Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          VR++rdBNLDTmnYEQ8ChGptfm/gg1uXnhmcC/rrwmKzY=
Subject key identifier:   2D:54:C3:9A:9E:20:BE:F7:31:27:B0:40:C8:55:9A:90:CE:1E:36:48
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       01984776D26E267CE35380FFF4E31B5048E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 16:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:26 +0000
Files and hashes:         1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
                          2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
                          3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: anEdiHfq91xhE7LrzpO2d91J1cE8r2JV0xiYD0XsSDg=)
                          4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:d2:6e:26:7c:e3:53:80:ff:f4:e3:1b:50:48:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Jul 26 16:00:26 2025 GMT
            Not After : Jul 27 16:00:26 2025 GMT
        Subject: CN=2d54c39a9e20bef73127b040c8559a90ce1e3648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:f7:d9:44:24:c2:44:87:96:66:01:fb:71:
                    ab:91:a5:c0:a3:08:33:1a:09:d2:16:45:ac:86:04:
                    93:8e:77:9c:22:ff:ef:38:14:d0:e6:1c:f2:e4:10:
                    99:a7:5f:dc:91:e2:76:db:0b:6b:24:74:84:1c:22:
                    0d:ce:fc:14:a2:80:61:85:f4:00:25:3f:a0:bc:c2:
                    d1:a2:bb:b8:46:a1:69:3d:c8:62:3f:6e:14:28:40:
                    99:d8:57:c7:26:43:a7:7c:7f:2b:6e:c9:0a:73:f0:
                    f2:ad:cb:22:94:a0:3d:6c:b4:05:b8:dd:0f:45:0e:
                    24:e5:40:1a:00:e9:ef:30:3a:06:6c:4a:eb:95:43:
                    6c:38:54:98:c7:f9:59:66:c9:63:48:db:44:4a:fc:
                    f9:bc:51:12:a7:54:c7:4e:02:c6:33:44:0f:d0:56:
                    bc:ba:d1:40:ca:df:f2:37:5c:4c:2e:c0:6a:cb:a4:
                    e5:4d:8f:b7:2e:b3:4b:d3:e6:9e:bd:86:89:63:a1:
                    5a:55:4a:2d:74:56:ea:1c:8e:b4:eb:4a:0d:43:90:
                    6d:0f:30:f2:51:45:91:76:1a:8a:ce:7d:fe:84:c8:
                    c5:54:58:ce:c7:79:5e:6b:0d:59:05:8f:b1:5d:01:
                    b5:dc:db:ac:97:89:4e:f4:32:f3:0a:73:08:19:f6:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:54:C3:9A:9E:20:BE:F7:31:27:B0:40:C8:55:9A:90:CE:1E:36:48
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:af:69:a2:08:b9:ef:0b:a4:9d:66:80:af:94:b9:dc:0c:
         37:00:29:c5:f2:9c:49:10:58:4a:0e:0b:21:bf:db:23:48:4e:
         4a:0f:ca:fc:c1:be:87:e6:b2:33:12:19:81:91:62:7e:51:73:
         59:46:30:bf:89:33:8a:15:a2:5b:31:a2:99:60:33:ef:fa:e0:
         69:71:0b:d1:cc:39:c3:50:57:80:36:0b:a0:69:9a:ab:c8:af:
         34:be:b2:ea:89:e9:03:90:20:54:3d:a1:48:97:b9:c2:e5:59:
         7d:31:45:a5:9a:15:c0:25:89:1f:03:34:de:26:d4:71:a0:9e:
         17:2d:8f:7c:03:25:4b:93:a4:ec:f5:f7:8e:19:31:78:47:51:
         44:41:6b:81:2d:0a:20:58:36:e9:fa:6a:7b:0c:c9:4a:f9:ae:
         b4:71:b1:ac:6d:87:3a:9b:51:0d:dd:74:0c:93:c7:89:16:eb:
         53:d5:7d:69:fd:92:91:b8:39:28:b8:d5:4d:ba:da:d5:3b:07:
         7d:4f:79:53:cf:5a:34:09:f0:2c:8d:2d:19:39:14:91:e1:79:
         38:a7:cf:be:5d:b6:d2:f2:bb:20:bc:45:cb:af:87:4c:bd:75:
         5b:53:32:0e:68:83:e2:ba:bb:b0:93:01:d7:fe:fd:fb:1e:96:
         49:92:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:41 2025 by rpki-client