Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File:                     J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier:          z0TASUf545/cgGwvG/LeKQprbk0PXQ6HD6tqANAvG64=
Subject key identifier:   CE:52:83:66:6E:73:0D:7B:40:8C:D9:A9:64:94:D6:9F:CD:BB:68:A8
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer:       /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial:       0196ABB159766B8A37A73087A2A394D6059B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number:          11B0
Signing time:             Wed 07 May 2025 17:00:48 +0000
Manifest this update:     Wed 07 May 2025 17:00:48 +0000
Manifest next update:     Thu 08 May 2025 17:00:48 +0000
Files and hashes:         1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=)
                          2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: UPXPVw63feFGLSeM4cYnCtRW57UARsUUnrUAffXMmuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:b1:59:76:6b:8a:37:a7:30:87:a2:a3:94:d6:05:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
        Validity
            Not Before: May  7 17:00:48 2025 GMT
            Not After : May  8 17:00:48 2025 GMT
        Subject: CN=ce5283666e730d7b408cd9a96494d69fcdbb68a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:62:62:65:74:f9:d1:b0:24:29:d0:db:7e:
                    52:7f:66:9a:83:2c:1d:9e:98:79:52:b3:9d:76:0d:
                    a0:a5:48:dd:f2:c0:22:e2:66:bd:3a:f0:b4:e6:c9:
                    ca:f6:aa:71:eb:b1:73:b0:47:2a:fe:f0:43:80:42:
                    c1:66:88:47:03:e8:25:de:b2:e6:25:4c:08:86:37:
                    c9:59:12:f8:2f:a7:2a:3b:ea:ca:0f:87:3f:01:55:
                    e8:b6:c4:09:4c:c9:6e:8d:2e:f3:0f:56:4f:f8:a4:
                    09:95:17:25:d7:9e:a5:6d:d8:97:7e:c5:d6:d8:6b:
                    b8:f9:66:e8:30:8f:15:ac:28:8c:40:d7:5a:8a:00:
                    e0:f5:57:a9:55:b6:7f:34:03:43:53:33:b7:91:08:
                    69:b8:06:06:32:8c:94:f0:b6:4d:69:9f:77:a9:73:
                    85:3e:8d:d7:ff:e8:cb:ca:c0:8a:14:22:d1:87:6e:
                    81:8a:31:13:85:89:3b:0e:ce:66:52:76:5f:75:69:
                    43:30:19:b3:2a:c7:75:40:31:e3:78:9c:7f:96:46:
                    eb:ce:b7:97:83:a1:34:aa:a3:7e:79:29:0a:b8:8c:
                    0b:a7:ad:32:18:55:52:b6:b2:00:6e:31:e4:4e:2a:
                    cf:41:57:6c:90:53:e6:62:a6:15:60:e6:cd:e9:7e:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:52:83:66:6E:73:0D:7B:40:8C:D9:A9:64:94:D6:9F:CD:BB:68:A8
            X509v3 Authority Key Identifier:
                keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e1:0f:74:95:0c:d4:e5:94:d0:95:90:b4:81:e6:20:2f:64:
         be:8a:45:58:32:f3:e1:20:6f:94:8b:e9:b3:0d:b9:7f:00:64:
         ea:f9:56:7e:92:ca:d5:da:41:3f:da:ef:84:dc:6b:77:25:77:
         5c:4f:dc:87:45:8f:7e:1f:a0:99:32:c1:b1:fa:b5:f0:cd:7e:
         5e:d0:6a:f4:a0:d5:94:3d:e7:01:3b:8b:84:7c:ed:8a:31:e4:
         be:da:25:e9:dd:dc:12:70:49:53:87:22:e7:14:64:98:64:b7:
         05:1c:8d:88:b3:2d:35:1d:11:b5:0c:23:bd:da:3d:87:d6:fe:
         d4:41:7f:25:8e:db:48:a6:a4:20:46:f8:48:1b:c4:72:66:ac:
         1f:0a:c1:a2:3a:72:bd:97:99:a9:65:ca:8f:47:34:da:ce:d9:
         35:ca:b2:75:d8:8a:2b:76:34:6c:14:98:84:fe:70:96:db:1f:
         de:46:87:c8:43:41:ff:75:a7:b7:3c:02:07:98:3a:99:44:b3:
         a6:74:36:e3:61:3f:35:1a:d9:09:6e:a9:92:ea:f2:87:58:17:
         96:58:1c:7c:d4:73:e1:59:3d:44:72:e4:59:d2:82:11:b5:be:
         e8:2b:a5:1f:76:fe:df:ca:2a:5b:9a:e3:7f:49:50:5b:92:ee:
         4b:85:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:40:25 2025 by rpki-client