Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File:                     k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier:          FCtWldGs8AGzpEgfd5pRnM9JtWYWZKuqdd/NMESAL/s=
Subject key identifier:   2E:95:2F:F7:03:D6:59:47:85:8D:D7:6A:0A:AE:96:A9:1A:14:D9:F2
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer:       /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial:       0196AA30E148A8C919855A54C42FB2179FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number:          1379
Signing time:             Wed 07 May 2025 10:00:52 +0000
Manifest this update:     Wed 07 May 2025 10:00:52 +0000
Manifest next update:     Thu 08 May 2025 10:00:52 +0000
Files and hashes:         1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=)
                          2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: mrTvUSLTiJzN2HlzHLY9fQXqdaN7c0OhD13F39526cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:30:e1:48:a8:c9:19:85:5a:54:c4:2f:b2:17:9f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
        Validity
            Not Before: May  7 10:00:52 2025 GMT
            Not After : May  8 10:00:52 2025 GMT
        Subject: CN=2e952ff703d65947858dd76a0aae96a91a14d9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:40:04:9b:fe:a9:1a:c8:29:02:5a:7c:14:6f:
                    dc:f6:01:e8:26:cb:c6:17:9d:cd:08:e2:9e:70:89:
                    28:62:64:9f:fe:ce:76:67:5d:f7:75:21:6b:75:8d:
                    10:31:bc:ff:18:85:60:dc:e8:d0:c7:55:bb:ef:af:
                    1f:e1:a1:ae:22:e7:d1:4f:32:6c:77:e3:35:28:44:
                    2d:e2:91:17:fc:41:66:89:84:40:f9:7e:a7:09:38:
                    e8:1a:c0:57:ab:7d:b8:76:8e:ec:89:f9:69:0a:11:
                    98:a2:5c:51:70:ac:6e:be:86:37:a8:7a:a2:f7:7c:
                    32:fb:32:2e:8f:a8:0e:0a:0e:c2:e3:9c:2e:4d:6c:
                    05:81:43:87:40:b1:b7:88:0e:8a:97:86:a5:3d:bc:
                    df:5b:c8:61:94:f1:c8:e2:fe:e6:3a:5c:b2:8f:44:
                    53:ee:78:be:f3:3c:5a:bf:be:bf:21:05:b8:8b:dd:
                    61:2d:ef:4d:a8:7b:32:28:ab:63:e0:76:9d:d8:df:
                    a5:18:6b:6a:b3:81:9c:53:e5:a8:1e:04:87:ae:8a:
                    e9:ff:82:82:16:eb:61:63:e2:b2:e3:6d:41:38:ba:
                    1f:17:44:60:35:80:2c:d7:4d:59:f4:1a:a8:b3:5f:
                    96:91:a5:ec:4f:c8:31:63:6c:83:bc:9c:e0:fe:b1:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:95:2F:F7:03:D6:59:47:85:8D:D7:6A:0A:AE:96:A9:1A:14:D9:F2
            X509v3 Authority Key Identifier:
                keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:4c:c1:70:81:f1:19:6a:da:9d:3d:02:3a:0a:32:e8:5b:
         66:13:3b:eb:a1:0b:c3:57:2a:49:aa:e0:0d:30:c8:05:62:44:
         90:c5:5b:46:81:13:f1:15:e0:2a:0e:7e:0e:3c:a6:7b:4d:d3:
         fa:64:84:d4:21:7a:1a:15:6a:a3:c0:a7:a2:e8:e2:9a:43:14:
         ba:1c:94:18:f3:5d:ae:ae:a1:40:00:0b:08:eb:19:01:20:1a:
         dd:55:48:65:26:b7:b6:f2:bd:32:b9:1b:be:d4:0a:43:4c:54:
         2e:18:41:7d:55:db:6b:8d:91:d2:e0:fe:59:23:61:24:93:e1:
         ed:fa:b3:c3:16:27:0d:dd:a6:47:41:ec:3c:97:c7:68:d2:8c:
         a8:b4:3b:ff:43:ab:19:58:d1:58:33:ec:6d:02:e2:1d:7d:86:
         7a:92:64:ee:e5:ea:72:92:b3:fe:db:3e:f0:b1:76:8c:79:83:
         8d:84:dd:14:32:e0:bd:bb:cc:10:bb:db:4f:60:4b:49:ec:e7:
         80:f7:65:c4:3c:2b:dd:c1:29:89:42:b1:ca:d7:56:c8:e6:3e:
         32:89:e9:4a:7b:f7:65:9d:6f:4e:fa:42:3e:45:f2:bc:88:78:
         1c:bd:22:96:29:02:e4:ff:d1:d4:8d:80:9b:0a:5e:d1:fb:a9:
         e5:90:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:37:49 2025 by rpki-client