Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File:                     sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier:          28CkJPhrAH+AkADLTcE7EVU/csiD+cbUakK7c/ojsmE=
Subject key identifier:   80:F7:01:A7:EB:E5:FF:23:F9:C7:2C:3C:75:2A:EE:CE:A1:E9:57:37
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer:       /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial:       01977D55D2C5D11FB9A22C23BF1C0636A055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number:          0902
Signing time:             Tue 17 Jun 2025 10:01:05 +0000
Manifest this update:     Tue 17 Jun 2025 10:01:05 +0000
Manifest next update:     Wed 18 Jun 2025 10:01:05 +0000
Files and hashes:         1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
                          2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
                          3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: GyVwnZ0porSBiJ6yYhHjk2drWZ4uomxNxHRE98RcHr8=)
                          4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:55:d2:c5:d1:1f:b9:a2:2c:23:bf:1c:06:36:a0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
        Validity
            Not Before: Jun 17 10:01:05 2025 GMT
            Not After : Jun 18 10:01:05 2025 GMT
        Subject: CN=80f701a7ebe5ff23f9c72c3c752aeecea1e95737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:2a:34:44:4b:ce:49:74:ef:50:bf:a4:b2:
                    1f:79:7c:d8:84:59:90:6c:40:8e:18:6b:72:95:81:
                    bd:ec:40:35:ae:1c:12:16:67:07:ad:eb:92:9f:3f:
                    7b:87:e4:d4:0e:83:da:e5:ac:6e:90:50:a4:6b:dd:
                    a7:f2:6e:91:94:61:1b:25:9b:18:bc:d9:76:f7:16:
                    15:5c:7d:d0:23:d7:da:0e:b9:74:33:ac:0b:eb:e0:
                    03:2b:4d:35:c9:e7:bf:af:4c:ea:88:34:54:a9:47:
                    1b:f7:4f:21:12:01:25:db:da:b6:90:74:e3:e7:0a:
                    9e:e3:c3:b9:d7:4a:a1:c2:10:76:0d:db:d8:ce:36:
                    3f:83:1c:65:72:15:5a:93:fe:b0:e6:c1:f4:5d:e7:
                    00:f2:b7:b2:77:b3:9e:48:0a:3e:85:66:9a:a6:3b:
                    57:9e:19:96:f2:78:cd:af:ac:52:54:27:dc:14:65:
                    59:1e:5c:31:70:e8:1d:5d:b8:fe:47:d6:c9:33:24:
                    af:16:6d:05:c0:60:b9:67:c6:12:06:0a:bf:88:de:
                    3e:bb:67:c1:2f:6d:9b:e8:77:f1:6c:66:b8:4a:2e:
                    e9:78:59:d3:07:60:fd:f9:86:4d:8e:fb:df:1c:fe:
                    a7:74:6b:08:64:ff:9a:e0:1a:48:b2:f1:e1:c8:ed:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F7:01:A7:EB:E5:FF:23:F9:C7:2C:3C:75:2A:EE:CE:A1:E9:57:37
            X509v3 Authority Key Identifier:
                keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:97:1e:1f:9d:73:fc:ff:df:2d:79:45:98:4f:dd:83:c0:8d:
         6d:70:94:e1:b2:07:2b:d5:4f:78:cf:29:de:33:b0:bf:24:1f:
         5e:3e:8b:9a:20:13:62:47:72:fd:63:41:22:b0:a2:7d:51:3d:
         e7:a5:5f:b0:31:76:5a:3e:e1:34:33:dc:6d:27:f9:40:3a:5c:
         20:f9:61:7b:e8:5b:78:f4:fb:09:ac:57:93:87:38:8b:71:c6:
         bd:f0:c3:3a:50:4f:d4:c8:0a:d0:62:20:4f:38:bb:bf:ff:0a:
         c4:58:b9:e6:32:4e:0a:2f:fb:f1:26:dc:11:ab:7a:dc:b6:8b:
         a4:7c:39:0a:e6:88:ad:61:b6:ba:67:76:92:5c:86:c1:56:34:
         de:2b:54:05:38:02:d8:88:07:7f:10:4a:ef:a1:04:68:f9:40:
         4c:10:e1:91:19:0e:a0:53:4d:34:c9:2c:e5:9a:b9:4e:13:02:
         0f:7b:5e:bc:73:0c:50:fd:4b:0d:b2:d2:b3:a5:f4:c8:61:7f:
         a4:fc:8a:ba:b3:db:20:51:75:39:1c:61:70:86:04:8c:78:5a:
         36:c4:ca:66:fe:ae:44:b8:a9:db:46:18:d9:14:83:62:2f:45:
         1c:24:5d:93:72:23:49:6d:e8:28:60:55:a2:5d:a7:92:70:26:
         94:af:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:21:08 2025 by rpki-client