Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          HSID8wPGf9wptW5EFqLeuc6QvspMu1TsYWgoZJeSYyk=
Subject key identifier:   66:1D:24:79:F9:37:27:53:CE:CB:52:C3:96:84:B7:E9:CD:23:E8:25
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       0196759EBF4C4D33D35A9171CFBD35C4C8AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          07D8
Signing time:             Sun 27 Apr 2025 05:00:59 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:59 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:59 +0000
Files and hashes:         1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: JnMavCI8rbEz6q5xF11s7+X4xg9juklfmvIqc+SmeAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:bf:4c:4d:33:d3:5a:91:71:cf:bd:35:c4:c8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Apr 27 05:00:59 2025 GMT
            Not After : Apr 28 05:00:59 2025 GMT
        Subject: CN=661d2479f9372753cecb52c39684b7e9cd23e825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:25:f0:d3:44:5e:b1:ba:93:bc:93:2a:fd:
                    98:13:f9:b9:e4:f1:f7:de:fa:05:f7:2f:3b:9f:86:
                    da:06:3f:9f:b2:ca:ef:4c:df:62:ae:9f:f1:f7:e9:
                    1f:d2:1d:6c:8c:2b:26:2b:19:77:7f:52:aa:3b:1a:
                    56:80:66:e1:3e:59:e5:5f:ef:a0:09:56:1e:b4:9e:
                    5a:fb:76:7e:5e:11:64:d8:a2:1b:0e:34:41:3f:c4:
                    99:68:f1:fb:3e:1c:26:6b:cc:02:89:39:2a:71:f9:
                    c3:f1:86:c6:ae:00:86:98:cf:c2:0d:a4:ab:7f:78:
                    28:eb:b7:b9:57:af:6a:61:5b:4f:e9:0d:bb:c2:3f:
                    1c:ae:1c:67:39:47:cb:07:6b:db:8b:21:8a:3c:3b:
                    b5:c7:ef:74:c9:f3:95:3b:e6:21:44:61:21:4b:b2:
                    99:a3:05:fa:ee:24:cb:93:4f:cf:9f:ea:e5:cb:43:
                    56:a4:7b:07:6f:28:cf:de:3c:a2:6b:f0:1a:46:2f:
                    c9:d9:3c:83:14:fd:71:48:ac:b2:aa:ed:c9:71:e5:
                    04:45:ec:ee:03:9d:9b:9c:94:9c:c4:49:a8:02:1f:
                    8f:69:db:bd:93:8b:b0:cc:03:7a:f3:7a:47:55:93:
                    84:54:97:b6:2c:44:76:be:94:9f:62:fc:5c:57:0c:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:24:79:F9:37:27:53:CE:CB:52:C3:96:84:B7:E9:CD:23:E8:25
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:4c:26:3b:ac:c0:69:98:50:6f:04:93:32:80:af:3c:00:
         5a:28:2d:6c:75:e1:3d:07:75:5b:b2:98:cb:e3:a4:6f:ec:4a:
         fa:a8:8a:f3:61:99:99:7e:52:aa:53:57:c8:1e:6c:b5:d1:49:
         1b:1d:51:bf:d0:f5:8c:ff:7d:ef:6e:64:97:27:c4:b0:36:6e:
         cd:77:e7:52:2c:05:47:d5:4e:5f:a2:e1:7a:db:93:30:a1:94:
         0c:44:b7:b6:0f:ca:07:e8:44:91:71:1d:0d:ad:13:77:7b:98:
         41:83:9e:49:bf:28:76:a0:5b:6d:30:3d:b8:57:e9:96:25:c0:
         ed:b9:dc:50:9e:a0:1c:45:4f:e9:68:ad:e5:b9:1b:5d:d6:c4:
         23:19:b0:ae:c9:96:7e:bd:bc:6e:64:9e:74:bd:98:be:f0:e6:
         32:41:9a:9e:4c:6e:d0:84:0b:e5:8c:51:42:59:08:8b:27:58:
         b9:af:7a:b2:0a:b4:66:ef:47:51:f5:c9:52:12:07:c4:b3:ff:
         eb:64:d0:cc:4c:78:96:5f:23:7a:ca:45:c5:ed:77:87:19:22:
         f4:0e:de:1d:97:8c:b1:04:49:27:92:dc:4c:d2:9b:e5:cf:d4:
         0c:54:19:41:d6:02:d1:7e:bf:b0:52:b7:6d:9f:e0:2c:ae:c3:
         2b:ce:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:30:54 2025 by rpki-client