Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File:                     Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier:          IWODCJg5PtLeiMdyMM5JRYivVt1nw6kRvMvFSiNjh7E=
Subject key identifier:   3C:E4:BC:52:6F:B4:7A:E6:D3:82:6C:95:A8:C2:96:D9:43:96:66:C1
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer:       /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial:       01987306A8EFDE74CB13DF6D98808A66EA64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number:          12A8
Signing time:             Mon 04 Aug 2025 03:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:12 +0000
Files and hashes:         1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: n3ET1EKmoVRzAGJNxLfrwk5/DdVE2ySTjw9chrmk4Po=)
                          2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:a8:ef:de:74:cb:13:df:6d:98:80:8a:66:ea:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
        Validity
            Not Before: Aug  4 03:01:12 2025 GMT
            Not After : Aug  5 03:01:12 2025 GMT
        Subject: CN=3ce4bc526fb47ae6d3826c95a8c296d9439666c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:65:c3:65:17:cb:d4:b0:c3:fc:cb:bf:4e:
                    07:70:d5:4a:f8:b4:55:f4:cd:33:d9:57:50:9b:f2:
                    99:5b:a7:75:1d:96:63:08:dd:b5:b6:ae:a1:c7:cb:
                    d6:c4:40:46:2b:3d:60:e6:0f:16:39:77:72:dd:19:
                    ba:a2:2c:12:49:b8:02:82:ae:8f:ed:67:1c:76:d5:
                    e3:d9:da:cc:c9:9b:6e:e2:9a:a2:ab:89:86:7a:18:
                    b8:d5:5a:a7:a6:19:e1:7d:94:7a:6d:15:c7:64:13:
                    30:ad:1f:7d:12:b6:bb:11:91:ca:51:a6:68:2a:21:
                    ad:c5:74:83:4b:d3:10:e5:e8:28:a5:38:5e:3f:be:
                    75:46:b4:17:4a:e2:13:c4:2a:67:26:0c:0e:d4:31:
                    f1:c7:ec:17:f7:9a:f3:51:20:1f:4b:83:81:d7:95:
                    4e:9a:44:44:23:3c:00:b0:8f:02:5d:cb:fb:37:e2:
                    30:ff:7f:18:f2:02:c3:d6:79:c9:58:3c:17:93:96:
                    e5:82:2f:15:d7:3e:fb:78:48:93:0c:2a:ee:b3:99:
                    8f:82:9a:40:a9:5e:b7:7b:a2:3f:15:17:27:57:82:
                    d0:76:70:b8:f1:34:7a:e0:33:7e:b6:24:69:bc:50:
                    19:9c:60:b0:98:d7:4d:28:d2:3f:4f:1b:92:52:28:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E4:BC:52:6F:B4:7A:E6:D3:82:6C:95:A8:C2:96:D9:43:96:66:C1
            X509v3 Authority Key Identifier:
                keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e6:30:29:f1:a4:77:c1:e9:e9:9c:05:8f:42:8c:3e:ab:58:
         70:f7:b0:ce:48:cb:0e:f6:45:bf:a2:4a:98:8c:fe:75:55:c6:
         5c:10:71:06:c8:af:d0:42:8f:60:5e:1f:7e:d2:cd:43:b5:5c:
         1d:5d:75:d2:57:85:fc:b7:3d:69:7e:9b:05:d1:eb:ec:3b:7c:
         fa:fd:81:10:1e:57:68:45:de:86:75:41:a2:fb:f0:01:50:12:
         5c:93:b8:7f:12:ba:23:55:ab:22:68:a5:57:50:eb:6b:f1:5f:
         97:5b:a8:67:bc:33:5b:49:a5:c4:4a:ae:7b:84:e0:1f:48:33:
         65:91:c4:f2:4b:70:18:e8:1d:fe:f9:02:5f:84:f4:75:6d:e0:
         ef:21:b4:86:47:87:55:b0:8d:e5:e9:49:ee:19:c9:55:0f:1d:
         a1:34:27:96:56:c8:e3:71:ba:e6:79:dd:3e:97:03:91:b0:ad:
         2c:b8:05:d0:d3:17:67:69:b5:ba:9c:a3:47:0c:78:c1:bb:88:
         7c:6f:49:91:3b:9c:78:19:ac:a4:7a:11:ec:39:a0:db:24:07:
         c2:2c:88:98:d6:ac:09:26:38:21:8d:0e:20:f9:dc:40:2e:a1:
         1f:fe:de:85:4e:3a:73:b3:56:2e:18:cc:40:26:b7:0d:a6:9a:
         ab:7b:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:15 2025 by rpki-client