Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File:                     J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier:          rqneSYNZafE0Y9UcS01GiiXoGrEhHQjhP7S6T/uHnIk=
Subject key identifier:   60:05:24:1F:40:97:31:F5:77:5B:95:54:0E:79:BA:9B:4E:86:FB:8B
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer:       /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial:       01976C6230E78BB3F3C85517E741C1B9227A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number:          0159
Signing time:             Sat 14 Jun 2025 03:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:03 +0000
Files and hashes:         1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: V/9bcPb1G/Q1Zc1ftcgCH0mTmwxXR6bjtGcT6roJbBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:30:e7:8b:b3:f3:c8:55:17:e7:41:c1:b9:22:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
        Validity
            Not Before: Jun 14 03:01:03 2025 GMT
            Not After : Jun 15 03:01:03 2025 GMT
        Subject: CN=6005241f409731f5775b95540e79ba9b4e86fb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:eb:7c:a1:67:f4:91:84:ac:6e:00:a4:9a:
                    c8:cf:fe:41:56:11:03:ff:6d:50:b8:49:32:23:6f:
                    8c:f0:1a:42:ec:d3:3c:1e:19:13:fe:43:39:bb:9b:
                    05:52:07:7b:98:59:ba:7a:3e:db:6b:95:93:22:ad:
                    f1:df:57:2f:44:a8:23:21:5d:8c:0e:8a:03:57:50:
                    40:0a:43:25:fe:c3:8b:9d:79:6b:7e:2d:92:76:46:
                    b4:89:7c:4a:8e:1d:e1:a9:b2:62:a7:21:c8:09:dc:
                    d2:1b:4a:a9:e0:6e:17:da:ff:1c:e9:97:1a:27:21:
                    72:4f:b2:6d:be:bc:5a:21:85:52:a0:a7:36:3e:dd:
                    e6:4f:de:37:28:43:32:9f:d5:f0:cd:47:a2:59:d6:
                    bc:2e:39:a3:9a:58:a9:2e:27:42:ec:a0:91:0a:86:
                    7d:6e:5c:92:a4:f7:6b:74:b8:98:22:a9:b6:9f:61:
                    91:47:f0:5e:d3:6e:99:e5:22:6d:16:db:01:df:18:
                    e8:86:92:41:4f:28:00:d6:97:5d:94:d7:61:72:b6:
                    00:49:38:d5:2f:ff:c8:54:cd:75:61:d7:69:4c:30:
                    5e:22:70:a2:f5:e5:4b:83:0d:ec:79:ac:fd:90:ae:
                    0b:d0:a0:ad:2d:14:a9:25:2e:82:52:cc:2b:6a:3b:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:24:1F:40:97:31:F5:77:5B:95:54:0E:79:BA:9B:4E:86:FB:8B
            X509v3 Authority Key Identifier:
                keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:a4:55:8e:1b:e1:c9:89:73:0d:b7:b3:27:0a:88:dc:c6:
         83:d6:43:3d:00:d0:e5:62:96:0c:11:19:7d:3d:db:8a:a1:fa:
         a3:73:3b:8a:6d:bc:cf:88:1c:55:99:63:da:57:3f:dd:36:f6:
         ad:f6:6a:db:f4:f6:d8:74:57:98:ed:8f:3b:e4:a0:6d:e4:c5:
         b1:ee:e5:b8:ab:3a:88:0f:c9:6a:40:54:79:19:ae:95:ce:c6:
         cd:6b:d1:64:60:07:e0:a9:cb:ff:82:98:37:b6:3a:bb:b7:b7:
         64:dc:80:8a:1a:a1:06:b0:56:ad:fb:8f:4d:fa:dd:fe:8e:58:
         2b:09:17:48:33:cf:34:05:5a:a0:ff:9a:2e:36:6e:c6:18:b9:
         64:4a:c5:f8:0c:ad:ed:5c:f2:c8:e6:c8:be:84:eb:93:90:b6:
         25:4c:05:ed:05:02:c4:12:27:55:62:d1:30:a1:a5:02:10:89:
         bd:b8:c6:08:d2:80:69:7a:52:f7:b4:ab:86:50:6f:26:68:8b:
         c9:20:ed:89:23:2d:9b:72:68:50:52:cc:dd:36:94:cc:25:07:
         ae:d8:69:36:75:04:82:f4:68:3c:ae:d7:4a:44:23:a4:b9:df:
         bb:44:51:4e:c1:0f:2c:15:1c:e2:59:59:db:f8:b5:af:d3:67:
         c7:d3:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:41:27 2025 by rpki-client