Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          Fc9h+tRjm//70sUqCGLpKJJzVWhR1n41DkngH3B5Fcg=
Subject key identifier:   4C:46:4A:6B:7C:43:60:26:A7:4C:8E:FF:A4:69:2A:F8:8B:CE:80:58
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       0196C04AE44E443C9596D3548BF61C208972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          156B
Signing time:             Sun 11 May 2025 17:00:55 +0000
Manifest this update:     Sun 11 May 2025 17:00:55 +0000
Manifest next update:     Mon 12 May 2025 17:00:55 +0000
Files and hashes:         1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=)
                          2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=)
                          3: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=)
                          4: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=)
                          5: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=)
                          6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=)
                          7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: SaMEX5PMY8YjvRDaWDLb8sU9kfFuks58skZzYBP39YI=)
                          8: R1MyqdNbJMXA2B9hCOoJVtEYSAo.roa (hash: Oyl4OLft0GlbGZgUB6suVirp+SJlYsYQ9M9olwoUBhU=)
                          9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=)
                          10: ZKvHQby0NQ22M7VFCjQ_KqulEx8.roa (hash: ivLBRNaqrPZubBjRNX4dYKOMZvwYNsaC4yTeWqcGhaw=)
                          11: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=)
                          12: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=)
                          13: kyMlmgxE2NuIqIqIAI93nroZbro.roa (hash: 4ZYyau6JeZt1ZwMFqMR8X9diyi4hbBHuoLH5EqZOW7w=)
                          14: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=)
                          15: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=)
                          16: rGuulbHd9kRPQ-Vjw-QiFUOKt_A.roa (hash: B7yPzOPI+uMdkQOcYQEtalAjsrTFRRTxVc7BxeoQZ2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:e4:4e:44:3c:95:96:d3:54:8b:f6:1c:20:89:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: May 11 17:00:55 2025 GMT
            Not After : May 12 17:00:55 2025 GMT
        Subject: CN=4c464a6b7c436026a74c8effa4692af88bce8058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:29:9d:7b:6d:f0:e4:26:fa:96:61:ed:e7:
                    2e:99:d7:24:3a:7d:9f:34:f6:cb:c4:58:8f:e1:cf:
                    9e:09:fd:f0:03:5f:6b:c8:fb:ca:a9:02:37:d6:60:
                    0b:26:c6:f9:70:b8:82:a1:ac:d0:cc:c1:c7:10:84:
                    33:d4:e6:88:94:ec:5f:e6:a9:88:10:99:c9:0e:c5:
                    5b:c3:9f:f0:db:c8:d9:9b:1b:23:0c:bc:c5:66:85:
                    87:34:83:28:b6:1b:03:1e:c4:12:3b:6c:5d:59:56:
                    7e:df:ab:fc:ed:a5:fa:ec:51:fb:47:c9:e5:a3:94:
                    6e:d7:a7:fb:a1:bc:38:93:ba:45:23:07:ad:f1:9e:
                    c7:a3:a8:1a:6c:d8:57:9f:f1:ee:79:8f:ef:95:bc:
                    55:8b:75:e1:55:30:13:a6:e8:3b:ba:b0:8d:06:13:
                    d7:dd:8d:45:df:c4:d2:32:a5:17:c0:1c:97:e5:3e:
                    f7:0c:05:d7:be:1b:37:56:a3:2d:a0:8c:2f:a5:42:
                    a8:0d:92:c0:1c:ee:9e:d8:49:7b:46:a0:4c:30:de:
                    c2:08:4c:c4:61:58:f0:68:a1:6d:04:41:27:5b:26:
                    a0:cb:6e:0f:15:dc:a9:8f:1d:60:a0:43:fe:e9:a4:
                    3c:82:a0:c3:29:77:5d:4e:6b:28:76:d8:28:16:5c:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:4A:6B:7C:43:60:26:A7:4C:8E:FF:A4:69:2A:F8:8B:CE:80:58
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:33:b2:f0:9d:80:95:20:76:31:14:89:27:67:25:82:08:
         d1:b1:f3:62:8c:e2:f5:dd:cf:2f:29:6c:02:3b:6e:e9:8c:ce:
         c0:53:a7:3e:4c:f5:46:17:20:a3:da:49:74:3f:3b:9c:a2:90:
         dd:9f:87:8e:2a:f1:12:e2:29:6c:18:77:db:f5:e6:f4:f7:05:
         05:17:29:6e:41:07:0d:94:34:43:c5:b0:e5:01:44:f2:d8:80:
         4a:89:fe:47:55:57:94:15:be:18:0e:2b:06:81:dd:48:71:a6:
         81:7c:a0:33:65:b8:ac:0e:8c:8b:80:8c:19:a5:68:c9:f7:37:
         25:40:af:a5:08:f7:24:cf:dc:a9:16:49:fb:67:2a:da:f8:81:
         39:7d:77:cc:d6:b5:54:72:39:1e:18:8e:af:07:c8:47:71:47:
         49:ce:9c:dc:05:1b:a4:6a:06:9e:e8:6f:e6:8a:a2:d4:db:84:
         7e:b4:fd:23:a4:3c:0d:a2:ad:56:c6:0e:82:f4:7b:e7:9b:14:
         da:70:23:c1:00:d6:19:77:01:f3:2c:8e:32:56:fa:5a:78:b8:
         38:06:61:b4:f2:9a:75:42:8b:d2:d5:12:8d:a4:6f:ea:74:e1:
         78:4e:5a:fb:f5:08:e2:17:d4:4e:23:89:d8:3f:0e:a2:24:84:
         5b:c5:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:50:09 2025 by rpki-client