Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          eaSavjYPxW3YCKnxamqAYDWuH2O4Ie+wGfULxX4C8l0=
Subject key identifier:   BD:26:92:78:9D:FD:89:D7:9D:C2:A8:5F:EF:02:20:54:F4:B7:EC:F8
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       0196C15DB6082685C0D47EC48F0DB3C99F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          0219
Signing time:             Sun 11 May 2025 22:01:06 +0000
Manifest this update:     Sun 11 May 2025 22:01:06 +0000
Manifest next update:     Mon 12 May 2025 22:01:06 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: rhCr7yQHW5UZp652hjk2wYOJ2K50GJM/EX90DR/YKHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:b6:08:26:85:c0:d4:7e:c4:8f:0d:b3:c9:9f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: May 11 22:01:06 2025 GMT
            Not After : May 12 22:01:06 2025 GMT
        Subject: CN=bd2692789dfd89d79dc2a85fef022054f4b7ecf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c6:a8:15:2c:8c:03:be:15:a9:9e:9d:98:a0:
                    c1:68:dc:86:97:79:61:98:57:a9:80:77:da:0b:94:
                    be:13:e9:11:fc:46:d3:4d:51:9e:33:e3:25:9b:2e:
                    21:85:ef:6b:de:b8:20:52:da:60:cf:64:5f:62:66:
                    70:70:aa:00:71:13:d7:e6:2d:28:d1:e9:f4:e7:df:
                    dc:e7:0c:32:56:14:e5:82:e1:13:d2:77:5a:22:93:
                    38:ce:0b:5b:6c:71:51:ae:2e:25:83:6f:3f:a3:12:
                    79:9b:b3:f4:d4:91:a3:d7:85:83:13:38:6c:4e:ce:
                    0c:56:5b:10:8f:15:38:c1:2e:62:43:e3:e9:bc:6f:
                    57:f8:0a:d4:00:4b:9e:bb:db:b9:f3:86:56:00:ad:
                    22:33:4b:76:e8:4a:51:a2:76:f7:9e:e3:4d:18:8c:
                    a1:20:be:a8:64:fd:6f:ec:c5:f8:c9:7c:e2:46:10:
                    04:ad:02:73:c1:64:af:f0:a3:d3:ae:49:bc:e5:8f:
                    9d:6a:6c:86:a9:dc:21:7c:25:2a:cb:e8:15:06:33:
                    d3:99:95:7c:a5:b0:3d:cc:e3:b6:48:3f:d5:a9:ca:
                    f0:1b:37:57:49:82:d0:d5:f3:65:b4:ba:49:29:48:
                    84:e5:38:e7:5e:40:83:39:8a:3a:ab:40:d8:2a:e4:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:92:78:9D:FD:89:D7:9D:C2:A8:5F:EF:02:20:54:F4:B7:EC:F8
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:34:73:b5:7d:e7:8a:a0:c6:1b:3f:96:f8:8c:cd:1c:51:a6:
         ae:a6:e7:8e:3c:ba:c7:4b:6a:9b:4f:a7:f0:3e:62:04:72:e8:
         b9:07:cd:25:a3:e4:50:fa:96:54:68:74:1e:2f:57:24:0c:e8:
         b6:9e:1a:5e:4d:af:28:37:86:b9:20:5a:e4:e8:a5:6a:be:3c:
         5e:f2:89:29:87:f5:5b:c3:b9:04:03:56:4f:14:df:ad:b5:d2:
         39:8c:a3:66:4e:1e:26:19:c8:32:91:e1:31:00:aa:58:76:f5:
         21:ca:e4:b7:2c:f1:98:bc:97:56:0d:a6:c9:7a:23:89:24:11:
         a8:34:22:90:1d:3f:2d:73:b9:4a:c5:4a:7f:2b:ee:7d:95:09:
         b1:f2:6f:5b:5e:45:33:35:54:06:18:34:9e:ed:2f:3e:32:a4:
         04:cc:e3:bb:13:a6:cf:64:0a:2a:12:92:96:0f:de:95:fb:2a:
         2f:0e:41:20:a4:45:ef:12:7c:66:a9:8e:ce:86:d9:83:c3:c6:
         e4:2c:aa:60:74:07:a6:5b:08:09:c8:87:b3:cf:41:6b:39:e4:
         4d:96:ec:4d:90:fc:2a:48:6f:f2:0c:17:60:55:8b:ae:c0:a1:
         db:e7:e6:c2:4c:a9:cb:d1:34:e2:0c:20:5d:1f:6e:b9:68:67:
         90:e7:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:08:36 2025 by rpki-client