Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File:                     JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier:          exk2bODgy95e40pNRMeX76VKJnXrPYSFLAVyN8HykGI=
Subject key identifier:   33:04:4E:0E:13:6F:51:F4:74:CB:6A:E5:40:D0:F7:10:DE:FF:04:8D
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer:       /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial:       0197B6A0F715DED5C6627260382771627714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:31 +0000
Files and hashes:         1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: Pry1HdLBUJ+AB9GPbOyXK5rM6k1qsLVl1BEYqNiDnOA=)
                          2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:f7:15:de:d5:c6:62:72:60:38:27:71:62:77:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
        Validity
            Not Before: Jun 28 13:01:31 2025 GMT
            Not After : Jun 29 13:01:31 2025 GMT
        Subject: CN=33044e0e136f51f474cb6ae540d0f710deff048d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:84:85:fe:d5:a0:81:70:84:36:b9:55:e3:
                    1a:0d:8b:8a:09:8f:5a:86:c1:6a:24:f6:8f:07:d4:
                    8b:03:11:9a:74:e7:a3:f4:07:57:d6:db:8b:a6:f8:
                    ca:eb:0c:85:90:ad:89:b7:13:32:8f:98:0d:66:52:
                    44:b2:6c:6c:68:a7:37:b6:f2:15:df:66:61:e6:d5:
                    9b:84:fd:07:62:26:98:0f:49:23:08:8d:4f:86:4c:
                    3b:0a:df:89:62:2c:fb:98:db:b0:0b:eb:d0:8c:93:
                    2a:bd:b4:69:56:76:aa:e4:ac:d4:f8:4a:dd:6d:25:
                    5d:d2:79:28:90:d1:c1:93:72:5e:14:a1:24:40:d3:
                    99:4b:a7:ac:98:ff:52:78:fe:a7:19:1e:0a:cc:4e:
                    1f:24:45:37:3b:9c:4b:b8:80:e4:a7:96:af:5f:2b:
                    77:9e:4f:d8:f0:e5:4c:d5:41:7d:4a:8a:2c:55:2f:
                    71:7f:a2:40:75:bf:64:6b:c4:98:65:8c:ca:c0:0b:
                    2b:fe:6a:6d:c1:76:f0:55:05:28:ae:fa:39:80:7d:
                    30:06:b5:a8:f8:11:fe:80:45:81:42:5e:02:3b:98:
                    9e:52:7f:8b:26:c9:68:30:31:0a:04:14:46:8b:0c:
                    38:24:c4:9f:9c:4f:f9:41:21:eb:df:51:50:58:86:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:04:4E:0E:13:6F:51:F4:74:CB:6A:E5:40:D0:F7:10:DE:FF:04:8D
            X509v3 Authority Key Identifier:
                keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5c:4b:b3:1a:0a:08:74:34:8c:be:b3:d8:48:45:4f:f0:59:
         55:da:dd:8c:05:13:9f:81:cd:88:e2:22:a1:09:73:37:7c:ab:
         c2:ac:47:2a:be:8f:d3:95:fc:3c:8b:7c:4d:a1:60:10:12:ab:
         7b:2a:89:a0:86:b3:c8:0a:ee:70:72:dc:36:d5:cf:5d:eb:5c:
         7a:ea:bc:5a:9d:fb:1d:35:f1:65:26:94:16:e9:f9:a7:e1:bb:
         57:a3:96:97:ac:7f:b5:40:ae:6a:86:3d:84:16:2f:dd:9f:c4:
         38:26:30:59:9f:8c:76:7d:0c:1a:b5:4a:e4:25:2b:9b:ee:0a:
         c7:49:86:ca:8c:c3:06:95:06:7b:a9:65:49:f6:59:4e:42:9b:
         85:93:f2:cb:eb:d5:c8:19:c9:04:16:ca:14:ec:48:dc:3b:fc:
         12:c0:bd:9f:e0:5f:de:e8:b8:f5:a8:66:f8:d6:57:ca:d2:81:
         40:e3:c7:d9:62:8f:3e:f1:eb:96:5f:ba:d8:89:77:d6:51:20:
         41:0b:62:2e:12:aa:25:f7:04:4d:16:8c:1c:19:2a:d1:1d:89:
         df:a7:b5:e6:4c:57:94:62:04:b0:43:5d:b7:8f:88:13:a7:b6:
         b4:df:8e:b1:00:dd:39:0a:eb:b0:38:61:06:20:c2:3e:bf:8b:
         1c:64:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:48 2025 by rpki-client