Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          A0NVdHtdJhf2rUUbvud7120B8Zy6EPvOkI8GSbWKI74=
Subject key identifier:   80:F2:F1:32:4B:4F:B5:1A:5D:DF:DD:F1:A6:6F:0F:08:40:04:D5:20
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       019875D0A7F8BF484A8F35127E2C8DD35D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          10F2
Signing time:             Mon 04 Aug 2025 16:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:05 +0000
Files and hashes:         1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
                          2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
                          3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: YqqwA5eLRzXL1xcoYlEoYUHIz00k/cVU65HIPZ7unrQ=)
                          4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
                          5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:a7:f8:bf:48:4a:8f:35:12:7e:2c:8d:d3:5d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Aug  4 16:01:05 2025 GMT
            Not After : Aug  5 16:01:05 2025 GMT
        Subject: CN=80f2f1324b4fb51a5ddfddf1a66f0f084004d520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:d5:54:86:48:08:c1:85:3b:fb:0d:d8:77:
                    a7:98:49:3c:25:e1:41:dc:54:57:4b:b0:96:ce:04:
                    a3:64:da:9a:83:44:31:e8:83:b9:1b:1f:6e:e3:66:
                    89:6a:77:2e:0d:a2:b2:dd:b5:48:cd:50:0d:e0:22:
                    a8:c1:88:3b:ae:e1:ee:9f:dc:85:d8:b9:96:2c:e1:
                    16:a0:e9:86:e8:d2:34:22:5a:02:3e:a0:0f:99:4f:
                    1a:ec:f4:fe:9c:de:18:26:c2:b9:2e:af:94:49:c4:
                    ab:8c:78:45:04:87:fa:e7:cb:9d:e1:62:5d:05:13:
                    1e:68:7f:5c:2c:21:84:9a:cb:6c:b5:2a:eb:4f:53:
                    f6:79:61:b9:01:e6:b9:80:7f:0d:a0:ec:2c:66:54:
                    40:83:a6:a4:cc:53:99:a5:88:0f:3a:12:4c:1b:3e:
                    d6:aa:87:1f:42:49:c1:08:2d:05:7e:08:84:03:6c:
                    3a:a6:c6:83:0f:b7:cb:c2:bf:10:6a:f4:b5:a3:3f:
                    57:1f:0b:fe:a1:94:e6:fc:a9:5e:62:0d:6a:67:55:
                    7f:74:fe:bd:6a:8d:4b:51:06:13:8d:15:a3:9a:4f:
                    79:8d:4e:46:99:0b:4d:73:cd:5e:48:d3:a7:7a:ab:
                    c8:9a:54:4a:99:f5:81:0e:5d:0b:ac:f7:b9:92:66:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F2:F1:32:4B:4F:B5:1A:5D:DF:DD:F1:A6:6F:0F:08:40:04:D5:20
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:1d:b8:64:09:3b:b0:5d:d5:96:13:82:ee:88:d1:a0:96:82:
         05:0f:bb:f9:64:58:08:f6:69:88:41:79:3b:13:5e:3c:f8:90:
         68:03:f5:55:9e:4a:6a:81:e2:c9:2f:d8:09:5a:02:5e:af:20:
         13:98:c1:3c:e8:63:05:aa:c4:be:38:96:70:9a:16:e8:25:05:
         2f:67:09:77:5a:52:f0:47:aa:6b:1d:d5:57:b3:47:e0:c7:21:
         13:b9:03:6f:28:6e:c6:7f:5a:01:d1:eb:9d:00:c6:b7:97:90:
         e2:f7:ef:87:57:b4:f0:d8:ca:f4:f2:6a:ad:b0:5e:49:73:91:
         b9:b6:d4:13:c9:4d:ab:ae:6e:84:65:42:ce:11:95:67:d9:27:
         56:5f:1b:a4:9d:9f:1d:e5:49:08:28:99:45:ce:ba:4a:2d:64:
         62:51:a0:e6:c4:61:d1:9d:56:74:f8:32:e1:02:f1:68:62:c8:
         00:af:10:98:25:02:88:67:65:7c:01:4d:64:c3:9c:fb:f0:2a:
         90:af:33:b8:f5:b3:1e:69:4d:f8:29:35:c7:95:0e:b9:76:cc:
         c9:55:24:e0:49:b4:d6:61:ac:3c:c2:6c:f8:89:5d:1e:54:ae:
         db:8e:c9:9c:9e:b8:d0:75:5d:6b:eb:ba:c7:9b:14:4e:82:b8:
         f6:b2:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:25 2025 by rpki-client