Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          +4fwHXRCtfdRwk0ulXCkGuUy+woILBfOrHDdBUS/p5s=
Subject key identifier:   87:42:E5:58:29:FB:FA:E6:A7:B1:66:65:29:58:E9:96:29:EC:EF:8E
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       0197B6A19057E766CCA6146DDE1ADD3D3A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          108F
Signing time:             Sat 28 Jun 2025 13:02:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:10 +0000
Files and hashes:         1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
                          2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
                          3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: 3hixfYrBSa2D3UdNxInEBa7J4LayR7qs8HQaKvvCqgM=)
                          4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
                          5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:90:57:e7:66:cc:a6:14:6d:de:1a:dd:3d:3a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Jun 28 13:02:10 2025 GMT
            Not After : Jun 29 13:02:10 2025 GMT
        Subject: CN=8742e55829fbfae6a7b166652958e99629ecef8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:09:58:8c:c2:4c:c2:6c:7c:48:8f:6f:8d:
                    46:54:c5:da:58:ad:73:66:14:52:6c:06:c1:96:ab:
                    63:a3:0b:53:f7:2f:ff:05:02:53:7b:e6:7e:df:8c:
                    04:dd:72:aa:c3:ea:d3:d1:58:a9:4f:88:5b:d2:d9:
                    e6:04:db:dd:c0:92:b6:70:d3:ee:36:f2:c9:93:32:
                    1e:61:77:41:9b:a1:79:33:fa:3a:24:6a:a1:5d:af:
                    01:04:fa:c7:0e:6f:62:cf:74:70:4a:f7:ae:92:82:
                    e6:2f:2f:4d:45:1a:d9:9d:ee:25:35:9b:72:df:c2:
                    f2:94:96:90:4b:ba:1e:f4:11:46:04:14:83:9f:c9:
                    8c:be:8f:4c:8f:cc:91:00:00:cc:b5:41:97:87:9a:
                    f0:d9:c1:0f:4f:34:81:cd:d0:74:33:58:b3:0d:20:
                    59:1a:74:01:ae:e9:07:95:24:cf:60:e8:75:ed:8a:
                    38:80:d9:ad:39:7c:ad:f3:59:84:9d:74:47:78:bc:
                    cd:8c:30:33:ee:6d:2c:ae:6b:af:db:e6:2e:d6:e0:
                    91:8b:c7:6a:49:77:de:ca:0e:4f:7f:4c:13:66:36:
                    ad:23:1f:af:86:d2:d6:f6:68:5e:82:48:15:f2:c6:
                    21:58:29:6c:37:a3:7b:d6:9c:89:62:5b:64:a7:4d:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:E5:58:29:FB:FA:E6:A7:B1:66:65:29:58:E9:96:29:EC:EF:8E
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:24:5f:7f:a7:0d:9f:8e:eb:27:26:52:b4:46:42:21:0e:
         5d:82:0c:79:67:a6:40:a0:74:0b:90:b1:56:c5:76:af:9d:b9:
         c7:13:1f:8e:64:e2:8c:8c:4a:08:bb:ae:a9:48:49:d0:dc:93:
         6b:0a:08:cd:b5:91:51:8f:af:60:2d:75:1f:39:e8:cf:fe:d7:
         2c:67:7a:24:fa:6e:f7:66:14:a7:d1:3b:8f:c5:d6:6b:3b:d7:
         34:a3:73:a5:fc:72:d7:d3:9d:11:f3:df:39:00:b4:e2:22:7f:
         f2:65:87:47:13:9c:e1:fe:90:ca:88:e6:d0:95:2b:fd:26:aa:
         01:88:ca:cf:cf:12:16:98:ae:1a:6e:0e:59:2e:b4:4c:f8:f2:
         3b:b7:7c:aa:74:4c:91:83:e7:5d:87:bd:9a:ca:a6:3d:de:a3:
         d7:59:a9:97:df:b3:cc:ad:d4:02:6f:22:28:7f:d4:64:f3:c3:
         f6:18:05:28:13:dd:63:b5:aa:e7:dd:51:0e:88:6c:3a:48:4b:
         7d:83:10:a9:b7:8b:85:c3:53:3e:4a:4c:17:b0:0b:b2:14:7b:
         d9:04:31:6e:6e:a5:ac:79:71:e7:32:c8:da:a2:13:1d:30:90:
         56:06:43:c5:98:b7:bf:2a:e7:9f:6e:0c:4f:d7:46:fb:c1:a4:
         77:6e:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:19 2025 by rpki-client