Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File:                     jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier:          L83/FZ9E5i6NlQcH0/7N66Egx8LxbmP2gxs+OAQET7g=
Subject key identifier:   32:A3:17:7D:45:57:56:E6:35:E0:A4:9E:68:92:52:2C:89:D9:2E:15
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer:       /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial:       0197715180AA00FBBB8965A2970040E34A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number:          0454
Signing time:             Sun 15 Jun 2025 02:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:56 +0000
Files and hashes:         1: ZQAyFws7DTZX8u1fY_j_CXtWmSw.roa (hash: rqxW0DHYx0WB4ZZV6XWEMvjksg8LNQ4dfFaekkzMvBk=)
                          2: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: 83pP5AFTTT7mFg0FKZq7uU65Zf/wTD28joxeEy2l2FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:80:aa:00:fb:bb:89:65:a2:97:00:40:e3:4a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
        Validity
            Not Before: Jun 15 02:00:56 2025 GMT
            Not After : Jun 16 02:00:56 2025 GMT
        Subject: CN=32a3177d455756e635e0a49e6892522c89d92e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:d2:96:d8:b7:6a:4c:36:78:ae:2f:46:ad:
                    9e:e2:c4:5d:fa:92:a4:ef:a6:25:84:4c:10:90:ba:
                    12:26:64:67:c2:a9:b8:13:04:7c:5a:08:85:83:4d:
                    58:c0:5e:e9:e7:e5:6f:b6:0e:74:c8:6a:84:31:91:
                    fd:08:5e:ca:ad:b4:66:06:df:e9:51:04:a4:19:9b:
                    dd:57:9a:4a:4c:91:df:69:4b:cd:f9:0e:6b:6b:eb:
                    22:30:77:25:86:81:c5:7f:ee:20:49:a6:0a:3a:88:
                    e0:6d:bd:ce:a4:11:58:1f:b6:94:2f:1e:14:f1:f7:
                    72:54:3b:4e:ac:76:29:22:1c:7f:4c:b1:46:97:d4:
                    48:4d:c2:3e:6a:f2:40:90:c4:21:86:9f:d4:54:dd:
                    d3:50:bd:69:29:ff:57:0a:6b:a6:16:ae:5f:68:a4:
                    45:d2:3c:09:11:f7:0c:ef:0b:76:7a:60:e1:e7:d1:
                    5e:61:96:6e:ba:c5:07:e7:46:62:8d:b2:9b:58:96:
                    fd:f0:d0:54:19:f9:21:50:ec:48:d7:3c:9c:dc:1e:
                    d0:bd:3c:e9:59:8e:72:a5:78:11:e3:be:87:c5:b4:
                    93:69:cd:64:79:3f:9d:07:b6:b9:1a:3f:71:3c:c2:
                    6f:9e:10:15:99:c2:08:1a:34:6b:54:b8:cd:04:7d:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:17:7D:45:57:56:E6:35:E0:A4:9E:68:92:52:2C:89:D9:2E:15
            X509v3 Authority Key Identifier:
                keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:24:a6:3a:38:a8:c5:e5:e1:be:f4:6b:62:f0:6f:42:d3:
         f8:ae:34:d3:ff:4b:bb:8b:02:b6:7e:97:52:f6:3c:1b:1b:09:
         4b:fa:91:30:6a:7c:16:6d:fc:f9:71:eb:dc:0d:1b:ec:d9:42:
         3c:89:1d:da:1e:cd:a3:5b:80:ee:1b:3d:60:26:f8:7b:a8:c4:
         90:ca:7d:a7:83:22:19:d9:5c:1e:f1:a0:ee:6c:2d:4f:51:76:
         d0:98:04:23:ec:d4:41:c5:2b:35:73:f3:62:14:ee:5f:4e:56:
         3d:a6:71:21:6d:81:c6:8b:54:68:ee:25:a4:10:38:9f:e3:f2:
         ad:3e:9f:fb:98:da:34:65:c7:d1:10:d3:49:ef:65:ad:9c:b3:
         6e:0c:73:46:e3:28:6c:92:47:7e:3c:e1:96:69:56:49:69:f0:
         db:9e:15:c8:c9:a3:b9:4e:15:0d:1e:6f:17:16:42:26:41:e5:
         23:1c:aa:6d:62:8e:e1:d0:b2:fb:bf:4e:01:26:7a:a5:be:f9:
         9a:57:ee:13:c7:b8:77:a6:fc:b4:44:cf:94:2c:b7:d4:39:38:
         cc:bb:83:9c:01:48:3b:42:73:01:5c:9a:7b:e6:70:43:e7:38:
         22:da:54:94:7e:d1:0f:8e:24:4d:d8:67:10:36:5d:e7:84:2a:
         6b:0b:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:15:44 2025 by rpki-client