Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File:                     JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier:          X5LWgTnjdI2Go5/bP3BA9O71StUtxgSyWSRET3pFktM=
Subject key identifier:   81:29:60:08:E0:B3:34:2B:6C:7B:3B:C4:91:D8:4C:9C:23:BC:D3:38
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer:       /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial:       019684A3B0F8451BA4C9B438B53420B05B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number:          1515
Signing time:             Wed 30 Apr 2025 03:00:42 +0000
Manifest this update:     Wed 30 Apr 2025 03:00:42 +0000
Manifest next update:     Thu 01 May 2025 03:00:42 +0000
Files and hashes:         1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: RoFZ0wXCFEUwNqa59lOaaKsdJvPjl09Knu/rzA8mI+I=)
                          2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:a3:b0:f8:45:1b:a4:c9:b4:38:b5:34:20:b0:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
        Validity
            Not Before: Apr 30 03:00:42 2025 GMT
            Not After : May  1 03:00:42 2025 GMT
        Subject: CN=81296008e0b3342b6c7b3bc491d84c9c23bcd338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:57:cc:55:38:fd:b9:18:1c:f9:79:d0:22:
                    3f:75:f0:58:83:d6:7e:85:d2:a3:f5:82:f6:9a:bf:
                    d1:04:75:e1:ac:32:58:0f:e8:7e:97:17:f1:bc:08:
                    b2:80:2c:54:9b:9b:cf:01:fd:47:69:bd:d4:23:49:
                    96:a1:0a:50:c8:de:ad:8c:5a:4c:52:7f:7b:59:33:
                    87:da:bb:27:f3:5a:80:6f:84:6e:fd:a6:66:3a:27:
                    74:02:74:87:37:5b:54:aa:5f:91:79:66:ab:d3:a7:
                    6f:b3:fe:e2:13:e1:2e:c3:74:78:40:aa:eb:19:c7:
                    94:df:74:07:02:2a:75:a0:90:dd:60:48:ef:97:8d:
                    c3:25:21:43:46:e0:3d:b6:a2:09:ba:dd:04:c3:c8:
                    98:c8:f8:72:23:cd:77:dc:73:f1:68:65:3d:3d:54:
                    40:a0:58:46:19:96:f8:22:13:0c:f3:f6:4c:d3:31:
                    bf:bb:2c:1d:5b:6e:a7:28:cf:c7:75:87:6c:9c:03:
                    cb:d9:d5:23:d4:95:e2:52:2f:88:0a:7f:b0:ea:b3:
                    84:17:e8:dd:54:43:0e:c4:c4:95:d9:68:e0:ba:02:
                    0f:70:a9:08:f6:71:7b:dd:78:24:a5:2d:64:f2:ab:
                    b0:f2:82:ba:02:91:dc:e7:f9:9b:c6:b4:8e:3e:f2:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:29:60:08:E0:B3:34:2B:6C:7B:3B:C4:91:D8:4C:9C:23:BC:D3:38
            X509v3 Authority Key Identifier:
                keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8d:2a:88:ef:59:12:a6:2e:90:0d:ad:b9:9f:4b:e4:3d:72:
         d7:1f:98:41:7e:72:32:31:65:2d:fa:2f:0b:fc:95:e7:30:8a:
         79:1e:36:4a:f2:cf:55:7d:da:fe:b9:02:81:08:ee:59:4d:9c:
         34:6c:79:bb:84:ed:c7:14:85:8d:cb:59:6e:fe:52:94:19:72:
         8f:42:88:f6:86:38:61:4b:24:2a:2d:35:5d:a1:52:be:bf:97:
         f3:ee:c5:0a:69:62:31:c3:45:a8:84:e3:7b:5a:bd:99:94:90:
         a2:e8:fe:5d:d0:3d:70:92:75:a6:dd:84:3c:44:83:9b:ef:d5:
         72:a4:ca:18:a9:fc:5e:49:35:4c:ed:27:61:f1:1e:b5:85:1a:
         38:88:e0:e2:96:b0:e0:a0:bb:01:1f:6a:14:6d:03:9b:88:50:
         b0:48:c5:29:11:f7:21:75:b9:fb:ca:97:a6:92:85:6a:b8:33:
         18:b5:11:69:ca:3e:0b:76:06:97:3e:ce:c1:ec:ff:b9:4a:03:
         e0:25:e6:86:be:00:2a:dd:73:94:1b:ed:d3:ff:b2:9d:6f:3a:
         cd:b5:0d:2f:57:a3:c9:2a:6f:28:16:9f:93:20:85:4a:47:92:
         27:5a:16:e4:4f:da:96:e8:e2:70:86:83:5e:b3:ee:56:ba:4e:
         92:02:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:25:15 2025 by rpki-client