Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          GPJmpKGmlCDKWqC0AiLoI4M4lKR5vlDjTF4SnyCjxNo=
Subject key identifier:   6C:00:39:56:C7:77:98:77:C4:F9:83:8E:40:0A:DE:EA:97:CA:7D:C7
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       0196A35331F85329988C3BD0D03AA1F04A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          1041
Signing time:             Tue 06 May 2025 02:01:00 +0000
Manifest this update:     Tue 06 May 2025 02:01:00 +0000
Manifest next update:     Wed 07 May 2025 02:01:00 +0000
Files and hashes:         1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
                          2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: 3ySMg6XRC7NqLVsDpm0yX54zUJ/YHUVB5iuAjLcLXpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:53:31:f8:53:29:98:8c:3b:d0:d0:3a:a1:f0:4a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: May  6 02:01:00 2025 GMT
            Not After : May  7 02:01:00 2025 GMT
        Subject: CN=6c003956c7779877c4f9838e400adeea97ca7dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:40:c3:6a:f3:c5:1f:7d:82:e8:fc:4c:d7:
                    a5:aa:bc:24:07:88:a9:df:b5:38:dc:eb:c0:20:3b:
                    e7:9f:d3:7e:6d:bd:26:03:85:c2:ef:29:e6:b1:ed:
                    c0:60:88:65:ec:18:f1:f7:e7:93:02:dd:c5:f7:e3:
                    19:66:23:7f:c9:de:a6:29:46:0a:77:60:5e:51:cb:
                    e4:15:c3:d7:2e:72:ee:d0:45:cc:f5:c9:bd:de:f1:
                    09:d2:af:73:0c:a9:5a:a5:28:c7:42:dd:da:64:84:
                    9f:8d:2c:b8:f3:d2:87:1a:ca:36:9d:68:05:bb:db:
                    9b:99:67:e1:ab:a6:68:df:24:40:6a:d0:d9:fb:a8:
                    db:86:73:70:2f:e2:54:82:6b:36:d1:f6:c9:f6:72:
                    04:af:e0:27:9a:05:c5:9f:70:00:9e:c5:cb:00:7e:
                    52:52:75:94:35:67:7d:7c:6f:33:df:e5:a3:18:60:
                    59:4b:d1:65:fe:23:43:af:ff:02:bd:b3:58:01:da:
                    fc:20:fe:d2:fe:d4:97:2a:96:ee:9e:59:40:4e:2e:
                    90:8a:47:ae:1c:c0:6d:55:00:f9:b5:58:17:2d:f0:
                    70:2a:93:33:c7:78:bc:3a:ef:d0:2d:7a:ec:3b:b7:
                    59:60:d3:5e:f6:84:52:a3:70:a4:48:e6:8a:2c:9c:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:39:56:C7:77:98:77:C4:F9:83:8E:40:0A:DE:EA:97:CA:7D:C7
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:d0:34:e4:4e:08:fb:68:f6:fe:f3:78:0d:81:a4:1f:10:
         48:f2:5b:cc:2f:51:99:23:86:ba:50:41:4f:d4:95:ef:86:0a:
         46:bf:6e:00:c3:ed:a2:32:a5:16:d7:b6:b7:2f:51:ad:c5:14:
         82:7f:55:14:91:dd:b1:25:59:fe:10:c8:35:68:5c:ef:ec:98:
         c7:34:b9:db:f2:22:47:dd:49:d9:40:dc:a2:1c:10:48:95:1a:
         75:d0:fe:2d:39:90:51:ff:ea:9e:19:47:45:f3:6e:96:45:0a:
         73:25:a7:63:5b:72:6d:12:d2:23:88:12:06:a5:0a:90:38:06:
         0f:c8:23:37:22:43:52:c0:f9:38:f6:6e:d3:d6:82:f0:3c:ec:
         db:5d:9c:e7:c1:b0:dc:9e:8c:b5:0c:cf:b3:db:3d:d6:ef:82:
         ad:ed:3e:14:b4:ce:20:ca:57:4f:65:e4:2e:7d:7b:77:be:82:
         76:28:54:6b:95:89:92:58:49:64:13:72:c5:25:6d:41:4a:ec:
         24:86:bb:81:72:4a:d0:9a:7d:fc:a5:48:1c:70:fe:fd:83:7e:
         92:ea:f7:06:b2:b6:79:45:01:77:a4:ea:1d:16:b6:b7:29:c4:
         d6:f6:e5:cc:9e:61:fa:a6:b0:70:88:77:27:6f:9f:ec:38:2b:
         67:71:b3:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajUzH4UymYjDvQ0Dqh8EpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjcxZTUyZjdlOTdhMmVhNTNmNWVjYWJkNmI5NGJjOGMw
NzVhNmEwHhcNMjUwNTA2MDIwMTAwWhcNMjUwNTA3MDIwMTAwWjAzMTEwLwYDVQQD
Eyg2YzAwMzk1NmM3Nzc5ODc3YzRmOTgzOGU0MDBhZGVlYTk3Y2E3ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytpAw2rzxR99guj8TNelqrwkB4ip
37U43OvAIDvnn9N+bb0mA4XC7ynmse3AYIhl7Bjx9+eTAt3F9+MZZiN/yd6mKUYK
d2BeUcvkFcPXLnLu0EXM9cm93vEJ0q9zDKlapSjHQt3aZISfjSy489KHGso2nWgF
u9ubmWfhq6Zo3yRAatDZ+6jbhnNwL+JUgms20fbJ9nIEr+AnmgXFn3AAnsXLAH5S
UnWUNWd9fG8z3+WjGGBZS9Fl/iNDr/8CvbNYAdr8IP7S/tSXKpbunllATi6Qikeu
HMBtVQD5tVgXLfBwKpMzx3i8Ou/QLXrsO7dZYNNe9oRSo3CkSOaKLJy2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwAOVbHd5h3xPmDjkAK3uqXyn3HMB8GA1UdIwQY
MBaAFCZnHlL36XoupT9eyr1rlLyMB1pqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2Yt
MjUxOThlMGVkNjg3LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2YtMjUxOThlMGVkNjg3
LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmbQNORO
CPto9v7zeA2BpB8QSPJbzC9RmSOGulBBT9SV74YKRr9uAMPtojKlFte2ty9RrcUU
gn9VFJHdsSVZ/hDINWhc7+yYxzS52/IiR91J2UDcohwQSJUaddD+LTmQUf/qnhlH
RfNulkUKcyWnY1tybRLSI4gSBqUKkDgGD8gjNyJDUsD5OPZu09aC8Dzs212c58Gw
3J6MtQzPs9s91u+Cre0+FLTOIMpXT2XkLn17d76CdihUa5WJklhJZBNyxSVtQUrs
JIa7gXJK0Jp9/KVIHHD+/YN+kur3BrK2eUUBd6TqHRa2tynE1vblzJ5h+qawcIh3
J2+f7DgrZ3GzJA==
-----END CERTIFICATE-----
Generated at Tue May 6 03:34:04 2025 by rpki-client