Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File:                     J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier:          vdxkaWtR+zzBdKRquUMHn+6WeQVWq5RAjvPNaYHDjWU=
Subject key identifier:   AD:9A:3C:A2:A8:45:9B:08:FA:F6:69:59:F4:C5:DD:64:74:0B:8B:9E
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer:       /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial:       01976D7449CBEF7ECD9C829510772F4EE2EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 08:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:26 +0000
Files and hashes:         1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: bWfJip2RfWvC81SCDS5juwXfziYfkTkMPKwfCF9ZkFg=)
                          2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:49:cb:ef:7e:cd:9c:82:95:10:77:2f:4e:e2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
        Validity
            Not Before: Jun 14 08:00:26 2025 GMT
            Not After : Jun 15 08:00:26 2025 GMT
        Subject: CN=ad9a3ca2a8459b08faf66959f4c5dd64740b8b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:b9:f4:88:4a:a0:2e:0c:09:94:b3:e7:6a:
                    cf:2b:46:4c:94:13:31:ad:e1:65:d3:a9:65:85:2a:
                    1b:32:06:55:a8:b3:e0:94:43:8b:19:35:e1:7e:a8:
                    c8:6d:5d:39:80:4c:94:2c:3e:61:cd:b2:d6:ee:e0:
                    c8:44:cb:f3:78:c2:e6:9d:06:c3:83:0a:26:10:97:
                    36:70:42:cb:8b:cd:6c:d7:1f:83:9d:e8:59:01:e2:
                    02:ed:26:90:47:cc:95:f3:02:9e:2e:3d:71:e1:b2:
                    8a:ee:16:2e:24:c5:bf:00:67:58:41:c9:1f:5f:21:
                    ea:7e:27:29:d2:64:af:13:88:a9:6c:2e:b4:30:54:
                    0b:1f:75:d2:ad:b9:ec:98:f0:a9:34:70:be:1e:65:
                    a5:4d:e6:f7:a8:4e:fb:37:52:8f:51:3e:be:0e:50:
                    70:f6:71:22:7d:18:b9:73:2a:45:77:aa:1a:f8:0e:
                    63:6a:11:6b:f9:e5:bb:29:ff:7b:96:7b:a4:e1:02:
                    fa:99:c6:97:49:e4:dc:ab:2a:86:6e:35:36:3d:06:
                    78:f9:40:ee:eb:89:30:49:1b:c3:b0:81:e1:b0:8b:
                    c8:0b:d2:a3:43:a9:6f:1c:ec:0c:be:f4:a3:23:6c:
                    35:7b:35:ae:6d:4a:79:b6:02:29:c3:13:ce:ae:93:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9A:3C:A2:A8:45:9B:08:FA:F6:69:59:F4:C5:DD:64:74:0B:8B:9E
            X509v3 Authority Key Identifier:
                keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:a4:b6:6b:6b:42:7f:aa:dc:57:e2:fb:c5:d7:7d:c3:bd:
         dc:fe:52:b8:15:ec:51:d1:fe:f8:e9:b9:a2:96:6d:61:1f:21:
         1a:3c:4c:8e:99:af:8b:a9:3c:5a:8c:d9:e3:2f:e9:2c:69:c0:
         98:e8:49:37:31:27:98:f7:bb:e2:ac:7a:30:6e:46:64:d1:fb:
         77:62:99:01:f8:57:05:5a:23:04:c6:a5:fc:1e:92:6f:07:4f:
         f6:2e:5c:58:3a:ba:66:fa:f4:37:aa:47:1b:53:57:49:48:42:
         5e:ed:1d:54:21:8c:0d:0b:1e:b7:d8:e6:e1:6f:58:6d:52:ec:
         09:e4:32:03:7a:5a:b4:b5:0e:1d:65:b8:89:48:03:19:a0:5d:
         d5:63:96:26:95:6f:37:6a:52:26:bc:a8:27:56:a0:51:2d:67:
         9e:49:d5:c6:22:df:d8:dd:bd:44:bb:83:55:3a:ac:a4:a2:9c:
         91:0d:1e:03:2b:69:fb:4c:0e:0a:0f:5d:b0:1a:95:ac:de:c7:
         91:b5:74:1b:ad:02:b2:1b:82:b0:bb:26:ef:ff:c8:5e:d7:b5:
         2e:89:18:c8:f5:69:af:50:36:af:b8:52:7a:f3:bb:1a:79:d9:
         6e:dc:64:0c:82:cc:a0:7e:bf:22:b9:89:c1:49:4d:79:25:5c:
         d8:d2:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:04 2025 by rpki-client