Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          Kcy1duhQm1D2WgIFg+SWzPoNZE3CjkquUbOkh/6jkZU=
Subject key identifier:   C0:43:A2:D5:2E:60:DA:6C:44:48:EA:79:98:17:C3:40:54:5D:7E:01
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       01976EF516E6EC1D2553376348C3515E606C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          106A
Signing time:             Sat 14 Jun 2025 15:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:45 +0000
Files and hashes:         1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
                          2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
                          3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: oBMchwrCSyN9tr/UBbHcYtkqOxF2l66KXH/p7SC/Olw=)
                          4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
                          5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:16:e6:ec:1d:25:53:37:63:48:c3:51:5e:60:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Jun 14 15:00:45 2025 GMT
            Not After : Jun 15 15:00:45 2025 GMT
        Subject: CN=c043a2d52e60da6c4448ea799817c340545d7e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:67:a0:d6:d9:6f:23:67:fb:05:4a:40:f0:
                    a3:e1:1d:1a:81:12:50:46:aa:e2:71:42:fa:2c:9f:
                    4c:57:21:32:f8:59:86:96:47:04:9d:08:e5:af:65:
                    45:8c:dd:f2:e5:15:c5:b5:25:0c:9a:a6:bd:92:04:
                    2a:6c:3b:ff:35:ea:16:2d:37:fb:73:b2:95:30:1d:
                    7f:ad:c5:22:d9:ef:e5:f0:54:8d:62:c2:bd:22:20:
                    e0:05:a4:11:51:02:bd:87:92:51:ba:86:1e:d9:e3:
                    7e:35:52:45:0b:23:2f:79:5c:e2:a9:0f:7f:09:ae:
                    cc:0f:64:e9:d5:b9:94:c7:07:b5:0b:81:74:f5:57:
                    02:62:e2:1b:df:65:ff:a6:64:5c:11:2b:dd:23:83:
                    f9:2e:31:68:57:73:0f:6c:dd:68:ff:37:d4:49:a4:
                    7d:80:a2:fb:31:d5:32:17:72:46:ef:56:94:d7:0e:
                    a8:9d:da:e9:7a:df:21:db:e9:c6:f7:37:cc:a0:52:
                    7a:9f:6b:49:2a:6e:02:2b:ed:14:2d:10:5d:bf:dd:
                    6f:8a:61:f4:c5:3c:8f:c6:6c:51:03:74:c3:d1:7a:
                    93:17:e2:42:da:74:49:9e:50:ec:b6:5f:a5:03:78:
                    0c:c0:cb:4a:38:5b:a2:1a:d4:39:f1:cb:6d:df:c8:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:A2:D5:2E:60:DA:6C:44:48:EA:79:98:17:C3:40:54:5D:7E:01
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:8f:c6:ca:9f:d9:b7:8f:8b:dc:d7:21:73:4a:64:a8:26:2e:
         0e:5f:5d:44:a1:ca:b9:ae:35:c0:e9:c9:03:42:9f:8e:a1:f2:
         43:49:fe:0e:ba:88:4a:0e:e3:c3:38:f7:9c:af:32:e2:a0:f3:
         45:2f:06:3c:aa:cc:a8:88:77:f8:ce:12:f5:e3:19:fc:48:88:
         e4:9a:be:f6:18:9f:bb:35:ab:67:12:0b:56:d2:44:16:08:69:
         c6:9f:73:03:d9:dc:87:fc:a0:64:96:1a:e5:ed:5c:20:b3:df:
         d6:0e:1c:ad:71:50:75:84:e0:91:7e:57:80:85:6b:c6:cb:c8:
         d5:ab:07:bf:87:7a:a2:c4:ee:6b:ce:3d:41:8d:9b:bd:ae:0c:
         fa:bf:df:44:c7:d7:b1:20:75:36:06:22:8d:32:2f:2d:97:9e:
         f4:62:28:46:7a:3e:fe:51:7e:ff:26:df:76:0a:55:43:26:ec:
         9b:37:88:aa:d9:6a:6e:a3:3c:6d:b3:73:9c:89:de:47:e0:cc:
         a4:59:51:84:bb:e0:96:ae:9d:18:c9:40:74:da:44:c3:4d:f3:
         71:63:af:2c:dc:5d:8f:ca:34:13:ec:c4:64:c5:36:8d:f1:c7:
         2d:88:75:71:d1:64:10:a2:fa:95:08:fc:21:48:82:35:6f:86:
         46:b7:f0:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9Rbm7B0lUzdjSMNRXmBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTA0Yzc0YzcxMjcwOTBhNGNmZjg1MDAxZjQ0MzE0OWUx
MjhlNjAwHhcNMjUwNjE0MTUwMDQ1WhcNMjUwNjE1MTUwMDQ1WjAzMTEwLwYDVQQD
EyhjMDQzYTJkNTJlNjBkYTZjNDQ0OGVhNzk5ODE3YzM0MDU0NWQ3ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzBnoNbZbyNn+wVKQPCj4R0agRJQ
RqricUL6LJ9MVyEy+FmGlkcEnQjlr2VFjN3y5RXFtSUMmqa9kgQqbDv/NeoWLTf7
c7KVMB1/rcUi2e/l8FSNYsK9IiDgBaQRUQK9h5JRuoYe2eN+NVJFCyMveVziqQ9/
Ca7MD2Tp1bmUxwe1C4F09VcCYuIb32X/pmRcESvdI4P5LjFoV3MPbN1o/zfUSaR9
gKL7MdUyF3JG71aU1w6ondrpet8h2+nG9zfMoFJ6n2tJKm4CK+0ULRBdv91vimH0
xTyPxmxRA3TD0XqTF+JC2nRJnlDstl+lA3gMwMtKOFuiGtQ58ctt38gp5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBDotUuYNpsREjqeZgXw0BUXX4BMB8GA1UdIwQY
MBaAFCRQTHTHEnCQpM/4UAH0QxSeEo5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQt
ZDA2MjJjNGNkNDhkLzEvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQtZDA2MjJjNGNkNDhk
LzEvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4/Gyp/Z
t4+L3Nchc0pkqCYuDl9dRKHKua41wOnJA0KfjqHyQ0n+DrqISg7jwzj3nK8y4qDz
RS8GPKrMqIh3+M4S9eMZ/EiI5Jq+9hifuzWrZxILVtJEFghpxp9zA9nch/ygZJYa
5e1cILPf1g4crXFQdYTgkX5XgIVrxsvI1asHv4d6osTua849QY2bva4M+r/fRMfX
sSB1NgYijTIvLZee9GIoRno+/lF+/ybfdgpVQybsmzeIqtlqbqM8bbNznIneR+DM
pFlRhLvglq6dGMlAdNpEw03zcWOvLNxdj8o0E+zEZMU2jfHHLYh1cdFkEKL6lQj8
IUiCNW+GRrfwqw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:48:42 2025 by rpki-client