Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File:                     J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier:          tfalbOO93YO+pp7PCZgqfHqRdXzP99US/4id97ooBho=
Subject key identifier:   7B:00:1D:55:DD:22:35:64:D7:37:36:37:5A:2A:87:FB:8C:04:09:A4
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer:       /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial:       0198466449002DE0F9031B4665E659F99D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number:          0775
Signing time:             Sat 26 Jul 2025 11:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:34 +0000
Files and hashes:         1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: d8daGh95RsPY4B9nE7waLwwiJurMWQ5viXp5albdFNU=)
                          2: WQUjTS9p84oOcXA50chvpNniznQ.roa (hash: b9u2bPYyFl9JVGS2r/Wv4Q0+aj8rFnnmE/wBKVY/4HE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:49:00:2d:e0:f9:03:1b:46:65:e6:59:f9:9d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
        Validity
            Not Before: Jul 26 11:00:34 2025 GMT
            Not After : Jul 27 11:00:34 2025 GMT
        Subject: CN=7b001d55dd223564d73736375a2a87fb8c0409a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:6d:9f:3a:b1:a5:33:28:16:20:b9:49:5a:
                    90:5b:5a:f6:20:5d:a3:73:4f:4d:0b:af:88:76:44:
                    10:a7:4a:13:1f:3b:ad:10:80:e6:97:d8:4f:6d:7b:
                    1e:e4:da:f5:ac:87:8b:05:d6:5b:11:c2:a4:a7:d6:
                    94:46:ae:98:d4:8d:0c:e9:cf:6a:a1:e5:00:79:db:
                    51:2d:4b:58:13:15:75:cd:38:75:71:37:5c:7a:e4:
                    68:4e:9c:98:2b:ca:8d:29:cf:c5:95:f1:f9:5c:7f:
                    3f:f7:77:7c:44:14:66:19:ab:e1:05:cf:db:41:92:
                    2a:ed:ef:ed:66:da:d4:e4:cc:4b:fb:f2:18:0a:aa:
                    7c:32:17:c5:b7:c2:b5:7e:d7:de:91:ee:7e:21:00:
                    1a:e3:83:b2:26:b2:51:08:f7:f1:9d:23:dc:48:c9:
                    6e:8e:3b:d1:b5:79:cf:b2:30:c5:7a:db:0e:ef:5d:
                    de:4a:df:96:3e:98:d4:53:49:31:ea:6e:41:47:50:
                    c8:49:13:9e:4d:a1:a0:f5:2f:50:06:33:ad:09:bf:
                    0c:6f:d7:23:54:ba:92:3a:41:d5:f3:ee:2d:48:35:
                    8e:e7:7a:3b:6f:54:dc:ec:40:4c:3c:41:c0:a2:5e:
                    53:8a:be:a9:1a:ab:04:51:01:1b:30:2f:a9:e8:bc:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:00:1D:55:DD:22:35:64:D7:37:36:37:5A:2A:87:FB:8C:04:09:A4
            X509v3 Authority Key Identifier:
                keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:e6:14:cd:2c:c2:5e:d7:b6:a4:84:66:94:ca:3b:14:58:
         78:6d:c3:ee:24:75:40:9e:f6:16:c0:97:10:25:d1:2e:a9:03:
         4f:25:be:94:de:f9:0a:27:28:3b:1b:27:0d:a5:30:4d:f1:30:
         65:6c:f8:84:ba:ad:86:8b:bc:eb:b3:a9:75:3c:a7:29:8f:ea:
         33:d2:34:0c:7e:35:a5:1a:e4:c1:c2:4a:57:5d:57:98:08:76:
         59:87:5f:3b:2c:9a:f1:f5:7f:d4:5f:a0:ab:58:18:be:15:e2:
         1a:4c:81:b2:d6:97:a5:ba:d4:50:f2:9a:29:54:59:0b:38:a7:
         9c:36:a9:1a:24:d1:2c:5a:fb:e5:c4:2a:15:81:86:01:02:dc:
         56:c1:66:28:df:fb:37:fd:d1:92:29:64:fc:24:dd:ef:c5:52:
         fa:7f:9a:01:87:6e:06:21:52:6c:63:0a:53:76:f2:71:9d:d8:
         01:a0:13:34:2f:13:60:d5:74:49:fa:28:e6:46:1d:e9:2d:eb:
         b4:4a:fb:7c:05:9b:71:97:13:1f:f7:d7:65:a4:3b:ab:9d:6f:
         8b:e1:6f:5d:08:30:b7:00:50:9c:bd:8a:82:65:ae:dd:ad:97:
         e8:cf:d2:f9:9c:af:90:09:ad:24:11:43:ad:f7:93:52:f7:d8:
         cb:54:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:00:14 2025 by rpki-client