Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          DXsG3VB71L/V4V+fLrDM71vTlbhaPJdYyn52iH3VX1s=
Subject key identifier:   18:E5:78:F3:67:DB:B0:F9:7C:4A:DA:7C:78:38:A9:FE:48:20:DF:72
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       01987B9C906B0638EB699EFD2BFFF065FFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          0EB9
Signing time:             Tue 05 Aug 2025 19:01:54 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:54 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:54 +0000
Files and hashes:         1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: y2Ts9jrUSR5zZfhBkdv2Hs3OPjNK96RKg+Wya6oEG7Y=)
                          2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:90:6b:06:38:eb:69:9e:fd:2b:ff:f0:65:ff:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Aug  5 19:01:54 2025 GMT
            Not After : Aug  6 19:01:54 2025 GMT
        Subject: CN=18e578f367dbb0f97c4ada7c7838a9fe4820df72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:26:66:0a:6e:be:eb:e1:02:b2:5b:b0:8e:
                    f9:30:4b:b6:2b:36:87:30:d1:72:d0:f8:56:1b:18:
                    39:8c:f8:50:7a:1b:b8:38:31:e4:5f:0f:32:c3:2c:
                    3f:b2:a7:97:9b:00:7c:35:e5:17:a0:47:12:5e:a5:
                    99:6a:b9:44:3c:6e:9e:55:18:41:e3:99:df:a6:a7:
                    1b:0b:5a:f5:a2:1b:58:f1:c2:05:ff:42:c5:d2:b9:
                    b3:28:19:70:2a:71:69:4a:08:7d:82:eb:81:63:72:
                    79:9b:14:fc:3b:45:dc:64:13:e9:1e:4d:5e:f2:f9:
                    38:3d:bb:70:34:de:82:c8:d7:5b:fd:9f:f2:76:f3:
                    de:7f:a5:48:a2:f9:77:15:02:0c:dd:69:8e:3f:a1:
                    84:92:be:0e:ed:7f:de:39:30:d2:28:76:df:f0:b3:
                    d2:9f:f7:8a:fe:f0:6a:80:73:a5:28:7b:fc:b6:88:
                    0e:ce:b3:0f:93:53:c5:6d:07:a0:23:bc:0e:e0:70:
                    b2:89:ca:80:63:f5:8d:b3:66:ea:4a:34:25:78:7f:
                    2f:80:96:3e:0c:d1:95:d6:b1:20:91:f9:a8:ef:ad:
                    4f:48:dd:17:09:6a:ca:2c:30:a8:21:83:cb:a1:fa:
                    38:a7:90:63:ef:1c:e5:29:ef:af:9f:5f:8f:df:92:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:78:F3:67:DB:B0:F9:7C:4A:DA:7C:78:38:A9:FE:48:20:DF:72
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:67:31:07:6a:f7:07:ee:74:47:93:f3:fb:d8:54:6c:cb:
         7e:ea:67:52:e5:95:34:fc:fc:79:52:bd:d1:e8:1f:7b:8e:76:
         92:84:53:39:c1:fd:62:38:ec:12:bc:be:4b:23:ba:47:2a:93:
         0b:c1:ef:85:b8:5e:5c:c5:f4:0f:70:20:1b:40:06:a1:51:34:
         1b:7c:ae:5d:9b:e9:60:2f:02:98:76:da:91:28:6d:b5:ca:90:
         f6:7f:05:82:bb:0c:fb:56:ae:41:d2:6b:e8:08:39:f4:38:be:
         1f:a8:41:98:1a:77:5d:23:9d:d7:98:64:f2:41:f2:3e:e9:1d:
         7b:72:3b:9c:a3:bb:93:e8:ec:68:ea:58:d9:80:1d:73:fa:8f:
         a0:f1:c3:cd:9b:6a:24:78:77:14:3f:88:30:89:45:d3:49:a8:
         cc:84:63:61:b9:47:22:97:14:c2:c2:40:3b:9a:a0:71:b6:d8:
         8e:f3:58:14:50:fe:57:cb:a9:95:36:59:b7:7d:31:ce:d2:74:
         94:5a:5a:43:71:e6:52:0b:08:f4:aa:99:47:e9:b4:c6:42:97:
         3c:32:16:a6:4f:ea:79:64:e7:66:de:4d:e4:3c:e6:af:8d:ec:
         32:63:57:a2:2a:15:5d:f4:d4:d2:6d:57:4a:be:7e:3b:ac:1a:
         27:07:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:34 2025 by rpki-client