Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          sAspU7wxjphFNtHLICEGTU3ngoIQRUDKl+KDrehMXQU=
Subject key identifier:   96:10:25:3D:06:FD:9E:0E:C5:93:5B:13:CB:3E:71:6C:DA:83:CF:3E
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       019784D83540C616F53514C0FE61657054D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0675
Signing time:             Wed 18 Jun 2025 21:00:51 +0000
Manifest this update:     Wed 18 Jun 2025 21:00:51 +0000
Manifest next update:     Thu 19 Jun 2025 21:00:51 +0000
Files and hashes:         1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: zMwyxCjNEgiBllOhqX7udNj8L8x5eHPU/c6CdoS1nBQ=)
                          2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:d8:35:40:c6:16:f5:35:14:c0:fe:61:65:70:54:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Jun 18 21:00:51 2025 GMT
            Not After : Jun 19 21:00:51 2025 GMT
        Subject: CN=9610253d06fd9e0ec5935b13cb3e716cda83cf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:c8:8c:36:cd:4e:2d:37:fc:62:c1:8f:25:
                    36:2c:ce:b9:4f:ba:89:59:e6:c9:58:1d:32:33:d9:
                    a7:4f:d8:88:de:ab:c4:bd:53:9b:de:2d:b2:04:d5:
                    17:14:45:57:5d:3c:f5:3a:4e:a9:44:77:40:ab:65:
                    2a:05:f0:df:de:d2:0d:01:41:0a:d7:1c:c0:68:ad:
                    c2:ac:cc:84:5d:83:1a:40:a8:1c:75:3d:8b:00:99:
                    5f:3d:7d:c8:78:2d:a9:08:2a:07:6c:d1:bf:e6:4f:
                    63:bf:6f:ad:79:3b:58:d2:9c:68:12:2e:f5:58:fd:
                    65:d9:9e:22:3f:04:92:6f:b0:71:d1:ed:6c:8d:9f:
                    21:21:d3:f8:33:21:e2:80:70:a9:ef:86:18:93:76:
                    23:d2:9c:9d:22:81:9b:bf:10:9f:d4:02:6f:bb:39:
                    95:75:f6:bb:35:d8:bf:bc:80:8f:d7:64:11:5a:3e:
                    8b:d1:9c:58:cf:a0:25:d2:e3:c8:ad:6f:97:f1:1d:
                    3e:61:87:36:b4:5e:1c:a6:be:43:20:dd:66:ce:83:
                    f2:f5:ff:eb:2c:27:61:8d:92:fe:68:a9:d5:11:4e:
                    7a:9c:5f:dd:76:b9:40:57:5a:c4:dd:11:b7:92:d6:
                    24:d1:36:17:91:67:f6:3b:d2:2b:97:df:3d:b9:bc:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:25:3D:06:FD:9E:0E:C5:93:5B:13:CB:3E:71:6C:DA:83:CF:3E
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:55:c3:d0:8c:9a:2a:14:91:7d:f8:12:6f:ee:e4:2f:a0:82:
         bf:a8:14:b3:2f:f7:55:3d:67:f4:98:2e:97:68:c8:63:97:89:
         ca:db:a4:bd:0f:f6:eb:b9:59:22:74:26:cc:e9:e2:c6:09:e5:
         e6:6c:f4:b8:07:4d:dd:ab:75:fa:8d:66:a1:97:5d:66:5a:4c:
         72:3b:12:3e:71:5f:9e:f2:e0:5e:26:06:5a:58:11:5f:e2:df:
         5f:73:97:7c:ee:4f:29:06:dc:ee:e3:d3:78:d8:09:09:d3:52:
         99:f0:59:06:95:ac:17:17:59:a0:04:df:1b:0f:f9:ae:cb:bb:
         04:f8:fb:5a:84:d8:07:ad:f8:4a:f7:7e:84:f2:57:bf:c9:1d:
         85:8b:31:d0:49:d1:2b:b4:b5:f6:7c:cf:97:07:e2:7f:cf:79:
         26:19:fb:e4:35:f6:06:6e:62:d3:cd:7b:3d:ef:3d:81:5f:48:
         ab:17:a7:5b:28:81:99:5a:45:c6:f4:13:d5:3c:92:c9:6a:54:
         7e:dc:0c:6a:47:07:aa:a2:ff:7b:8b:7f:57:ad:db:37:fc:7b:
         0e:d8:63:12:84:c3:8a:57:87:1c:43:29:5c:b3:19:a0:ae:5a:
         e7:9d:6a:48:ba:c5:6d:90:8a:ad:9b:be:3a:7d:42:dc:2a:e1:
         dc:92:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:10:21 2025 by rpki-client