Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          3RgPlxh/Hf5YDdKePPrtTzADGvlMujsBp7u03KdcahY=
Subject key identifier:   D2:E5:49:E7:04:53:99:9D:58:7E:07:EE:3C:22:D4:34:71:4C:A5:63
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       01976F632DD3F9B3FD239A868B55F3BBFEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          0E4C
Signing time:             Sat 14 Jun 2025 17:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:59 +0000
Files and hashes:         1: 07kw2MzDV5dpbfYC0MA4AILk1XE.roa (hash: tg8LJDbeLYQBkgtHitpgNGT/W91ZoJCC9459dV5/7ek=)
                          2: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
                          3: Z4kN8nDsrb7sFEsQvwC-1YneLds.roa (hash: RYq7W3ftzHW7v8PnyhRA0Yz8QSctQ/uuBL07f/0XUZc=)
                          4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: 5N08s74TR9axRTEAP7uP+1mwCoxjWNWN7ywDcqyd+9g=)
                          5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
                          6: wJVCqkJKW7wdukijJarB4SSlNh0.roa (hash: OCvKaQOoRbSfLx6VPEZE2vLiOcjFXPz8efWK0J/I8to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:2d:d3:f9:b3:fd:23:9a:86:8b:55:f3:bb:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Jun 14 17:00:59 2025 GMT
            Not After : Jun 15 17:00:59 2025 GMT
        Subject: CN=d2e549e70453999d587e07ee3c22d434714ca563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:d9:be:2f:78:12:0d:c4:22:b5:12:1d:f5:
                    18:09:b1:11:f2:34:a7:59:fc:47:55:07:26:7c:61:
                    41:65:f7:25:2c:7b:9b:d6:66:19:14:67:82:bc:96:
                    47:b6:6f:82:6b:bc:fb:f4:42:1c:f4:9d:cf:a9:dd:
                    5c:7d:75:0b:79:58:25:83:21:60:3b:52:f9:62:b4:
                    08:0d:e2:e5:60:53:9a:77:96:3f:3c:41:95:18:17:
                    78:18:3e:2f:9f:a4:b8:7b:99:b3:28:7f:f1:03:bf:
                    03:30:c1:62:07:e1:d3:e5:f6:65:49:b0:30:12:c5:
                    d7:1f:46:35:b3:e0:05:da:32:86:df:10:0d:27:7e:
                    ee:f3:da:2b:d6:0e:14:b5:ca:cc:c8:2a:a4:2f:ed:
                    fb:21:99:6b:ba:e4:a9:b1:aa:1a:3b:40:54:94:5e:
                    0f:28:53:49:95:68:9c:c2:fb:b4:10:a7:39:c1:f6:
                    1a:75:58:71:09:7e:63:a3:9f:03:01:04:c4:57:43:
                    89:27:9e:9c:bc:23:ac:69:de:85:fc:ac:00:76:e1:
                    92:a0:7b:ca:97:97:03:d6:3a:18:b4:e2:de:95:d2:
                    40:f1:0e:dc:dd:83:c4:70:6d:23:eb:ed:f2:59:f2:
                    05:c3:45:7b:ad:37:50:38:ea:6f:21:4e:49:55:0b:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E5:49:E7:04:53:99:9D:58:7E:07:EE:3C:22:D4:34:71:4C:A5:63
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:b5:ac:92:e9:d5:4c:f8:f7:f0:87:9f:59:dd:2a:02:83:
         d0:80:5a:05:2e:d7:bb:f8:fd:96:a7:16:3d:ad:6c:43:72:aa:
         1c:05:d9:ce:f2:94:2a:a1:e8:87:47:24:7f:f9:b8:bc:3e:ec:
         65:6b:f4:63:f7:34:29:d0:f4:2c:24:76:cd:67:88:48:a2:ae:
         27:35:91:d9:25:2a:cf:b2:74:99:7e:89:0f:97:2a:24:38:14:
         f2:73:18:ce:c0:78:43:12:d1:6c:19:7e:a1:48:7c:af:fc:85:
         63:cc:00:86:1f:f3:03:ff:d4:97:67:1a:04:3c:0b:63:d0:24:
         77:d5:7f:18:10:cf:65:0d:fa:b6:7c:2a:b1:79:65:c5:9f:8c:
         a5:bd:f2:97:72:51:32:10:46:26:77:f6:bc:19:35:ef:b4:29:
         41:36:df:f5:46:f8:50:3d:9d:13:35:05:99:c7:5b:38:d1:6f:
         38:a8:24:fc:1a:e2:cb:11:82:9d:dd:e6:86:a9:bb:6a:7c:8f:
         fd:f5:2c:cf:86:74:ed:71:c5:b9:f2:fc:b6:ab:66:be:0e:e7:
         8e:aa:8d:3e:60:11:46:8f:30:e2:cc:d7:a2:76:c2:16:56:0b:
         84:7c:a9:e0:2b:a5:20:62:a7:93:be:32:bd:67:40:02:1a:16:
         0b:2f:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:21 2025 by rpki-client