Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          /+A8OIIVjglMlTK1IBVB3aysGSwHWHi1n3peztSLjBA=
Subject key identifier:   E9:D9:C0:36:79:5D:AC:FE:68:CC:14:52:9C:A0:B1:E2:9E:1E:F1:98
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       01974930FAE8226A41FAD2A577EE77EDC801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          0B9B
Signing time:             Sat 07 Jun 2025 07:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:36 +0000
Files and hashes:         1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
                          2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: uZo4WIZboCYkpVYgtg+vaC/vAkksm6/CWXgd/8PHWF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:30:fa:e8:22:6a:41:fa:d2:a5:77:ee:77:ed:c8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Jun  7 07:00:36 2025 GMT
            Not After : Jun  8 07:00:36 2025 GMT
        Subject: CN=e9d9c036795dacfe68cc14529ca0b1e29e1ef198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:f2:90:19:cf:e7:42:74:bd:49:13:23:95:
                    89:5c:0c:f3:40:2c:30:27:be:08:8d:65:26:2a:f1:
                    3f:7b:6a:28:71:b5:51:75:f1:a0:12:17:cb:9a:a4:
                    44:24:4f:79:1d:67:32:ff:95:4b:73:2f:16:e2:62:
                    74:fa:00:3f:07:76:7d:1c:4f:d9:06:1b:4c:7e:0f:
                    83:79:3d:2b:8f:2e:d4:f0:ee:65:28:ef:e5:04:1c:
                    a8:ff:36:2b:51:4a:dc:6e:7c:a4:75:10:b0:e9:1b:
                    cf:b0:d9:f7:ac:87:bd:57:6a:90:4d:ef:50:8f:6b:
                    97:a9:c4:22:21:52:45:b5:bc:f9:5f:b8:e8:a1:72:
                    4d:a3:6f:e4:4c:53:b9:33:eb:d0:13:79:8e:03:4c:
                    49:bc:0e:29:70:ef:eb:c9:1f:50:74:f3:59:f6:06:
                    3e:3b:f4:be:1d:f0:d0:c4:13:6c:ff:f5:98:5c:69:
                    ee:00:33:4c:45:63:a5:31:59:e0:51:d2:ee:4d:56:
                    35:64:92:0a:2b:a4:48:07:ce:00:71:3c:e7:da:a7:
                    4d:b9:a6:44:01:b7:62:05:78:09:24:4b:3b:1c:c2:
                    76:da:52:93:55:44:ef:e6:1c:a9:69:9b:a9:33:c1:
                    ab:0c:73:c2:69:73:0a:3a:73:41:ee:9d:80:5e:93:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D9:C0:36:79:5D:AC:FE:68:CC:14:52:9C:A0:B1:E2:9E:1E:F1:98
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:d3:ed:fe:37:fb:48:fe:0a:b8:87:4b:ad:39:89:18:ee:
         6b:77:27:d3:ca:ac:f4:69:13:32:d1:17:27:ba:2a:a9:38:41:
         7a:bf:e4:8e:86:8f:51:b9:67:c2:8b:c4:89:a9:08:69:78:2d:
         b6:32:60:a9:35:c3:fb:e2:fe:df:eb:90:d4:f3:9f:90:6c:16:
         4a:13:8b:2e:af:52:a5:b1:59:28:80:df:b0:af:c9:5b:11:03:
         2d:82:b7:a9:f6:47:d7:04:ac:64:5c:13:87:18:cc:ab:60:5c:
         b9:a6:1d:00:21:c4:32:fa:2a:f3:26:bb:3a:5b:0f:1d:f2:ca:
         fd:a1:2f:5a:2b:3e:c3:9d:f3:ef:0f:a4:ea:0b:29:57:84:a9:
         e7:ae:cd:65:12:f0:cd:0a:62:c6:09:c0:5e:71:0e:02:b9:89:
         e1:1c:67:06:5e:7c:f5:86:5b:74:36:21:41:d9:d2:7d:fa:b8:
         59:32:34:be:08:e3:15:dc:0c:fb:5c:55:41:52:53:2f:14:24:
         65:0a:f0:0c:8f:54:b7:e2:8e:37:69:64:d8:00:8c:22:15:45:
         0d:44:8b:67:bb:2f:4c:cc:97:24:f6:ea:12:95:dc:aa:6c:87:
         38:b4:bb:66:fe:09:a9:e0:a1:47:fb:0f:4a:5d:4c:51:a1:e8:
         93:89:86:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMProImpB+tKld+537cgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NmFiYjFhZDU2N2U1YmIxZTQ3NWE3MmEwYTY4NDUzZTNm
YmExY2QwHhcNMjUwNjA3MDcwMDM2WhcNMjUwNjA4MDcwMDM2WjAzMTEwLwYDVQQD
EyhlOWQ5YzAzNjc5NWRhY2ZlNjhjYzE0NTI5Y2EwYjFlMjllMWVmMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGHykBnP50J0vUkTI5WJXAzzQCww
J74IjWUmKvE/e2oocbVRdfGgEhfLmqREJE95HWcy/5VLcy8W4mJ0+gA/B3Z9HE/Z
BhtMfg+DeT0rjy7U8O5lKO/lBByo/zYrUUrcbnykdRCw6RvPsNn3rIe9V2qQTe9Q
j2uXqcQiIVJFtbz5X7jooXJNo2/kTFO5M+vQE3mOA0xJvA4pcO/ryR9QdPNZ9gY+
O/S+HfDQxBNs//WYXGnuADNMRWOlMVngUdLuTVY1ZJIKK6RIB84AcTzn2qdNuaZE
AbdiBXgJJEs7HMJ22lKTVUTv5hypaZupM8GrDHPCaXMKOnNB7p2AXpNRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnZwDZ5Xaz+aMwUUpygseKeHvGYMB8GA1UdIwQY
MBaAFCdquxrVZ+W7HkdacqCmhFPj+6HNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYt
YmIwZWVkMTNmMjNiLzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYtYmIwZWVkMTNmMjNi
LzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcXT7f43
+0j+CriHS605iRjua3cn08qs9GkTMtEXJ7oqqThBer/kjoaPUblnwovEiakIaXgt
tjJgqTXD++L+3+uQ1POfkGwWShOLLq9SpbFZKIDfsK/JWxEDLYK3qfZH1wSsZFwT
hxjMq2BcuaYdACHEMvoq8ya7OlsPHfLK/aEvWis+w53z7w+k6gspV4Sp567NZRLw
zQpixgnAXnEOArmJ4RxnBl589YZbdDYhQdnSffq4WTI0vgjjFdwM+1xVQVJTLxQk
ZQrwDI9Ut+KON2lk2ACMIhVFDUSLZ7svTMyXJPbqEpXcqmyHOLS7Zv4JqeChR/sP
Sl1MUaHok4mG+w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:05:57 2025 by rpki-client