Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File:                     J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier:          kDGQsxy6RTdCfYv2Z90MHEQqmSDqzmTv4Kzlo6hx5SY=
Subject key identifier:   E1:A7:03:BB:5E:62:DE:0B:E1:79:61:8B:FB:C1:E3:AC:95:C3:9F:54
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer:       /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial:       01976F2C08F6188F225DC0767B429CC69526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number:          0C66
Signing time:             Sat 14 Jun 2025 16:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:46 +0000
Files and hashes:         1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: vQKiAB5aZ6N4lXcObw87cFzvr7HHrPFXx97rSMMtkf8=)
                          2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:08:f6:18:8f:22:5d:c0:76:7b:42:9c:c6:95:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
        Validity
            Not Before: Jun 14 16:00:46 2025 GMT
            Not After : Jun 15 16:00:46 2025 GMT
        Subject: CN=e1a703bb5e62de0be179618bfbc1e3ac95c39f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:22:9b:94:48:db:a2:f4:f0:3b:ce:96:56:
                    c8:ad:c8:e7:41:45:21:f3:14:6c:2b:98:a3:9b:b0:
                    2f:2c:88:c6:16:f4:ce:28:8d:36:6e:54:5e:61:20:
                    8d:7a:0c:fb:a7:ee:d9:f3:8c:78:45:0e:3b:8e:1a:
                    08:c3:69:7f:12:77:a2:80:f5:67:34:f8:c1:8e:e6:
                    f2:dc:e8:c0:f7:08:aa:7d:1a:ee:83:e5:50:0f:c9:
                    23:23:d3:b9:0a:2e:6d:0f:40:81:e9:b7:9d:73:22:
                    c5:c4:21:fe:e2:05:c5:68:59:91:5a:7b:f8:aa:e0:
                    63:52:c1:f4:e9:8c:53:dc:97:2a:60:76:8b:35:fc:
                    0f:a9:e7:e5:da:cb:dd:85:a8:6d:94:3d:f0:25:10:
                    d1:cf:e4:26:7d:5d:9f:fa:d1:2e:d6:f9:c2:f1:fe:
                    9c:2e:79:9d:6c:1f:6e:ab:4e:b6:2f:6f:3a:7d:e9:
                    58:86:83:5a:15:3e:fd:57:ca:da:0c:67:31:a8:d6:
                    b9:5f:48:5a:7c:fa:4f:4a:1c:5e:86:aa:8c:50:49:
                    2f:cb:a2:12:e9:4b:f2:69:c7:ed:a1:87:06:b6:d1:
                    59:fc:b1:13:06:5b:dd:92:5b:d1:b0:52:a6:96:59:
                    1a:21:a4:34:78:e1:09:13:47:78:05:bf:1c:37:70:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:03:BB:5E:62:DE:0B:E1:79:61:8B:FB:C1:E3:AC:95:C3:9F:54
            X509v3 Authority Key Identifier:
                keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:9d:bf:2c:3f:9b:5c:62:9a:e8:c6:6a:39:4e:75:1e:87:
         1a:8a:38:9f:27:1c:0a:16:88:0c:19:76:4a:ab:0c:cf:5f:b2:
         aa:d9:0c:59:b9:cb:7f:27:a1:17:f2:07:a8:61:b0:75:9f:c5:
         84:10:c8:e6:d3:0f:3e:3d:0c:9c:06:c0:b0:80:97:19:a7:8b:
         b8:f3:d7:7b:06:14:04:07:6c:9e:f4:9f:3c:08:ae:82:b5:31:
         1b:00:48:80:68:4b:f2:43:93:d2:26:a1:f4:a4:b9:6a:2a:85:
         28:6e:38:78:95:c2:62:69:02:5d:88:a5:7d:4f:85:c4:71:14:
         45:28:0e:14:af:64:7a:53:76:ff:6f:f3:90:f2:52:84:a5:26:
         d4:ae:80:0b:87:32:c7:2d:43:b3:1a:11:7d:ae:c2:3f:47:72:
         00:d5:f1:13:5b:3f:01:d2:90:3e:06:a7:68:48:a3:ef:b0:86:
         fe:1f:27:34:23:dc:ac:8b:92:3b:37:36:0f:2d:b2:13:05:56:
         8d:58:c5:af:f3:b9:2a:79:5a:e9:d3:d3:ec:5e:02:e3:56:d2:
         e6:dc:84:84:50:87:09:a8:2d:b2:d2:fc:da:d2:85:79:cd:73:
         9e:c6:04:25:00:70:70:a1:84:aa:fc:79:de:d5:fc:de:cb:b7:
         02:ac:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:56 2025 by rpki-client