Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File:                     jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier:          J4U1xVYJctFK8OQ9Lfg7HQZyFLPn0RZP1zQeKAHv0Yk=
Subject key identifier:   5C:22:BD:DC:FE:F3:7C:C1:9F:59:35:DA:04:78:A3:10:D6:CD:41:11
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer:       /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial:       019676E7A44AE9821992E8BBE3B93C9D8366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number:          079B
Signing time:             Sun 27 Apr 2025 11:00:14 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:14 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:14 +0000
Files and hashes:         1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
                          2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: 3Sj893txWVXjm/BOi19xx5/muCwTr5KZATb3I/YI/qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:a4:4a:e9:82:19:92:e8:bb:e3:b9:3c:9d:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
        Validity
            Not Before: Apr 27 11:00:14 2025 GMT
            Not After : Apr 28 11:00:14 2025 GMT
        Subject: CN=5c22bddcfef37cc19f5935da0478a310d6cd4111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:c4:53:ab:4d:29:f1:ab:3d:30:f2:94:4a:
                    94:9b:f8:29:91:9f:27:4c:0b:cf:29:60:cc:6a:60:
                    59:80:1d:b5:f0:6b:33:e1:1d:05:73:78:34:96:9c:
                    dd:36:16:04:86:68:f7:b6:e5:0b:c8:26:e3:9d:c7:
                    8a:68:37:6a:7e:6a:26:95:8f:fe:97:9d:ac:bb:19:
                    03:64:38:bf:02:b0:a3:27:99:84:c3:89:23:8c:70:
                    a3:4f:9c:81:8f:1b:08:93:7b:32:cc:62:3b:2a:a8:
                    80:3e:bf:2f:72:b9:81:4b:1f:4a:14:fd:5c:43:91:
                    fb:b5:87:83:c8:57:dc:a8:6c:04:56:89:95:35:a7:
                    ab:bc:2d:26:38:ad:47:66:7f:ec:4d:0d:42:48:a0:
                    da:60:4d:ce:60:24:6d:5e:4d:e0:8a:85:6e:84:83:
                    eb:28:4d:30:3a:24:ba:bb:c9:c6:97:37:36:bb:93:
                    4f:be:4e:7f:0d:f0:e3:5c:0e:b4:12:39:c3:7a:e1:
                    ba:6b:0b:f9:a3:59:33:db:cb:8e:40:fe:b0:91:36:
                    e9:7c:52:b4:fe:61:56:72:a5:7f:b1:8d:6e:ae:2b:
                    88:13:fb:05:ea:d3:96:a3:94:46:3f:ca:54:dd:50:
                    20:f5:0a:83:41:75:6e:c7:f4:d1:25:04:36:ad:ca:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:BD:DC:FE:F3:7C:C1:9F:59:35:DA:04:78:A3:10:D6:CD:41:11
            X509v3 Authority Key Identifier:
                keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9d:aa:3c:eb:61:c0:93:9a:d6:98:9c:10:da:25:0d:33:1a:
         a4:5d:92:f7:69:5f:60:dd:56:f4:4a:de:45:8f:c1:a9:2e:16:
         1e:68:8e:af:e5:36:45:1e:e8:6d:5a:9f:a0:9a:95:f0:40:24:
         3b:5a:7f:88:00:8d:69:38:b9:a5:4e:c7:66:75:ee:8b:2d:6d:
         b9:e7:82:56:b1:6f:3c:0b:5a:ef:1d:7f:56:44:2a:4b:18:fd:
         77:68:a3:8b:99:b4:fd:37:fb:fa:e5:a7:a0:eb:71:11:e6:86:
         a8:a1:2c:40:38:f5:9f:de:e0:aa:bb:82:96:a2:38:ef:44:ba:
         b9:66:e8:41:65:2e:ae:6c:0f:5f:95:4d:03:ec:04:4f:0a:2f:
         02:d7:a6:06:81:07:bd:9c:d8:04:a9:34:08:23:ac:e7:5f:96:
         85:40:9a:88:24:b6:9e:ff:a4:3e:f3:8b:18:06:c9:7c:f0:e3:
         bc:ff:cb:8b:19:1a:b9:ce:f8:cd:15:d3:c6:ec:25:40:6a:b5:
         22:fb:6d:1d:89:84:91:36:36:c7:82:27:25:1a:65:f6:ce:9a:
         74:f1:0e:15:51:88:12:d6:b5:e6:d2:0f:2d:ae:50:60:f7:4c:
         50:11:ee:e6:cb:74:4a:d0:1d:c8:a7:ff:29:58:d0:35:52:24:
         4a:c5:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:54:03 2025 by rpki-client