Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
File:                     jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json)
Hash identifier:          7QxmGBa5X6TbbcKTlMItlgupUKvX6VMbFKEVjd7fsGU=
Subject key identifier:   A2:19:5B:08:B3:BD:0B:AD:1D:70:3C:AD:E5:36:3B:D7:21:99:DD:E5
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       01977D5545DD44316891B20F512699E2305C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
Manifest number:          0935
Signing time:             Tue 17 Jun 2025 10:00:29 +0000
Manifest this update:     Tue 17 Jun 2025 10:00:29 +0000
Manifest next update:     Wed 18 Jun 2025 10:00:29 +0000
Files and hashes:         1: 4EZAXXjg-wdq7F5nmE22LQpMjC0.roa (hash: kcJ5zcoJ0uYbLEoOLz0za2EfJtjkENsqcX3HW2ukm9E=)
                          2: 8eOXfqAkJqXP3wXDUaIxraOki3I.roa (hash: R7bxKwNtqC/oTBwL83XqaIAv5I/52rZnoW3WSovbBso=)
                          3: AXHQCfctIE8qm3CfgJv5m741MvA.roa (hash: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=)
                          4: D39tyqkHzUar743HSOtaz_PbEVw.roa (hash: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=)
                          5: FZ30BS7c99CQqzoVNy_qf_6mJzg.roa (hash: +/HEuopMgXs1AcyNXLuf5qhJ2S6YVu77GGZUrjSbO5s=)
                          6: MLfn1YOL41jf_jxhYVmNtYMo6UI.roa (hash: Rc+RrvU5X1JONVLCHy+aTfK3D2oQUU5dYj6tePTJUyE=)
                          7: Mk19CM13YMFH7WXY4rkQd2VVD9M.roa (hash: ocRMjh+08/tYyEQx7PGNN6c6//DGSHJpqiQu69+SvEU=)
                          8: PBJjwWm3FNYmKDKlr11pHLlOrGk.roa (hash: /EDjQB/ySBsTi6pfh4zRjgsPbhtNFWDlr8va/X/KOwc=)
                          9: PQysa0gStaLJL9Thu5PyuDIF7kE.roa (hash: Mwu851ywkPXxaKp83LB3gVtyZ5Xct3QCemCLlVfmoYk=)
                          10: TwzZQrIn09c-90CtvFLCLT3vcWs.roa (hash: uBt9dC+yxyfdnRMBiRH64GG0vCjQQ3KJBUaUSBKn8oI=)
                          11: Uam3fdY-U_8FUcIs9C1Cu9j0kXU.roa (hash: lAwNykQezUevV1G5+PHKNJlIk5Yd8h58FItNjQ6jmrw=)
                          12: Wwx0ymxnwTUNgGtoQ6bmuG8xi8I.roa (hash: Duif3Xsm8vx9BAQ1DEEh/dpjs1UJXZja4M1PuzJXkHE=)
                          13: XJQW6cjujhEORDl3asfzceRsQq8.roa (hash: YLe1WKPBAxaQWWhGaDY3bNQMSMuaVm8vzXhx0IIMUzM=)
                          14: b6Nmax07-I7tddxfBlPtNVrrpoA.roa (hash: 882i5LCYTS8Ako1ajCDIZ6BePqu9LMB0nNQt34alqTY=)
                          15: eKnO05dB5vIDo5g5lEqriGppj5Q.roa (hash: Pg/wHgKw59kIgeWzKbHYp0qEn0pGvDQCAyOOST+PDe4=)
                          16: ey5hfbdWQgMGlLLRhHk4lxjHzcs.roa (hash: 5pgkYJemSZ81sP39WKzYABVimxvElpEgqAb4FFIhI2k=)
                          17: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: INEWQEN3b0UHymA+icmsu0J66eH7up6WHNrHt25FARg=)
                          18: lXFx9ALxZQorihL48BvDF3NJkOc.roa (hash: XO0/325FUJcPPA5WPlVW2WrXVo9UePYr9iPMeGFfH+o=)
                          19: oASSpW3DbHAVm3j51eaZaxJHZhI.roa (hash: yrEWLwCdNgFCB4MeKY8zqq0fw2GLTP+HZekfTPCwc/g=)
                          20: pJgeOKkaI2IaIkWKQLfbLk35a4w.roa (hash: Coq6w5jiaEk77XJ1mE7tTSL+fJ0vuxmv1bAzLJXfEwY=)
