Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          hp8nakXXnwC8B0h6pBBTmDRZbn9+Nho66zWEmtHdTaE=
Subject key identifier:   D7:27:F9:47:7D:40:AF:EC:A1:0D:FB:25:F6:4A:AF:61:02:9D:C8:C2
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       0197462FE22557661ED6D2BA15AD779F6811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          0844
Signing time:             Fri 06 Jun 2025 17:00:32 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:32 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:32 +0000
Files and hashes:         1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: GityqFOU35MaVC82IH4RX7az4m1oDoWdBdUWmyZzoLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:e2:25:57:66:1e:d6:d2:ba:15:ad:77:9f:68:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Jun  6 17:00:32 2025 GMT
            Not After : Jun  7 17:00:32 2025 GMT
        Subject: CN=d727f9477d40afeca10dfb25f64aaf61029dc8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:a6:2c:86:bb:bb:41:eb:38:06:8a:72:ce:
                    86:01:9e:37:aa:7d:66:8e:13:ed:90:a8:e0:6b:dc:
                    f9:fa:d5:6f:fc:0e:e4:e3:be:3d:99:1a:77:c3:e1:
                    f8:0b:13:81:e2:83:40:6b:93:d3:ef:e5:3c:73:2e:
                    d6:d8:c9:28:e5:fb:2b:51:98:b0:d0:43:05:f9:7b:
                    a9:d6:be:fa:00:97:96:d9:38:1f:48:04:36:d5:20:
                    61:20:b6:fc:e5:9e:64:ab:61:71:19:a8:81:b9:77:
                    09:07:35:7d:ec:d2:a5:47:65:a2:d5:1c:2b:fc:1a:
                    88:e8:d9:b1:4c:94:58:32:d2:6b:c9:ea:49:d0:c2:
                    96:c1:25:b5:e6:88:a8:f9:2c:74:b6:2a:f4:7f:14:
                    a5:11:94:c4:7d:d1:e1:38:a1:53:c4:75:21:76:8d:
                    e3:31:00:83:04:e3:18:fd:ec:51:9b:3b:58:55:bf:
                    ff:f7:07:31:b2:53:30:1f:28:98:57:f2:d4:d8:50:
                    3d:9a:97:e8:50:df:a2:75:20:2f:53:83:ce:49:b5:
                    8d:3f:ec:6f:d0:0e:fa:6d:52:b8:55:b7:07:51:05:
                    df:b0:c7:83:a0:92:88:65:eb:a7:d5:e0:37:8c:5f:
                    2a:69:cf:2c:53:2f:d6:31:39:21:c1:f8:9f:24:19:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:27:F9:47:7D:40:AF:EC:A1:0D:FB:25:F6:4A:AF:61:02:9D:C8:C2
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8b:ce:2f:56:ad:52:b5:03:a6:15:54:cc:d4:da:12:73:b8:
         65:07:df:c3:86:28:79:d7:fa:41:b4:d7:61:21:b9:f4:c2:03:
         fe:c3:fe:d2:0f:09:0e:12:04:c1:1a:b4:87:99:0a:0c:ac:01:
         e5:31:66:9c:ad:25:4b:8d:2c:2c:73:ea:01:cd:9f:29:02:60:
         32:03:e4:34:b4:74:60:a9:c7:b2:c3:f1:e0:f5:81:4d:67:f2:
         52:6c:3c:a8:3f:c7:51:97:e6:88:9d:9e:e1:6d:62:4f:4b:47:
         8e:d9:37:37:d0:b8:7b:92:3d:c7:99:be:c3:64:58:cb:cc:e4:
         fa:70:88:09:b7:aa:11:7d:13:b6:9d:8a:be:68:38:5d:27:73:
         21:e3:b7:d5:71:ce:f5:c9:6d:77:5c:6a:33:03:5f:a7:43:47:
         7d:ae:5b:ed:a4:2b:d4:63:3e:a6:1b:42:c0:ae:3a:f5:b5:3a:
         90:ac:31:69:37:e4:4b:b2:d9:12:d7:16:6f:51:e5:8c:b0:4d:
         2b:6f:ce:28:e4:b8:c7:46:d9:e0:23:b7:b9:f9:1a:0f:77:6d:
         60:a0:cf:69:28:f2:bd:53:3d:d5:25:23:f3:d2:af:fe:24:6f:
         72:85:d7:d4:11:37:e5:56:c3:af:64:2d:3b:68:9f:32:0b:a6:
         07:9a:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:45 2025 by rpki-client