Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File:                     JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier:          TQ6DGiNG+ArL9LtpEHUEQWnLs7lHhL1iOZowqr9KfCQ=
Subject key identifier:   1E:C1:F8:D9:1E:ED:79:5E:25:06:E1:8F:9D:9C:E2:DF:18:1C:96:1F
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer:       /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial:       019676434A3560DD562241B0CD73D14E6BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number:          0815
Signing time:             Sun 27 Apr 2025 08:00:43 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:43 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:43 +0000
Files and hashes:         1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: PwGixv6IkFQ2XXHzQ0z5gYYMgMh0oPrp/v4y9MNFUaw=)
                          2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:4a:35:60:dd:56:22:41:b0:cd:73:d1:4e:6b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
        Validity
            Not Before: Apr 27 08:00:43 2025 GMT
            Not After : Apr 28 08:00:43 2025 GMT
        Subject: CN=1ec1f8d91eed795e2506e18f9d9ce2df181c961f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:0d:d9:54:83:47:25:80:ea:98:d5:d9:10:
                    bb:60:5e:b7:e9:8c:8b:75:6d:52:30:d1:8d:a3:98:
                    5f:05:a6:f4:f9:cb:b5:64:66:eb:c7:46:8a:d4:c8:
                    0e:79:71:36:22:d1:d9:50:40:50:d8:71:70:c5:b4:
                    83:c7:5b:92:ee:7c:b8:9b:93:5d:9f:fe:10:1f:45:
                    67:57:6d:5c:91:3a:a3:56:13:3b:58:5e:1f:fd:e8:
                    79:62:f0:29:99:f6:87:e2:52:9d:bf:b3:15:93:47:
                    71:06:df:af:58:81:db:21:ad:71:0d:52:74:73:36:
                    cc:d9:f3:f0:e8:c2:86:8e:20:62:df:6a:36:36:99:
                    96:65:6e:fe:a3:df:5f:42:b9:2f:42:62:01:c5:6e:
                    40:05:11:94:72:2c:c3:b4:83:2b:d6:17:00:39:b3:
                    c6:73:c4:93:24:01:1f:da:72:d2:fe:e1:7f:e4:14:
                    c5:ff:4c:55:87:a4:49:0c:f8:1e:f9:3e:b1:19:75:
                    0f:f6:55:8d:4f:12:7b:16:83:05:96:3d:10:1a:ed:
                    94:58:46:d1:30:36:e5:4b:5b:43:68:9a:dc:81:78:
                    4f:55:45:eb:4d:f7:e1:64:ef:de:14:2a:74:bd:32:
                    16:88:e3:87:c8:b4:77:3a:b6:b6:0b:af:d9:31:77:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C1:F8:D9:1E:ED:79:5E:25:06:E1:8F:9D:9C:E2:DF:18:1C:96:1F
            X509v3 Authority Key Identifier:
                keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fd:3f:3b:b4:b6:8c:09:e5:e5:11:1d:10:03:b9:d0:cf:88:
         d0:42:15:0f:53:b5:7a:76:d8:09:68:12:ab:5d:a9:bf:5d:fe:
         fd:17:3d:d9:c7:8a:d0:fb:42:38:0a:d7:c5:84:15:9c:a4:98:
         5f:02:48:b6:73:16:2d:13:08:7d:6e:36:78:49:6d:84:4c:ca:
         36:98:49:f3:ca:9f:4a:0e:32:b2:25:45:01:69:40:d7:32:29:
         c0:46:41:fc:e9:28:92:c4:c1:2d:b6:5f:97:ac:24:41:ef:8a:
         5e:53:3a:d7:77:1a:56:5d:6e:35:2e:f9:8f:ed:58:f4:7d:85:
         63:4b:ef:c2:f7:3f:c3:e4:a4:67:8f:a0:c9:37:87:a7:94:fe:
         bb:89:bf:5a:5c:ae:d3:fc:c3:8d:6b:8d:f8:cf:58:88:4e:12:
         c8:3a:4a:08:83:4b:0e:bb:da:31:30:79:11:9f:5d:40:ec:7d:
         61:3b:49:82:0b:8b:fb:e4:1d:36:81:2a:2b:a0:8c:bf:de:57:
         ba:45:6e:75:ae:e8:8c:a3:d2:c8:ee:8b:d1:c9:17:44:33:f0:
         20:0e:6d:5a:ec:e7:82:78:3f:9a:76:22:49:c9:a2:ac:69:9e:
         c7:80:d0:80:95:c7:91:c9:1d:57:5c:3f:d1:cb:89:2b:20:8a:
         67:ba:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:58 2025 by rpki-client