Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File:                     JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier:          RuJ9yHBv9HQQUO6ZEiEo4RwuTY8eSWoBrmopU4co4PQ=
Subject key identifier:   7D:60:B4:97:B1:7C:31:67:6F:77:75:94:1A:B8:0B:A0:F8:67:E5:55
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer:       /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial:       0197850EED42BB1EE21A23143F7CEF483712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number:          1599
Signing time:             Wed 18 Jun 2025 22:00:37 +0000
Manifest this update:     Wed 18 Jun 2025 22:00:37 +0000
Manifest next update:     Thu 19 Jun 2025 22:00:37 +0000
Files and hashes:         1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: tMlVDaJf/pWCFpD9NYJsNzEVULFDIbBdA6aIntCXc5E=)
                          2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:0e:ed:42:bb:1e:e2:1a:23:14:3f:7c:ef:48:37:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
        Validity
            Not Before: Jun 18 22:00:37 2025 GMT
            Not After : Jun 19 22:00:37 2025 GMT
        Subject: CN=7d60b497b17c31676f7775941ab80ba0f867e555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:4f:83:a4:8a:bd:48:c9:72:fb:32:24:a2:
                    62:12:5b:90:7a:e0:53:23:bb:a3:3d:ef:73:7d:0e:
                    06:1b:b5:0f:9e:1d:99:e1:92:94:d6:aa:8f:ea:02:
                    f8:83:29:a3:67:ba:10:18:13:74:79:f8:f9:64:b3:
                    64:1a:d5:cb:a9:c0:06:fc:08:1e:c3:66:95:fc:09:
                    1e:8a:61:ef:2a:4b:d1:6f:00:85:06:ac:18:a8:ee:
                    0e:77:66:e3:96:bf:a9:6c:af:d5:92:63:bc:cb:a8:
                    92:26:ef:3c:d0:0f:88:2a:89:ca:d4:f7:56:8a:11:
                    4f:09:6f:7c:f7:81:ca:3f:e6:03:1e:70:a5:d3:9b:
                    44:ad:81:c6:7b:76:f3:8a:0c:37:c2:d5:05:d6:69:
                    0a:16:87:30:39:eb:25:4c:4f:91:31:3a:c9:d3:58:
                    24:c8:ff:c9:f1:8c:ce:17:34:db:e4:85:9f:f5:d0:
                    7b:3e:3e:ea:9b:31:56:b8:a8:f8:d2:62:e6:10:14:
                    cb:38:66:3c:ed:34:2b:95:28:16:f8:cb:eb:d2:4f:
                    cb:ea:5f:fd:82:97:4c:7d:b5:96:0f:5b:aa:f8:0b:
                    bf:3b:67:08:61:d3:86:98:66:a9:a4:05:18:d0:b0:
                    5b:c7:4f:92:b5:48:ad:32:ef:4d:c7:cc:bb:9a:83:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:B4:97:B1:7C:31:67:6F:77:75:94:1A:B8:0B:A0:F8:67:E5:55
            X509v3 Authority Key Identifier:
                keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:38:71:f5:ac:9b:c7:b1:81:f9:75:01:4b:e0:41:67:20:69:
         d8:24:06:ed:d7:2e:98:9c:68:12:20:4f:1d:4f:71:48:19:ed:
         4a:71:34:3d:f9:6b:57:53:6a:31:91:c1:e2:38:a1:82:ee:2e:
         57:2c:dc:73:fb:2b:85:f5:ac:8d:ee:cc:87:2d:48:ba:49:f0:
         8e:79:6d:1a:4f:d7:a9:20:51:74:a0:a0:ed:43:02:71:a7:89:
         f1:54:18:0a:87:6e:1d:31:d2:f3:95:09:f7:2f:1b:17:22:0c:
         fd:01:6a:ab:7d:70:fb:45:5c:c2:15:ba:e6:bf:b8:19:3c:fe:
         e8:7f:7d:e2:22:04:00:4e:42:f3:d6:8f:e6:c1:80:1e:a0:be:
         98:15:5a:9f:de:12:06:1a:4a:ce:c2:b9:ca:70:99:b2:a8:51:
         64:c6:1c:cc:1d:06:f1:63:5e:74:f3:87:03:f5:8a:76:ab:41:
         fc:78:77:70:5a:33:fd:97:b4:cf:30:6f:d7:fe:d1:d9:9f:e9:
         ab:a3:20:28:41:3e:e0:1b:de:fb:1e:d9:39:96:15:e1:45:62:
         a3:2c:06:80:74:bd:42:e7:3e:e8:87:eb:0d:94:d0:13:10:fa:
         7c:21:b2:3e:fd:14:38:d0:9f:4e:40:bb:19:d5:84:01:ed:15:
         9e:84:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:40:04 2025 by rpki-client