Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File:                     jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier:          AOnasjDScv0GJ34Pob/hWOBt4B3hM2DrathQJYVsuHs=
Subject key identifier:   1E:D7:ED:15:CC:92:81:AF:E6:E7:54:C7:03:5E:DD:3E:FA:90:DF:3C
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer:       /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial:       019847091C2580B04006E0254EDB3B8F261F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number:          054E
Signing time:             Sat 26 Jul 2025 14:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:35 +0000
Files and hashes:         1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
                          2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: VaeOe6bwY9qtk9GLcIAILyFhaHY7J07B4wXE0wU60rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:09:1c:25:80:b0:40:06:e0:25:4e:db:3b:8f:26:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
        Validity
            Not Before: Jul 26 14:00:35 2025 GMT
            Not After : Jul 27 14:00:35 2025 GMT
        Subject: CN=1ed7ed15cc9281afe6e754c7035edd3efa90df3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:a7:dc:39:6f:98:c4:0c:9b:fc:43:3e:df:
                    83:d7:6d:84:46:71:53:4d:b1:86:cd:a9:99:02:ad:
                    3a:77:bc:14:f9:56:07:f3:73:c9:53:38:2e:10:70:
                    3f:c2:11:e2:1e:f4:ba:61:59:9e:73:7f:55:85:67:
                    b8:ad:9f:44:78:a2:55:b3:f9:ff:07:81:43:30:a8:
                    ee:31:f4:5f:5d:e5:a1:56:42:d1:6e:70:3d:17:5f:
                    5f:a6:59:ae:89:8a:68:7e:6c:08:fe:15:96:3c:27:
                    4f:b4:58:49:f8:95:fc:f6:d8:52:28:e7:82:3b:9b:
                    aa:41:b7:63:8c:3d:89:0b:91:58:f2:0f:ae:1e:e1:
                    28:46:89:e3:8a:02:78:44:c1:f2:0c:6b:d1:bf:c9:
                    be:30:50:89:42:b4:fa:c9:92:bd:62:a1:80:79:0d:
                    02:1d:30:ba:d5:3b:5b:45:1f:96:3e:bb:b1:ae:8c:
                    58:93:9e:14:d7:f0:70:65:65:15:cd:7e:2a:18:21:
                    72:f8:8f:2d:50:ac:6a:b3:28:e6:d9:e9:fa:a8:7e:
                    28:f4:d0:69:8a:e8:f5:36:34:4a:a0:39:10:ed:a3:
                    50:e1:06:f5:c6:e5:2d:8e:65:27:61:5d:aa:bf:91:
                    55:90:61:bd:9b:ce:60:a7:75:8b:d3:05:70:50:40:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D7:ED:15:CC:92:81:AF:E6:E7:54:C7:03:5E:DD:3E:FA:90:DF:3C
            X509v3 Authority Key Identifier:
                keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:1f:e0:9e:1f:0a:b2:ed:7b:45:6b:85:97:c2:ed:6e:6c:
         21:b4:8f:9a:00:6a:04:de:5e:55:24:7d:a5:41:28:ea:34:d5:
         fc:d9:c9:18:7f:ee:da:c3:22:a1:20:62:f5:59:75:c0:f1:e1:
         dd:06:ca:6d:bd:28:f8:2a:aa:01:55:a0:67:58:8c:7b:ff:1b:
         2b:26:cb:af:53:95:b1:11:b4:6e:0b:9f:7a:f3:94:35:6f:69:
         32:62:4e:30:0b:52:1a:8e:a1:01:d9:ef:66:af:1b:65:86:47:
         33:af:e4:e0:ca:60:fe:b0:0b:f3:83:b5:aa:86:cf:a0:cc:7c:
         55:68:85:9b:58:0b:d6:17:0e:40:21:65:12:f0:1b:1b:33:12:
         21:7d:5b:90:f8:c7:cd:e9:d7:1e:1e:df:2d:29:2c:42:9d:34:
         d5:84:28:37:94:2e:1e:4e:a9:fd:5b:d5:49:de:ab:7c:7e:81:
         83:63:df:3d:23:3a:f6:67:36:31:41:67:88:29:46:25:1a:08:
         04:90:48:e5:21:72:3c:8e:bb:06:ce:db:b4:10:73:21:80:3e:
         50:09:06:46:fc:65:a3:63:90:e7:a9:a8:3f:43:35:4b:14:76:
         66:40:af:42:4a:d2:49:42:2a:06:ab:b6:fe:04:b1:39:2f:10:
         0b:f8:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:52 2025 by rpki-client