Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File:                     JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier:          rwYlemqVOqjoQgvqW7r3toF6HAkmH/OVFEGKj7sW64k=
Subject key identifier:   A2:B2:3E:81:13:F1:0E:FC:AB:53:FD:FB:F2:A1:C6:6F:85:35:67:BA
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer:       /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial:       0196BA7F1E006B4470A038654317DDF0228C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number:          1278
Signing time:             Sat 10 May 2025 14:00:15 +0000
Manifest this update:     Sat 10 May 2025 14:00:15 +0000
Manifest next update:     Sun 11 May 2025 14:00:15 +0000
Files and hashes:         1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: g2g2ViwJZHlCP0EQXxEVRjMkRxkrK/21ab7IbNzJWxc=)
                          2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:1e:00:6b:44:70:a0:38:65:43:17:dd:f0:22:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
        Validity
            Not Before: May 10 14:00:15 2025 GMT
            Not After : May 11 14:00:15 2025 GMT
        Subject: CN=a2b23e8113f10efcab53fdfbf2a1c66f853567ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:88:f0:2f:d1:f5:1a:9f:e8:b3:6d:ca:a8:
                    6f:2e:e0:1e:a8:e3:76:9e:ad:71:5c:78:a9:48:10:
                    ef:09:9d:88:c6:68:09:a5:6a:97:11:6f:80:1e:42:
                    61:b8:3b:8b:57:24:41:a6:c3:e5:fc:6f:cb:9b:df:
                    60:ba:81:95:a9:e3:d5:0b:e1:de:c5:ce:f9:1b:a1:
                    16:f2:08:9d:eb:a5:ed:bc:98:0c:69:b2:36:d9:e8:
                    39:95:a3:6a:7e:b0:08:f5:d4:14:f2:47:ce:c0:62:
                    0f:30:cd:31:e1:13:d6:50:1e:f6:7a:3d:92:c2:22:
                    f6:fc:5c:de:2f:b3:82:8e:4a:cd:63:ce:bb:ad:81:
                    e5:f1:2c:74:a4:04:2b:1a:c7:93:f7:d4:17:00:99:
                    1b:21:ac:02:09:aa:db:d6:6f:87:47:fd:50:c3:82:
                    dc:7a:e0:d3:5a:d7:c8:38:c2:1d:f5:79:3c:05:b0:
                    5b:66:19:3f:18:c9:ff:71:e6:8a:b8:d3:4e:1b:93:
                    79:d9:db:be:06:03:c0:c3:3f:b8:ba:54:4e:b0:b7:
                    c0:2b:9b:95:82:0d:7a:e6:83:d1:13:d2:50:db:9d:
                    58:a6:2a:45:59:f8:97:ad:b7:ff:6a:3e:9c:d0:c6:
                    69:6a:5c:58:d8:e4:29:ef:6f:05:7f:5f:c8:b3:50:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B2:3E:81:13:F1:0E:FC:AB:53:FD:FB:F2:A1:C6:6F:85:35:67:BA
            X509v3 Authority Key Identifier:
                keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:b2:ed:89:51:cb:99:d6:d6:cb:93:dc:56:7f:6a:40:10:
         04:2f:dc:f0:23:c2:f6:8f:13:c2:9a:35:22:3c:5f:a9:63:ca:
         10:bf:1f:ea:2c:ce:cf:ea:a8:2d:60:50:5c:fe:b6:5d:ba:d0:
         c9:43:08:51:e1:87:4e:5c:15:1c:60:a5:95:d5:c9:d3:dc:c4:
         77:ad:3c:4b:9d:88:b4:79:bd:6a:9f:96:6f:c8:12:c7:69:56:
         27:a3:17:81:ac:52:1f:fb:d7:c7:4a:6c:d7:46:36:68:5d:08:
         f6:70:5b:cf:75:e9:3d:48:ab:00:7c:1b:eb:47:af:bb:98:1c:
         aa:2a:67:2b:12:42:84:71:48:1b:39:cf:51:49:b8:be:77:07:
         b7:78:45:c0:11:6e:58:3b:65:2a:c5:c7:6f:dd:0f:0e:64:97:
         02:79:ac:6a:47:30:5f:db:bc:7a:4c:c0:55:d0:a0:f7:fa:8a:
         60:b0:2f:2d:69:39:53:23:4e:fd:ad:e7:1d:40:d8:1c:ba:be:
         ae:92:d5:03:c2:21:31:44:f1:b8:91:70:c1:e9:cc:75:84:55:
         82:09:95:23:d8:20:75:d8:7a:33:3c:20:5e:41:e8:3d:2f:5b:
         93:77:31:dc:78:d1:b5:fb:65:f1:c5:3f:33:fb:71:85:42:c4:
         27:d8:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:10:48 2025 by rpki-client