Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File:                     J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier:          ErZ2EHS7DOSYaB+aNRAk3sKDElSbFynJTq4kI9vInzo=
Subject key identifier:   14:D5:DC:91:11:D6:96:F2:43:5E:0D:D8:91:AC:78:3D:3E:8A:E0:B6
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer:       /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial:       0196813482BFB65D70C6838B306987A7D5C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number:          119A
Signing time:             Tue 29 Apr 2025 11:00:24 +0000
Manifest this update:     Tue 29 Apr 2025 11:00:24 +0000
Manifest next update:     Wed 30 Apr 2025 11:00:24 +0000
Files and hashes:         1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=)
                          2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: aNCYKjbhRhCRp9m7f/yusYWWxXrKZbnpYArbVHQclvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:34:82:bf:b6:5d:70:c6:83:8b:30:69:87:a7:d5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
        Validity
            Not Before: Apr 29 11:00:24 2025 GMT
            Not After : Apr 30 11:00:24 2025 GMT
        Subject: CN=14d5dc9111d696f2435e0dd891ac783d3e8ae0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:b8:04:38:62:ff:34:37:09:74:dc:26:ed:
                    5a:b0:14:e7:43:bb:60:cd:9c:52:73:6d:79:81:de:
                    82:34:99:38:ab:08:34:b9:eb:38:ae:a5:40:7b:ee:
                    c1:08:7c:fc:10:34:a1:c8:8c:8a:42:30:14:30:2d:
                    f6:88:51:64:ba:c2:ad:55:36:f3:d8:1a:20:1d:24:
                    6d:f9:89:b4:c9:15:3f:2a:e2:37:ce:30:24:36:d1:
                    9d:5f:85:62:0d:2a:31:39:18:6c:62:20:9d:93:0b:
                    0a:5d:f6:96:45:63:b1:f0:17:a9:ff:d5:7d:b9:08:
                    41:a6:8d:29:e2:e2:34:80:43:e4:3d:80:74:7e:b8:
                    7c:ce:7c:72:92:48:50:35:c5:d4:56:dc:b6:3a:cb:
                    5a:df:96:c7:37:ef:c1:fb:cb:d0:e2:4e:62:4f:7f:
                    d4:3b:ec:7f:3f:32:b4:07:1f:c0:e5:b2:0b:87:04:
                    38:60:c8:57:5b:3b:6d:ed:3f:86:54:64:55:cb:01:
                    b8:64:97:d7:45:ae:f4:1a:ea:3e:89:de:e0:83:7a:
                    8f:ee:39:a7:4c:26:36:fe:42:03:fd:6f:e2:42:f2:
                    19:d7:87:ed:ee:27:a8:af:9b:b4:af:b8:ad:2e:7b:
                    1c:d5:63:0b:8e:fd:4d:b8:2a:5e:43:86:a1:69:47:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D5:DC:91:11:D6:96:F2:43:5E:0D:D8:91:AC:78:3D:3E:8A:E0:B6
            X509v3 Authority Key Identifier:
                keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:86:de:b1:d7:b7:c5:09:00:04:ff:70:e8:29:fc:c6:32:
         5a:e0:1e:b7:7d:b3:f8:b0:1a:81:48:f9:79:32:f8:37:10:f4:
         71:90:dd:74:1f:d3:46:46:9e:4e:37:0f:31:c2:1b:d7:7f:96:
         36:03:69:00:89:38:71:b4:76:e9:08:86:07:9d:ba:03:2b:61:
         bc:84:1f:d5:64:90:a8:b1:38:87:83:95:65:9f:13:b0:0e:91:
         cc:94:9e:b7:34:32:8a:cf:4d:56:12:dd:4c:97:81:ec:6f:9a:
         a7:06:c4:b5:cf:5b:9f:26:1f:19:13:c6:d6:4e:50:42:50:29:
         79:d2:2d:44:76:1a:59:b5:f4:64:1e:56:47:45:6e:4b:dd:4e:
         87:24:ce:02:f9:62:f5:fb:0f:71:63:a3:99:de:49:02:b1:bc:
         e1:48:78:27:dd:b7:2f:04:8a:d1:37:e1:9a:23:0a:8f:16:c8:
         e1:aa:7d:54:3e:64:f2:ee:42:bd:a0:e8:cd:f2:19:2a:e3:01:
         04:f1:f8:e2:65:12:8f:53:7a:7a:c9:19:c9:26:65:de:98:58:
         fe:59:c5:7a:34:fc:95:79:de:6e:df:cf:bb:84:95:b7:b9:8b:
         15:f4:71:2f:55:54:84:0a:bb:38:5b:21:8c:94:7f:1e:8f:ac:
         19:37:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:07:10 2025 by rpki-client