Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
File:                     J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json)
Hash identifier:          rAqzV599CnBnJo5sC8oPiZw09wLbaLYIJl4qXe6OHl8=
Subject key identifier:   7E:9C:1B:96:56:53:01:42:25:9A:AD:67:5F:53:CF:72:EC:E1:46:C4
Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
Certificate issuer:       /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Certificate serial:       01976EF5249940DE0D84106F9F90B9EA4CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
Manifest number:          126E
Signing time:             Sat 14 Jun 2025 15:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:48 +0000
Files and hashes:         1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: mV5g/PK/3i9Zp4JDyKjuUwi6ZQYrFk2xPrVqqC+fXbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:24:99:40:de:0d:84:10:6f:9f:90:b9:ea:4c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
        Validity
            Not Before: Jun 14 15:00:48 2025 GMT
            Not After : Jun 15 15:00:48 2025 GMT
        Subject: CN=7e9c1b9656530142259aad675f53cf72ece146c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:13:09:5b:4c:ac:d1:a5:21:b4:42:aa:7e:
                    1d:3c:1f:39:3f:91:b6:79:92:67:04:4a:99:b0:9d:
                    8a:d4:8c:35:c2:ed:09:c7:fa:c8:df:7b:e3:c6:b6:
                    ae:05:7d:1b:ea:08:04:8a:01:97:71:1e:92:d1:93:
                    8d:8e:cd:a7:f9:1f:d1:12:ea:fb:70:65:1c:b7:46:
                    88:75:18:39:70:50:15:cf:03:ad:03:cf:85:78:87:
                    55:ca:8e:9d:fc:10:5f:1e:c5:f3:9c:82:16:30:21:
                    7e:88:8c:3d:75:1c:ba:d7:07:60:ff:91:4b:f0:84:
                    7f:3b:b7:a6:0f:54:c2:ff:99:04:8b:84:60:30:90:
                    c2:7c:d9:61:ff:f2:be:c0:2c:73:ed:49:fb:c2:30:
                    bc:1e:1c:37:d7:e0:a2:e0:45:ed:ea:83:31:da:db:
                    34:af:32:4e:c7:a0:da:e4:91:cb:74:8a:db:93:d7:
                    8f:d4:72:87:80:13:3e:ea:53:0b:b7:19:cc:7b:1d:
                    b7:92:a3:35:9e:6d:3d:55:ec:ed:e3:55:83:71:51:
                    2f:fe:6d:cb:f6:d0:fd:66:07:35:89:c8:0f:59:a4:
                    a7:17:50:07:a1:fd:34:26:ca:ef:5a:0b:42:65:1d:
                    94:37:3e:25:74:be:44:fd:b4:6c:58:32:6b:12:34:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:1B:96:56:53:01:42:25:9A:AD:67:5F:53:CF:72:EC:E1:46:C4
            X509v3 Authority Key Identifier:
                keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:2d:4e:b7:5a:53:e3:70:11:b4:f7:ef:1e:aa:d9:8f:f2:
         e5:2f:76:91:f5:1b:93:48:f9:cf:9d:54:f3:7f:fd:a0:30:51:
         de:16:89:25:69:b2:cf:05:df:60:81:e8:b4:9a:b9:8b:05:b0:
         db:46:e3:df:57:a3:a8:42:01:ad:a7:bd:d3:9b:1e:da:ed:77:
         64:2f:a3:18:34:16:f3:5c:8a:5b:61:62:5a:bc:17:cb:d8:55:
         82:ef:0a:d6:5e:b4:89:52:30:11:40:6f:dc:5f:6f:55:8a:20:
         b8:86:46:51:13:a1:ff:6b:c4:e9:6a:03:1c:f0:81:34:83:69:
         70:b4:34:1f:1b:37:97:13:da:5d:e2:c3:1f:9d:63:57:32:50:
         e5:fe:e8:09:eb:61:b0:89:77:82:cd:2b:31:b1:9a:0a:82:10:
         fc:af:4d:76:73:aa:ee:67:39:90:46:49:0f:a4:c4:81:c0:52:
         53:d8:16:3e:1e:42:82:a1:17:06:f2:5f:02:e0:26:20:ec:58:
         7a:fb:b4:54:eb:94:d3:d3:5b:20:17:3e:7d:bf:5e:ac:23:45:
         1c:59:c7:a6:08:03:77:b7:31:3c:a2:04:be:5f:e7:51:e5:df:
         d0:bd:b4:6e:84:9f:47:92:bd:6a:7d:77:4d:48:39:26:3d:9f:
         17:99:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:43 2025 by rpki-client