Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          iz4ya2l6feW0e2G1CawOIascted/EtkyvLhix4RrKWY=
Subject key identifier:   B7:F0:F1:FB:92:15:0C:97:3E:65:B5:83:50:8D:FF:7F:44:6A:D5:8D
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       01976D3E12228BD58C29418CAD40AAB693F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          1207
Signing time:             Sat 14 Jun 2025 07:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:13 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: 6uR12J7oMDTAEn5kDir/Daz5w99rGV/lSRNKTydjEzM=)
                          2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:12:22:8b:d5:8c:29:41:8c:ad:40:aa:b6:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: Jun 14 07:01:13 2025 GMT
            Not After : Jun 15 07:01:13 2025 GMT
        Subject: CN=b7f0f1fb92150c973e65b583508dff7f446ad58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:09:aa:80:c1:9b:1b:4e:ac:28:c0:da:92:
                    4c:00:01:49:06:ee:2e:b6:b5:39:3e:fb:9b:51:b3:
                    6b:2e:9f:29:9d:79:17:97:fc:90:f1:c1:b0:f1:4d:
                    51:1e:9a:a5:6d:7c:80:04:c2:99:a7:89:de:65:ea:
                    dc:3c:71:76:c8:a7:f3:d5:71:ba:81:e1:91:10:1f:
                    18:df:86:a9:9b:9d:ca:a9:21:6a:1f:a0:52:12:c5:
                    26:4d:46:8f:59:14:55:39:3f:2d:21:ba:a8:13:1d:
                    fb:fb:26:4b:e9:ef:d7:31:a5:cc:37:b5:9b:a2:92:
                    be:99:9e:8b:90:d5:ce:2d:c5:08:56:09:4f:37:d8:
                    f1:1d:8c:1f:80:e1:8b:a4:9d:6a:e5:18:cb:0e:4b:
                    a7:05:22:a8:75:0d:d4:22:90:f2:03:8f:29:b5:81:
                    d6:75:9a:39:17:70:54:d1:ad:16:65:df:cc:74:4d:
                    69:7e:5d:6b:e7:62:5c:fb:43:b8:6e:b9:04:69:10:
                    60:3f:90:cb:96:82:fa:7b:83:65:ce:9d:58:15:14:
                    c6:b5:84:4b:6d:9f:dc:f1:3b:de:6e:a6:3a:f4:00:
                    83:be:53:36:5f:05:dc:4e:f7:72:08:c1:d0:3a:2d:
                    b1:bb:8f:65:18:ea:8d:eb:71:e5:7d:27:43:bc:bb:
                    01:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F0:F1:FB:92:15:0C:97:3E:65:B5:83:50:8D:FF:7F:44:6A:D5:8D
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:21:c1:09:12:6e:d8:79:3f:6e:b8:be:40:41:9c:1a:be:
         6d:23:94:3c:7d:3e:57:bc:46:cf:0c:5c:03:21:40:2d:6c:3a:
         56:08:80:70:07:6e:bd:95:fa:c4:d4:e4:3a:93:4d:2f:7c:5e:
         2b:e0:c8:a5:9d:45:8b:67:70:26:75:86:ba:59:54:0e:cf:88:
         9f:ea:65:4b:34:e7:bb:aa:ad:18:7a:b2:4a:eb:a0:b6:0f:fa:
         24:98:b7:dc:4c:35:78:c6:fb:6e:9d:12:10:6e:e0:dd:9c:a1:
         8f:b9:71:60:54:a2:cb:6b:22:ed:e8:16:69:61:59:ea:59:b6:
         59:69:e7:c9:ab:e7:bf:c8:f7:92:08:11:ff:85:9e:99:66:2e:
         37:73:50:45:72:a0:bc:64:7c:80:da:2e:76:98:4e:df:b5:c4:
         07:34:92:a9:e4:af:8b:c5:01:27:b1:e9:6f:d0:d9:93:a4:76:
         37:41:f2:ec:88:0e:b2:a1:95:06:12:b6:1c:bb:2c:75:1c:2c:
         b3:87:17:10:d2:47:e3:8a:32:8c:1b:7c:de:cb:bf:b5:03:9f:
         3a:34:43:de:ee:13:cd:83:e7:d1:62:e3:09:ec:53:11:98:fa:
         44:b6:4a:20:fb:a2:85:64:14:8b:71:03:30:b8:45:e0:f2:ff:
         ee:f2:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:42 2025 by rpki-client