Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File:                     JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier:          OaHfKDEEpGiSyXJ/LOdm0xStElB4JdRriXgS8QlrZco=
Subject key identifier:   8F:74:25:E6:F4:D4:DC:BF:25:0D:43:DA:5B:D5:EF:57:ED:AC:B3:DA
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       01974B8DB04390C0ABDC3D49621526FA0561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 18:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:06 +0000
Files and hashes:         1: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: gJjBfzErSGG+gWzYyHULGk1XZP02iP+nzW6HjfSJkjE=)
                          2: aBjEn09c9jlvq3tyQ6uQKbAuHow.roa (hash: k2Il8Q6rfTX6EoDV8IvCybU7+NvXuouKuK8ZTUniptc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:b0:43:90:c0:ab:dc:3d:49:62:15:26:fa:05:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Jun  7 18:01:06 2025 GMT
            Not After : Jun  8 18:01:06 2025 GMT
        Subject: CN=8f7425e6f4d4dcbf250d43da5bd5ef57edacb3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:b2:13:8a:d8:8a:3b:d0:e1:d7:dc:e8:24:
                    0c:a2:96:66:e3:50:16:ab:b3:fe:4f:93:1a:95:bb:
                    3c:97:cb:17:8d:0c:84:ea:d9:ee:49:7c:b4:43:ba:
                    69:93:40:76:7b:03:bb:53:44:36:ee:1b:a4:d0:a2:
                    f4:be:92:63:1e:34:47:4d:59:03:df:54:5f:1e:f1:
                    c3:c9:ea:e5:e9:49:9a:fe:09:9a:5a:f7:bf:97:b2:
                    3f:7e:f2:54:66:20:25:5f:b3:55:af:d3:d7:7e:6a:
                    ef:10:2d:b0:97:73:dc:08:3c:0c:3c:3f:13:46:df:
                    3f:95:1a:8f:84:e7:0d:33:be:60:e6:5b:a8:a0:a9:
                    ac:2d:95:11:26:ad:7f:f7:38:78:32:87:78:13:bf:
                    4c:50:dd:60:40:16:1f:a1:e6:a3:54:73:fb:63:da:
                    bb:9a:69:b0:17:b4:81:4f:ad:2b:6e:42:38:10:ca:
                    ed:b7:44:2f:66:39:93:ae:ab:55:31:00:e8:0f:f6:
                    dd:e0:78:7a:e1:c3:36:88:5c:29:9c:44:5c:f3:d4:
                    49:51:20:04:07:c7:6c:02:d8:49:f7:bc:9e:3f:6d:
                    51:79:bd:39:12:2f:0a:6e:4e:18:b6:42:6e:e0:2d:
                    b4:15:02:c0:aa:b9:05:1a:bb:18:b4:56:40:74:6f:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:25:E6:F4:D4:DC:BF:25:0D:43:DA:5B:D5:EF:57:ED:AC:B3:DA
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:40:fb:0f:16:b8:2f:82:fc:36:7b:27:1c:b5:91:4f:4d:c2:
         13:35:d4:a6:35:bb:66:ca:81:ff:b7:dc:e5:56:1c:e2:77:f4:
         d8:b5:4f:38:16:f0:48:6d:03:b3:bd:38:c9:2d:6c:25:52:da:
         14:4c:f6:a7:47:28:02:2f:34:d2:8c:47:b1:ed:65:33:e1:e2:
         dc:8b:49:f0:66:d9:88:59:a5:59:82:84:74:f5:04:cb:7a:e7:
         6b:66:ff:78:23:a4:bf:5b:69:a6:9f:e6:f4:4b:13:fc:47:87:
         b4:17:e4:a5:67:eb:62:01:3c:b0:b6:aa:0e:f7:66:30:bb:40:
         00:0a:c3:5f:7a:e5:6b:81:0f:70:88:e8:be:23:94:9f:ad:28:
         71:1d:6c:d4:bf:00:07:05:5a:4f:8b:d8:0c:36:ef:5a:d9:e8:
         be:49:32:15:0e:23:2d:f6:e7:26:59:2a:fd:89:67:e3:87:88:
         ef:8d:6e:b0:e9:cc:d6:c8:6e:97:9d:56:72:15:e7:a3:20:21:
         16:da:ea:5f:16:3a:6a:3f:89:84:d5:70:0b:d0:48:82:e4:58:
         be:5d:91:1b:74:ff:1d:f5:9f:5d:7d:8d:bb:ea:86:e3:6c:f0:
         28:13:10:85:e3:02:a5:31:ce:38:1f:c3:51:5d:ec:31:93:5c:
         c5:45:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:57 2025 by rpki-client