Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          18Wl+9HHKPW5ZWP/sPt0BSj3LfMB0azm0KwlLYZrMc4=
Subject key identifier:   EF:5B:66:94:77:81:72:D5:2B:3C:EF:C6:EC:D0:86:30:84:86:48:4E
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       01987418D5DEC75FD85C581AF615BF2A1284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 08:00:41 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:41 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:41 +0000
Files and hashes:         1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: 5BB+Hjhqr0SqFM1CyNL0Qb7da0jcUCYC7X4xF1oXfX4=)
                          3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
                          4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:d5:de:c7:5f:d8:5c:58:1a:f6:15:bf:2a:12:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Aug  4 08:00:41 2025 GMT
            Not After : Aug  5 08:00:41 2025 GMT
        Subject: CN=ef5b6694778172d52b3cefc6ecd086308486484e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:84:c9:1e:35:c3:ef:a3:6e:b6:66:37:3f:
                    54:df:8a:01:97:fb:bb:0b:54:6b:76:59:44:13:1b:
                    bc:29:34:44:02:36:26:f1:04:df:76:51:df:1e:13:
                    40:3f:e3:0d:61:f1:b0:d9:a4:ae:37:e0:da:ad:5c:
                    78:8a:cf:67:ac:06:19:ff:3f:df:10:a8:79:da:04:
                    0c:a1:3d:fd:fd:b3:1d:a6:bb:da:97:43:63:fa:cc:
                    a3:ea:6b:50:84:79:0f:b3:32:6e:1c:fe:e2:ca:7e:
                    e4:3d:fb:09:cd:68:65:51:bb:95:c5:15:58:7a:2f:
                    83:17:20:ef:78:1b:c9:1e:84:c8:c0:31:a6:71:8a:
                    01:c6:37:da:43:de:b9:74:0a:74:4d:ce:11:5d:86:
                    00:d9:28:ca:70:52:68:97:8d:a9:51:72:2d:bf:5a:
                    72:66:36:4f:fc:89:e7:6c:77:9a:35:2d:20:df:10:
                    1b:27:e7:50:ae:1a:33:36:6d:c3:09:3d:f9:3d:86:
                    92:9d:9f:85:60:24:22:6a:0b:54:a1:5a:db:76:38:
                    32:16:05:d5:9b:37:a0:8b:d6:c1:5b:a4:fb:64:f2:
                    83:83:fe:ef:d7:2d:67:9c:5b:c0:95:e8:6d:c6:b9:
                    b5:fd:5e:67:14:58:57:d9:ba:e6:e6:c1:09:27:e8:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:66:94:77:81:72:D5:2B:3C:EF:C6:EC:D0:86:30:84:86:48:4E
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:60:a1:6e:24:d9:69:4f:31:20:84:08:8b:52:c3:63:d0:
         67:d1:02:60:bb:9f:df:8d:06:0f:9e:f5:60:c0:d5:e6:1f:60:
         95:02:c1:5b:cf:b3:45:ac:5d:87:c9:aa:ee:97:e5:c4:70:d7:
         c6:72:43:b1:46:e6:b9:c5:6d:35:6f:4a:9a:d0:40:60:12:95:
         f5:23:c0:e7:92:9e:07:95:d6:00:28:c8:f5:32:8b:e8:be:ea:
         17:b4:9b:f0:24:ba:fa:19:e9:de:1f:b1:dd:c8:92:8c:88:16:
         4e:24:5b:49:ac:b4:24:b1:f9:a3:52:ce:e2:55:e1:f4:84:0b:
         a4:92:97:1f:00:b4:1b:99:50:1a:e7:ed:e8:7a:67:88:4b:ea:
         4d:59:63:5c:2f:0d:38:aa:2b:fc:20:0a:18:e4:c2:22:f3:47:
         f7:1b:3c:99:4f:e8:25:ed:67:da:21:98:59:52:f4:9c:46:8b:
         3e:70:06:1b:72:e9:c1:89:4c:dc:96:1c:32:a3:e2:5e:77:db:
         b3:78:f8:19:8a:56:d0:4d:1d:a3:cc:ec:63:9a:1e:e1:55:d0:
         b9:7d:66:65:12:d1:fb:35:ea:e2:07:12:20:20:60:80:8f:88:
         e3:2c:86:34:ee:70:76:7a:cc:db:aa:f2:9e:46:fe:f4:bd:d1:
         40:55:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:00 2025 by rpki-client