Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File:                     c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier:          TTCIUQ6nVUE88oi91zVlV3/zE5FSOwOKsoc1NJm1gPM=
Subject key identifier:   3E:8B:32:03:84:99:75:D0:2F:04:EB:CD:21:6A:37:50:01:5A:9A:72
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer:       /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial:       019771F66BF156A4A2149435419AB313BEDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 05:01:04 +0000
Manifest this update:     Sun 15 Jun 2025 05:01:04 +0000
Manifest next update:     Mon 16 Jun 2025 05:01:04 +0000
Files and hashes:         1: H57NiATge4ZhmPBN_965_8VMs0k.roa (hash: 0TYVpss41AxvRBijLSvUxSXE2COMSD4Rg3g/0pWujAE=)
                          2: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: a33zcK4M9/AGqtOnB1tKlt/qNXxsMVEG7T+iu/BsKk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:6b:f1:56:a4:a2:14:94:35:41:9a:b3:13:be:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
        Validity
            Not Before: Jun 15 05:01:04 2025 GMT
            Not After : Jun 16 05:01:04 2025 GMT
        Subject: CN=3e8b3203849975d02f04ebcd216a3750015a9a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c9:e2:0c:0b:21:76:cf:18:de:2e:48:52:f5:
                    25:ff:af:e1:30:94:41:23:31:5a:b3:96:b5:26:32:
                    2e:52:c3:63:89:f0:ec:7f:bd:e5:71:1b:50:99:72:
                    0f:60:af:15:c4:04:dd:0a:6f:2b:a6:ae:c5:5d:bd:
                    62:25:d6:08:89:e1:00:3f:33:41:9f:e0:77:97:57:
                    07:f7:b5:cb:5f:91:41:98:53:3c:82:55:ee:bc:cd:
                    80:65:32:25:95:09:cd:9b:ca:25:13:87:09:48:71:
                    58:d7:34:f4:99:ad:9c:be:74:4b:b0:93:2b:a6:54:
                    a9:3e:5c:51:cb:3d:2e:1f:cb:d4:b9:a2:5a:27:a1:
                    d8:d9:1c:be:85:d9:a2:88:f2:cf:e6:06:4c:e0:6c:
                    d0:ae:8b:f9:9b:07:37:0b:77:66:79:a7:1b:54:a7:
                    ed:9e:c8:01:74:de:ad:6d:1b:64:9e:41:d4:f3:0e:
                    36:2f:a0:c6:17:ab:d4:09:52:7e:98:35:58:f8:f8:
                    40:b5:64:1e:ef:63:d0:49:77:6d:72:18:0e:36:6a:
                    b8:a4:80:04:f8:53:25:ae:3e:67:56:48:bb:23:8d:
                    f1:f6:e2:a8:7a:5a:6f:96:e7:b0:67:ce:5a:7d:da:
                    7d:c6:4b:e1:1d:f0:c9:67:99:74:66:22:43:0a:9c:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8B:32:03:84:99:75:D0:2F:04:EB:CD:21:6A:37:50:01:5A:9A:72
            X509v3 Authority Key Identifier:
                keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:cb:9a:24:7e:a6:b4:78:4f:25:9e:d6:13:88:dc:d9:81:
         eb:f9:79:16:17:ef:1a:0d:6c:70:8c:92:6a:ea:86:3d:ed:a2:
         1f:12:05:c4:9a:84:07:56:44:ac:7a:61:45:55:58:9e:50:44:
         5e:eb:3a:d9:51:24:aa:50:24:07:71:17:b2:33:e9:59:7c:64:
         e7:43:39:8f:ed:e8:fa:17:cd:91:1d:09:c5:aa:ee:e2:17:b6:
         23:13:72:ca:35:c4:9b:a3:0a:a5:4b:ae:c0:38:77:98:89:6c:
         0d:f6:fe:55:a9:63:be:55:f6:3d:5b:22:a1:6c:f4:31:75:bf:
         6f:cf:d1:ef:32:19:07:b3:e3:35:6d:9a:70:13:98:48:c7:c2:
         d4:b8:b8:b5:b2:6b:f9:bd:ce:c9:e5:12:d5:07:48:da:61:b8:
         d5:f3:6f:67:90:e7:8a:77:c7:7a:8d:25:2a:ca:5d:4c:80:f3:
         c8:e5:b3:51:d5:0a:cc:01:73:85:5b:7e:7d:58:4a:a3:43:c9:
         ae:ab:e3:66:7f:04:18:a5:98:71:c1:1c:4c:66:c7:05:34:38:
         7e:7b:05:73:33:30:cd:fe:8e:c4:ea:83:4c:23:f3:3d:fa:8f:
         7a:55:06:a2:49:fa:0f:fd:ee:e1:36:86:fd:7c:0d:16:bb:71:
         60:5e:55:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:23 2025 by rpki-client