Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File:                     jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier:          HXbp0F5Sta6yNSQG+9ThhLlETS2nmjSQpKb1Xu4kv4w=
Subject key identifier:   99:D3:92:05:53:19:81:25:7F:45:30:00:1B:39:D0:41:00:91:61:4A
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer:       /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial:       01984061CD82D2B8DE006BFD6C30772BF8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number:          1600
Signing time:             Fri 25 Jul 2025 07:00:07 +0000
Manifest this update:     Fri 25 Jul 2025 07:00:07 +0000
Manifest next update:     Sat 26 Jul 2025 07:00:07 +0000
Files and hashes:         1: A_OQJ88bcYgcsjIcwJCOxewRMg8.roa (hash: JsIzJGkiQIIUy+vP0PZYtJ7LTu3SBkRUq53MCZhXjvA=)
                          2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: 8RkTYehg9NSp2jhSdCv+aIiuCKE5M75z3UOs8d1tQog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 07:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:61:cd:82:d2:b8:de:00:6b:fd:6c:30:77:2b:f8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
        Validity
            Not Before: Jul 25 07:00:07 2025 GMT
            Not After : Jul 26 07:00:07 2025 GMT
        Subject: CN=99d39205531981257f4530001b39d0410091614a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:12:59:0c:c5:45:3b:eb:78:ba:77:ef:32:
                    be:81:8d:85:d8:d9:5e:b3:5b:71:6b:56:bf:f6:a0:
                    a8:b8:c3:f7:f3:38:f3:11:27:71:e2:4b:d5:05:e0:
                    4d:42:83:ed:e2:dc:6c:98:78:77:79:93:ee:71:47:
                    6f:42:ef:ed:99:f9:43:cd:76:8f:d6:a7:b3:16:e1:
                    fa:1a:ca:e0:46:21:63:4e:e3:e8:e4:02:a8:3f:a8:
                    32:05:b1:7e:20:b6:ea:22:05:95:2d:e8:a9:a3:78:
                    b6:5b:6b:7a:03:6a:23:6f:2b:67:60:c6:4d:61:f9:
                    ea:44:43:b1:04:6b:89:92:fe:6a:3e:11:f3:1e:7e:
                    ec:9c:7b:19:aa:02:f7:ad:b6:b6:57:2e:6a:ba:07:
                    da:cd:3e:dd:f4:ec:ce:bc:bb:82:de:d6:32:90:2f:
                    b2:46:7d:4c:6e:2a:5c:2c:f7:38:5d:3c:d2:b0:32:
                    60:49:07:8b:95:22:c2:00:76:65:1a:9a:c7:b9:e8:
                    e4:db:62:39:1a:d0:c9:f4:27:d1:fa:df:a5:e4:07:
                    3f:e7:e2:72:f1:92:01:03:59:f2:be:14:12:3a:d3:
                    87:44:ba:c9:ee:ad:00:17:52:d4:42:be:40:9a:10:
                    b3:c5:5a:ca:13:97:f2:77:fd:a0:4f:b7:fb:c3:31:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D3:92:05:53:19:81:25:7F:45:30:00:1B:39:D0:41:00:91:61:4A
            X509v3 Authority Key Identifier:
                keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:5c:96:e3:b7:dc:b8:b4:c4:c4:c5:5c:74:d7:34:87:00:
         ec:50:44:14:ea:46:54:f4:a9:9c:1e:81:9d:fe:de:97:47:d7:
         e6:de:5c:6a:3d:18:16:5e:9d:02:db:0c:80:47:8b:47:30:9e:
         fd:75:ee:e3:ee:c4:53:b4:67:3a:b6:6e:93:b6:32:7c:fc:aa:
         6c:2c:48:a0:a2:5a:90:55:19:17:e5:11:1b:9f:3e:16:7c:ed:
         6b:c9:ba:1f:68:d1:f6:8b:d8:1e:81:4a:69:25:c6:de:bb:f1:
         25:db:fd:dd:63:1b:e2:77:d3:cc:a0:a0:41:77:2b:dc:d7:21:
         41:76:3a:4f:72:08:78:de:99:27:6c:4b:15:75:92:47:ca:14:
         c0:56:0d:ae:1e:c3:27:21:23:36:1c:22:15:df:f5:ce:1a:84:
         f0:49:f2:d7:6c:6b:d6:28:17:70:82:2b:78:06:e3:30:67:b1:
         1d:64:ec:85:4c:e7:b3:20:49:c0:4b:13:d7:dc:5e:8e:d6:73:
         48:14:96:83:2c:0a:74:53:ba:ea:7f:5b:8b:7a:08:e8:1a:80:
         00:e5:66:f5:c8:34:ac:f3:db:1d:d5:1d:19:e2:70:72:99:71:
         4b:d4:40:ae:ed:01:c7:44:b2:9e:c9:a3:cd:a3:bf:85:05:4d:
         41:db:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:51:03 2025 by rpki-client