Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File:                     JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier:          Y8q/ZvoAXZxPyAGZiNbgQsacvsbeUgEZH7LaGQUiTzk=
Subject key identifier:   9F:40:9F:70:1A:CD:3C:2E:95:37:BA:41:A8:F2:FB:C6:2F:A7:0A:7C
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer:       /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial:       0197850F45778BA93328F72573AF8169A80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number:          13F0
Signing time:             Wed 18 Jun 2025 22:00:59 +0000
Manifest this update:     Wed 18 Jun 2025 22:00:59 +0000
Manifest next update:     Thu 19 Jun 2025 22:00:59 +0000
Files and hashes:         1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
                          2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: z6nyEaxjdja8wEo1TeXx2+Qr+rBaIvXlA+WBT02jZw0=)
                          3: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (hash: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:0f:45:77:8b:a9:33:28:f7:25:73:af:81:69:a8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
        Validity
            Not Before: Jun 18 22:00:59 2025 GMT
            Not After : Jun 19 22:00:59 2025 GMT
        Subject: CN=9f409f701acd3c2e9537ba41a8f2fbc62fa70a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:55:cd:ab:29:a6:be:51:79:f1:71:1c:da:
                    3c:32:29:31:8b:46:cc:27:e6:75:4d:9f:ce:7d:3a:
                    4b:0d:9e:74:e2:08:66:10:e6:35:e5:a0:8b:87:37:
                    d0:84:d2:9b:a4:07:9f:ae:7a:29:a0:55:61:4b:6f:
                    d2:2d:0b:57:c1:db:1a:80:ac:8b:3e:25:93:8c:3c:
                    41:61:0e:e3:72:eb:55:5f:87:c2:d7:fc:69:4d:78:
                    95:66:d2:a1:d2:8e:ff:2a:a0:c3:8f:e4:83:a9:52:
                    f9:5d:53:48:d0:23:79:da:80:32:1d:f0:1d:eb:f8:
                    5a:ae:eb:50:df:6c:85:13:82:b4:dd:f2:f0:98:0c:
                    56:5b:1e:82:ec:83:cc:a2:0e:d6:10:b2:4f:bb:40:
                    9b:f6:e5:29:b3:5f:e0:f0:7f:65:1d:d3:17:d5:8a:
                    11:19:d6:af:25:ba:12:aa:b5:7c:c4:ef:ab:51:3d:
                    f9:7b:08:f0:b5:93:7f:09:92:19:04:7c:f9:b3:de:
                    4d:2c:85:7f:30:4d:22:41:26:b0:81:6e:0c:d1:3f:
                    31:e3:42:60:9c:3c:9e:6a:c0:2d:d7:0e:dc:e5:59:
                    5f:03:dd:75:3a:b6:6d:97:2c:da:d0:96:d4:92:7f:
                    51:74:cd:d1:73:c4:f1:44:44:ad:bb:d1:de:bd:be:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:9F:70:1A:CD:3C:2E:95:37:BA:41:A8:F2:FB:C6:2F:A7:0A:7C
            X509v3 Authority Key Identifier:
                keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:82:71:9b:b7:ca:05:b0:98:5f:68:ea:3e:4c:ec:94:0a:85:
         fa:db:11:e2:8a:9c:db:01:98:8b:62:23:fc:16:99:03:18:5f:
         66:83:8c:82:f4:0e:ab:0f:05:e3:ce:e0:c8:77:27:38:1b:33:
         10:a7:8a:01:1b:04:4e:05:b1:00:89:c0:a9:4f:49:cc:af:b6:
         68:16:ae:41:5f:93:57:f3:a8:40:fe:07:8a:42:8f:b0:9a:0c:
         5d:38:5a:c0:50:9d:8f:c5:a7:98:a3:a2:0f:c9:ea:4d:5d:ab:
         93:57:87:47:15:59:a8:8c:e0:70:8d:90:11:44:cf:98:0b:01:
         7a:b5:e9:62:c4:5b:e1:3f:4d:26:62:8d:ef:be:0e:4c:11:45:
         ae:ca:ab:5b:d8:a3:af:8b:5b:21:77:c5:58:77:1b:e2:be:4b:
         bf:69:01:1e:00:ce:fa:a7:05:ed:5d:69:fb:d2:39:dc:22:c4:
         0f:c2:59:cd:c2:84:49:77:78:10:58:9b:de:3b:ff:52:51:2b:
         2c:a3:9f:7c:44:5e:84:21:f4:a4:8e:4d:12:5c:7f:63:c4:83:
         ba:93:10:8f:97:1e:70:74:9e:36:2c:75:d3:49:5f:87:20:e1:
         33:0f:55:04:bd:b0:3b:b3:67:68:8e:66:ab:79:29:ec:32:28:
         ec:8f:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:59:26 2025 by rpki-client