d5:fb:ed:69:28:5f:67:ee:5d:19:94:a4:
         e7:be:a5:00:02:28:16:52:8b:a4:bd:d9:85:e2:16:bd:f7:3a:
         cd:ea:93:fb:6c:4a:36:d2:3a:43:34:f0:c5:cb:89:a4:ed:9b:
         ea:07:5f:53:79:3a:6a:83:02:50:fb:79:f3:16:c2:fe:3a:83:
         7b:9f:b7:02:01:c6:e5:fd:ab:07:51:70:c4:44:f0:e3:8c:47:
         84:a6:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:46:42 2025 by rpki-client