Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File:                     jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier:          7w5qXwZOapGdJpB5Fy47/YdRqINGYrKXhtw+X8g3XVo=
Subject key identifier:   57:55:5E:55:11:DD:C0:DA:9C:41:21:88:04:53:1E:66:15:6E:B1:63
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer:       /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial:       01976C2B2B3997048536C5BCB3076185D5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number:          07B6
Signing time:             Sat 14 Jun 2025 02:00:57 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:57 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:57 +0000
Files and hashes:         1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
                          2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: +GVnLLlSToDgIlHQb8hQGHUmDC+FiyR3emoyFzuv96U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:2b:39:97:04:85:36:c5:bc:b3:07:61:85:d5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
        Validity
            Not Before: Jun 14 02:00:57 2025 GMT
            Not After : Jun 15 02:00:57 2025 GMT
        Subject: CN=57555e5511ddc0da9c41218804531e66156eb163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:0a:1a:46:e0:f8:09:c1:f4:b7:3c:66:e4:
                    3a:91:39:ea:00:fd:4b:86:e6:93:de:d6:7a:34:e7:
                    3c:c2:db:40:f0:07:37:64:04:c8:d2:10:70:b9:0f:
                    db:2a:fc:0c:50:c7:44:03:e3:77:0b:16:5d:85:e7:
                    c3:92:e6:d8:f9:4b:b9:08:50:1d:f3:88:18:1e:d7:
                    10:91:57:66:71:68:a4:f3:73:cd:5b:81:1d:a1:6f:
                    c1:48:44:db:c2:00:db:e5:ec:0e:d7:32:2b:df:d8:
                    bf:c0:e9:d3:6b:ac:38:b7:fe:54:ee:f4:35:e1:e9:
                    97:4f:5d:ee:f7:48:67:ef:4a:e0:70:50:36:3e:2d:
                    c4:23:64:e0:e8:a4:2e:35:b1:be:ad:11:b3:a6:9b:
                    1e:84:25:f5:56:79:26:c2:27:5d:3d:a3:f5:63:9f:
                    5a:ed:a6:31:20:7c:2c:06:98:35:df:ee:9a:9c:4b:
                    c6:22:2f:e7:59:20:ef:9a:c1:ab:c6:48:5f:d7:4e:
                    3d:15:75:20:9a:e0:d0:7a:f6:e3:a4:a9:a2:0a:4c:
                    2f:8c:06:2d:a4:46:1e:12:e3:1b:19:f7:9d:fb:78:
                    38:44:5d:14:71:18:73:f7:4b:a1:e1:76:10:52:20:
                    c6:53:3c:d0:74:70:1c:6a:d8:95:91:a0:78:6c:96:
                    e7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:55:5E:55:11:DD:C0:DA:9C:41:21:88:04:53:1E:66:15:6E:B1:63
            X509v3 Authority Key Identifier:
                keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9e:23:c7:6b:4f:9f:f3:ce:70:dd:fb:af:28:f6:ee:d2:50:
         76:ef:e3:2e:5d:d0:5a:ad:fe:ec:f1:2c:df:6d:73:13:f7:67:
         c1:9a:89:a4:98:d0:01:8f:9c:05:53:93:dd:e5:96:89:4d:f1:
         e8:be:ea:3f:54:ca:dc:6e:ce:2a:06:9c:f0:89:f7:27:60:ea:
         3b:de:a0:79:a7:ac:3e:b0:85:87:a1:46:23:d6:0e:4a:ad:fe:
         f4:9e:d6:e3:fa:12:fc:57:3a:36:e9:bb:7f:ab:ca:4d:a4:62:
         7a:c7:53:30:ff:d4:e1:b7:60:11:18:f1:44:c1:2c:6e:47:61:
         5a:38:bd:d7:47:28:73:28:f5:90:1e:7d:b0:86:4b:4d:01:f8:
         83:aa:8d:0d:c5:93:4c:41:3c:e4:d3:66:28:52:b1:62:0e:26:
         fc:1c:76:e3:cd:34:38:ad:32:e0:3d:07:60:b5:54:42:08:f9:
         4c:d2:b4:ce:50:a4:cb:d6:05:f5:6c:14:cd:c6:6a:4e:3a:4d:
         86:10:7b:13:6f:f1:00:8c:88:7d:7b:69:f7:95:fa:66:8d:58:
         02:4f:7f:a6:3f:86:43:bf:f1:64:41:a2:b2:40:17:84:c0:0f:
         34:51:6a:8b:0b:ed:77:13:4b:e8:5b:8b:e6:5d:e3:a3:39:7c:
         90:ab:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:47 2025 by rpki-client