Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
File:                     JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json)
Hash identifier:          nBu3zrBWawdJgd11LEuuniacBilKndGnB+G9HUTAuSE=
Subject key identifier:   36:90:2B:16:F9:4B:CB:C4:20:17:A9:FD:63:A4:B6:F6:95:EA:A6:1F
Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
Certificate issuer:       /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Certificate serial:       0197B6A0B642AE7BB6133B7AFC09AC186373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
Manifest number:          6A
Signing time:             Sat 28 Jun 2025 13:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:15 +0000
Files and hashes:         1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: kxgVrs+uRuOl4Ghh/OpUTe8aGz1U3/XHW+lGLDLUopo=)
                          2: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (hash: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:b6:42:ae:7b:b6:13:3b:7a:fc:09:ac:18:63:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
        Validity
            Not Before: Jun 28 13:01:15 2025 GMT
            Not After : Jun 29 13:01:15 2025 GMT
        Subject: CN=36902b16f94bcbc42017a9fd63a4b6f695eaa61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:24:d6:83:0a:66:c4:b7:cf:72:db:ce:00:
                    87:ae:51:a7:af:59:7c:45:d7:6a:70:50:f5:07:30:
                    d9:5e:f9:62:26:1f:e8:b6:1f:c1:46:3d:c0:44:d6:
                    69:00:27:0c:ba:22:3b:aa:9f:55:bf:9d:f2:b9:8e:
                    a0:e2:8f:b5:0f:03:f9:03:ac:a1:8c:3c:cc:0e:5c:
                    15:f1:d9:3c:b5:c8:96:ad:85:64:8a:9b:42:79:62:
                    ac:5c:58:b5:79:46:f7:d1:8e:79:be:cc:6d:e5:9d:
                    28:50:fd:da:b4:83:23:54:52:d3:ae:26:30:65:02:
                    55:c6:a3:f8:50:d3:3f:86:b1:c3:da:eb:06:19:ec:
                    ed:c4:16:4b:6c:28:44:fe:6b:f7:8c:9c:68:b6:c5:
                    0a:45:53:df:22:d2:25:ba:7d:be:44:2d:12:44:bc:
                    a5:67:83:44:2c:03:9e:81:50:1e:9d:ba:d3:bb:93:
                    fb:0c:b6:e1:5d:70:be:fa:0a:0c:ff:7a:89:03:6e:
                    b8:d6:99:6b:03:6b:4f:2c:ab:fd:56:53:c2:27:ad:
                    45:1b:a3:e0:e1:83:09:30:55:2b:2a:95:35:b2:d6:
                    f5:40:e7:e5:e1:6c:22:34:a8:76:94:7c:94:57:8d:
                    5a:78:ed:e1:58:15:19:75:bf:97:47:92:4c:d7:2c:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:2B:16:F9:4B:CB:C4:20:17:A9:FD:63:A4:B6:F6:95:EA:A6:1F
            X509v3 Authority Key Identifier:
                keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:77:fb:3c:b9:4e:0b:ea:2a:c8:68:63:cf:42:ac:2a:6f:b8:
         b3:e5:fa:09:47:c9:8d:63:83:6e:1b:16:0c:6c:58:b9:17:cf:
         d5:71:74:28:8a:4a:1f:11:75:d5:38:73:c7:88:9e:e4:93:d3:
         ca:21:96:9c:4a:6d:7d:b7:5a:c4:21:bb:bc:34:f3:37:d8:0a:
         d6:b8:e0:48:fe:7c:49:49:8f:21:bd:c7:9f:0f:4f:d6:06:d0:
         f6:30:fa:62:dc:30:29:e3:db:0a:1a:5d:78:21:ef:6e:82:e6:
         c0:f9:d5:f4:25:6d:94:82:ab:4b:8e:ec:05:2b:16:fc:e0:ca:
         24:fd:5c:45:e4:03:cb:6e:83:48:94:55:46:80:f3:90:5e:01:
         db:f0:e1:f8:a0:7f:db:59:68:98:b1:9e:b0:62:8d:95:29:87:
         fa:9e:c4:d8:da:a3:fa:e1:79:2c:a5:d5:54:e7:5c:2e:a5:ef:
         b4:d9:1f:46:5f:62:5b:91:fc:7d:4c:9c:19:4e:aa:db:2d:95:
         38:40:be:39:36:87:39:76:2c:22:65:29:6b:d4:d2:85:fc:fb:
         53:14:5e:38:14:2d:0a:65:57:62:c3:30:5f:a2:40:0c:5d:ba:
         10:1a:d3:ef:b0:b5:18:d5:d3:59:ed:1a:bf:92:e0:bc:67:e9:
         d1:4c:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:59 2025 by rpki-client