Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File:                     J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier:          HujEOL+EqFcrnsgisLLCPLIUozlIUfzRBYcWMdADNIY=
Subject key identifier:   BB:0C:7C:AF:39:1C:54:A2:32:93:80:CC:9E:E4:2B:6A:94:18:BB:F1
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer:       /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial:       019760CBA8B430DD413266BF3805B220B340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number:          0153
Signing time:             Wed 11 Jun 2025 21:00:48 +0000
Manifest this update:     Wed 11 Jun 2025 21:00:48 +0000
Manifest next update:     Thu 12 Jun 2025 21:00:48 +0000
Files and hashes:         1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: s9sYwl+AhL8yDIb1sBCH/Nz1vjS/nxnXqrdTe3CozdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:cb:a8:b4:30:dd:41:32:66:bf:38:05:b2:20:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
        Validity
            Not Before: Jun 11 21:00:48 2025 GMT
            Not After : Jun 12 21:00:48 2025 GMT
        Subject: CN=bb0c7caf391c54a2329380cc9ee42b6a9418bbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:d9:38:cf:2d:75:37:2d:e9:e6:a6:9a:71:
                    3d:2c:9e:5c:8a:df:bd:b4:d4:84:4c:10:57:89:cd:
                    db:09:33:31:f9:7b:e4:8e:18:e4:20:a5:0f:9b:89:
                    38:6c:6b:80:da:13:b6:e0:76:a2:51:48:fc:df:d1:
                    93:5a:1b:0b:42:d8:6b:21:74:a8:c8:2e:6d:01:da:
                    90:87:bc:82:a1:92:92:36:21:2e:de:0f:b2:ca:57:
                    e5:fc:7d:5d:e4:fd:9a:68:05:e7:cb:b4:f0:40:00:
                    2b:e5:79:89:35:2a:b6:3d:eb:a6:1c:18:ec:47:29:
                    22:77:2f:83:ef:03:a2:1e:da:b8:1d:cf:a9:d4:b9:
                    33:1f:58:0d:5e:c1:9b:48:4e:87:fa:3b:94:25:17:
                    1e:c7:2b:36:2e:e2:68:6a:4a:57:06:1b:3c:74:09:
                    67:d3:ba:ba:d5:92:73:5c:3c:7b:8f:7d:5c:90:01:
                    79:ab:d9:ff:00:fa:ba:3f:62:3f:b4:a8:62:27:70:
                    4a:88:8a:09:2a:49:53:7f:a0:b0:82:ce:b6:a0:c3:
                    86:05:b2:3d:c4:e9:12:36:e7:aa:ca:76:f4:fc:9e:
                    eb:02:92:cc:04:e7:66:31:0b:ee:da:32:bf:c7:31:
                    ba:8d:40:96:3a:72:d9:df:b2:65:67:c9:86:d6:58:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0C:7C:AF:39:1C:54:A2:32:93:80:CC:9E:E4:2B:6A:94:18:BB:F1
            X509v3 Authority Key Identifier:
                keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:55:23:3d:52:0f:95:79:ee:53:02:0c:1c:72:3a:df:8e:cd:
         03:94:8b:b9:39:7f:e0:4c:5d:1e:47:13:cd:d3:fe:eb:5d:26:
         71:09:06:56:57:1d:c2:2b:1d:e4:81:8b:06:af:e0:c0:ed:50:
         ff:84:31:e4:b8:ca:1d:3f:ba:15:e3:ad:d9:5c:ad:c8:32:ef:
         91:8f:bb:fe:55:b1:e9:a5:69:56:67:a9:8a:ef:b0:d3:fb:08:
         c8:37:75:47:cc:7f:d6:2b:84:11:78:9d:c0:7a:0b:f1:8a:0c:
         8f:58:84:61:2e:39:f8:02:e7:2f:99:f4:13:b7:67:c2:b6:34:
         05:81:9c:fe:20:82:15:36:12:d7:7c:04:17:16:22:cf:60:3f:
         2c:e7:78:c2:cf:27:1d:17:29:3e:40:08:e0:13:12:66:c3:6f:
         f4:55:fd:5c:d2:ff:40:4c:cd:04:99:41:f3:08:b0:29:83:19:
         64:0b:4d:25:12:2c:ed:b6:ca:b0:54:17:b4:ec:ca:19:c8:61:
         7e:35:61:3e:e0:69:8d:a0:12:07:28:bd:25:2f:55:9c:f6:6c:
         25:71:46:19:5b:c0:14:d0:42:37:1e:ad:a6:65:53:2e:da:27:
         de:1e:1d:4e:65:5e:a5:14:0e:d9:32:04:af:87:14:f5:d2:eb:
         14:3f:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:52:15 2025 by rpki-client