Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
File:                     JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json)
Hash identifier:          Hm1OZITPWIGIwqLVBK7PAB6Dhy3qwtlQCbKef/0iHBg=
Subject key identifier:   51:4B:8B:D1:04:8D:21:5A:06:83:9A:74:E5:46:31:96:46:95:C0:BE
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Certificate issuer:       /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial:       0197B632ABD43ADE84E7FCFBC5D7AB7DBE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
Manifest number:          10E8
Signing time:             Sat 28 Jun 2025 11:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:03 +0000
Files and hashes:         1: BQcLEt_fhF3T8cK9G4llL9qzCF4.roa (hash: HsXDiNZ/6cIaXPnh2ptBxpxCA2P5yT/9b+aknpD6TWU=)
                          2: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: GIwdfcLsOpZRooQFcovxEwOEFmCQzsnB+wN8KmVNI70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:ab:d4:3a:de:84:e7:fc:fb:c5:d7:ab:7d:be:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
        Validity
            Not Before: Jun 28 11:01:03 2025 GMT
            Not After : Jun 29 11:01:03 2025 GMT
        Subject: CN=514b8bd1048d215a06839a74e54631964695c0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:28:96:ee:53:1d:f5:ad:9f:b6:7e:87:8c:
                    d5:54:79:19:e9:11:cc:20:c9:9f:84:2f:e7:db:67:
                    64:9a:ba:35:1e:ff:9e:f8:e1:e7:2f:03:25:1b:3b:
                    68:de:a9:14:c3:d2:42:2b:f4:b7:d8:0f:c2:d6:fb:
                    61:c9:0e:9d:a3:2d:be:13:99:78:50:e7:84:4d:34:
                    f3:f7:2a:91:72:2f:54:77:9d:90:4e:82:ee:4f:1b:
                    4e:66:2b:48:7e:42:d4:16:25:f5:4e:8e:6b:c3:7e:
                    ba:87:d7:b9:23:2f:7e:09:8b:0d:cd:f0:2f:ea:19:
                    7c:3a:d5:9b:19:11:64:b6:2a:9a:51:b9:e5:22:d4:
                    26:1e:31:b1:39:6d:01:01:0b:5a:78:41:6f:55:d8:
                    3b:ee:2c:6a:f8:02:48:a9:79:e2:b5:78:67:7b:0b:
                    89:df:dd:ae:6c:d6:0d:98:85:64:4b:f9:67:b5:56:
                    e5:74:2f:0d:06:95:12:96:15:10:a0:3b:04:7c:b0:
                    3e:eb:e3:5e:23:eb:7e:e6:0a:f2:e7:fc:87:29:3e:
                    70:ae:7b:12:59:f1:45:c7:af:09:31:72:bc:c7:16:
                    e6:50:fd:13:7e:a8:12:32:68:d5:4e:47:7d:0d:00:
                    6a:98:22:79:e0:0b:d7:f3:6b:f4:0d:69:65:f5:dd:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:8B:D1:04:8D:21:5A:06:83:9A:74:E5:46:31:96:46:95:C0:BE
            X509v3 Authority Key Identifier:
                keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:5a:c4:a5:aa:38:fd:68:67:bb:9c:20:66:c0:7c:d1:4a:
         a4:59:fd:4d:d5:7b:8b:04:a2:84:5c:27:88:c7:20:f5:df:fd:
         d8:a1:f9:11:8a:fe:c9:de:37:f4:fd:72:06:51:71:15:d5:8c:
         2b:65:53:f1:a8:e4:47:81:22:ed:e9:5e:99:be:ff:04:ab:c9:
         80:b4:fb:99:eb:bb:68:9e:94:ee:fd:92:8c:6a:14:28:df:a1:
         92:c8:92:a8:96:7b:38:27:67:62:65:9b:4a:07:ae:05:37:f0:
         ef:27:da:dc:9d:e7:e8:0f:65:92:e4:1a:81:13:3e:0f:b5:54:
         7d:91:7a:dc:fb:42:2e:d5:84:ec:b3:82:0f:18:82:1f:f3:50:
         16:cc:f8:42:7c:89:e5:65:c6:53:ae:69:f2:20:e1:62:84:b8:
         45:b9:30:63:07:9e:c2:67:7d:d7:b1:46:a7:54:02:9b:3b:87:
         eb:7a:76:a3:72:1c:a2:1d:7e:d0:13:f2:de:5c:5b:a0:05:e6:
         e3:55:9d:2e:80:29:b0:0d:a2:5f:94:d2:25:6b:77:cc:61:e8:
         56:30:a0:36:ee:3c:ef:b4:7a:03:46:60:3a:57:c8:5e:78:56:
         3c:f8:11:0d:68:87:2e:5d:4b:47:c5:d0:6c:03:4e:bd:77:0b:
         80:09:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:55 2025 by rpki-client