                          21: pc5QkYWJRHSIUT4-aISn1B0ETL0.roa (hash: bGUIoNzoUj7sJpYGAF2W/rabzS0jqmoXnaDeHRq18Tc=)
                          22: q9Fght0eWnwg9L4cOjC-8MWuD_0.roa (hash: DogNwIUzNPICLsbvaitegQlMAv0jPMlhURxKnx1oUnY=)
                          23: roxXwaFrf3KkjRm0sygAv7oGPuc.roa (hash: +XL9L+dok2bHXelVksLQxh9+U/cP9zrebc0SlrcIfKY=)
                          24: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (hash: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:55:45:dd:44:31:68:91:b2:0f:51:26:99:e2:30:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Jun 17 10:00:29 2025 GMT
            Not After : Jun 18 10:00:29 2025 GMT
        Subject: CN=a2195b08b3bd0bad1d703cade5363bd72199dde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:4d:1c:b2:42:eb:91:a7:98:63:db:1b:ed:
                    79:f3:6e:bd:76:03:1a:f5:68:6d:3b:44:5d:47:af:
                    c5:3f:36:a0:b2:97:ff:07:bd:9d:44:55:a4:64:4c:
                    e7:dd:cc:81:cd:c7:c7:a1:c5:b2:09:7e:4b:8b:66:
                    f5:eb:05:ff:bb:ad:fc:06:2e:b5:22:2b:b9:50:28:
                    00:69:2e:16:e6:5e:f4:e0:4d:c3:61:bc:63:bc:33:
                    4a:ea:7c:4d:8d:2c:ee:8f:a6:a3:9a:2b:a4:9d:5d:
                    6f:56:b2:c7:f4:b6:b8:ce:c7:ce:68:46:e6:40:31:
                    96:7d:30:9e:f8:1b:56:b4:38:a7:a8:da:b3:2f:32:
                    32:c1:d1:1d:a6:30:1c:a7:7b:11:f2:de:0d:26:55:
                    cf:03:b4:2f:4f:e4:1c:1c:aa:b1:97:ef:a9:ca:0c:
                    b5:1e:ca:2a:7f:14:37:6d:6b:f7:dd:fa:ad:49:be:
                    79:00:20:7f:2d:e4:10:ca:a4:78:13:78:b5:db:6d:
                    bb:03:28:2e:df:60:2e:a4:c1:6f:ca:93:21:a4:75:
                    e7:b4:7f:7a:ea:da:39:d3:0a:3f:4c:41:05:9d:7f:
                    17:1e:c5:a4:14:f6:21:fc:27:2a:e3:0c:0d:24:eb:
                    d2:bc:24:cf:95:8e:78:da:26:2f:d3:c0:7e:9f:c0:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:19:5B:08:B3:BD:0B:AD:1D:70:3C:AD:E5:36:3B:D7:21:99:DD:E5
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:50:e5:08:2a:36:a9:74:71:df:37:d6:0b:da:d0:ed:a8:2a:
         f4:8c:56:d2:93:04:91:74:0f:61:21:bc:2a:98:13:62:73:13:
         22:a3:65:aa:fc:7b:fb:47:5b:81:d5:bb:2c:65:42:2f:3c:b0:
         ea:4e:ac:61:4e:f4:76:ca:ac:19:d3:8f:18:74:00:a8:56:c0:
         db:b8:76:79:2b:92:9d:a0:99:36:be:4d:25:b2:4d:9e:3f:88:
         6e:26:46:70:dc:e5:4e:b6:45:c9:ae:b4:a9:9f:06:bf:7f:d6:
         4b:fc:0b:f5:9e:8a:e6:92:43:17:69:fe:fd:ae:21:70:46:b0:
         ba:07:9f:5d:fe:e1:0e:f0:f2:1c:ad:e3:a5:d3:a0:05:3b:85:
         9c:83:27:90:3c:7d:b9:6b:39:fe:fb:7b:fc:3c:32:35:5b:84:
         0c:00:70:6a:aa:66:af:d3:4a:9a:4d:9a:19:d5:53:50:0e:98:
         b1:a2:dc:e4:f4:78:42:19:a0:e9:ed:fd:55:59:f0:68:76:03:
         01:ac:bd:f9:d6:53:22:e7:07:68:51:0e:58:d4:63:72:13:5d:
         6b:a7:b3:2a:ad:c4:0f:d0:46:2e:f7:bc:6d:ea:2e:7e:f9:7e:
         b1:cf:3d:15:b2:71:f1:28:da:7c:45:d2:39:2a:f3:ae:64:f7:
         c6:2b:70:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:09:27 2025 by rpki-client