Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File:                     jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier:          XkJl76Pbi2TIWb75EWHvjEo9B0t1LbhvCKfXf2edCzA=
Subject key identifier:   AC:83:2E:B6:AD:34:48:5C:B9:DD:67:3E:40:71:1E:5B:9B:88:00:D4
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer:       /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial:       0196A541531E9E2011C8FFBCF12B98D83DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number:          074F
Signing time:             Tue 06 May 2025 11:00:43 +0000
Manifest this update:     Tue 06 May 2025 11:00:43 +0000
Manifest next update:     Wed 07 May 2025 11:00:43 +0000
Files and hashes:         1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
                          2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: SpYkeZW9cKoFGnM3+klp6fk+fIo4JDu08q99NcoBigA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:53:1e:9e:20:11:c8:ff:bc:f1:2b:98:d8:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
        Validity
            Not Before: May  6 11:00:43 2025 GMT
            Not After : May  7 11:00:43 2025 GMT
        Subject: CN=ac832eb6ad34485cb9dd673e40711e5b9b8800d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:b7:c4:cc:ef:a7:4c:b2:fe:b1:74:21:cf:
                    a1:fe:23:b3:99:b9:53:12:77:8a:a1:0c:2d:58:38:
                    1e:5f:f5:95:d2:ac:7e:6f:ed:66:3b:76:a0:d6:9a:
                    ae:30:c5:c2:a7:3b:eb:77:1f:3d:9a:95:83:4a:45:
                    e6:75:92:9b:12:da:ae:aa:b3:04:61:26:b5:0b:56:
                    b2:d3:e9:44:20:14:5e:a6:6e:07:f7:a0:56:8d:50:
                    a3:ad:70:04:19:b1:2c:45:a9:c6:79:5c:09:6e:62:
                    68:1b:b1:11:01:e9:3f:75:95:ad:e6:b1:d4:c9:7e:
                    65:74:1e:0a:21:64:f8:76:ec:b4:e0:2e:d1:cc:61:
                    db:59:4b:57:98:88:75:3e:ed:48:3c:91:e3:6c:c0:
                    e3:01:40:80:a1:d2:02:11:93:dd:54:90:5a:d9:7d:
                    9c:97:c7:28:4b:05:15:7e:6d:11:4f:86:8d:94:bb:
                    f8:79:b9:f6:51:56:be:5f:8c:61:63:21:8e:5e:e6:
                    66:36:70:10:42:56:d8:ea:15:e6:87:61:27:9f:80:
                    73:40:0a:0f:2c:d1:b7:00:c1:ce:12:ad:17:bb:c3:
                    eb:80:c7:c3:50:02:23:88:d2:64:f8:e0:d0:8f:db:
                    ba:04:62:80:8f:68:58:9c:fa:be:bc:71:2a:e1:0d:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:83:2E:B6:AD:34:48:5C:B9:DD:67:3E:40:71:1E:5B:9B:88:00:D4
            X509v3 Authority Key Identifier:
                keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:6e:ec:30:e5:a8:a2:85:41:4b:ce:2c:00:01:29:e1:a7:
         86:5b:6a:45:73:63:7b:43:f8:e5:03:0f:dc:28:13:6b:b4:95:
         90:a0:10:6a:4a:cc:0b:88:4d:67:21:7e:0e:60:65:ab:6b:21:
         6a:30:5c:dc:48:36:c6:70:2d:b4:55:43:ad:c8:84:f3:82:13:
         fb:68:0c:4f:fe:a8:a7:01:67:8a:78:83:65:4f:46:5d:7b:e6:
         a0:8b:51:4f:ca:23:28:ae:6e:da:ad:44:c1:5e:be:22:71:67:
         9d:72:4a:5f:0f:39:08:f7:37:bf:72:29:6d:8a:b9:de:86:fe:
         05:e8:94:dc:94:de:45:ea:09:a7:51:cc:07:49:a7:43:df:b3:
         96:45:81:98:b9:4b:35:0b:f3:79:5a:7e:8f:eb:4b:89:ee:53:
         11:1d:ea:e4:55:75:ca:3f:3b:4f:57:37:c2:d7:6e:97:a2:53:
         56:3d:e9:c0:d3:b0:d4:04:ae:40:09:aa:e1:c1:a8:76:6a:16:
         ea:c9:52:cc:27:da:d4:da:e5:c3:5c:b6:50:1d:9e:48:8e:a6:
         bb:a2:9e:32:49:43:03:3b:d6:86:e5:92:8d:80:af:01:6e:8e:
         6f:18:1d:5d:8d:5b:f3:3d:49:91:6a:6d:01:b8:07:36:34:1a:
         4d:50:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:31:15 2025 by rpki-client