Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File:                     J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier:          5jo9zUP6TNyA3QJ37Tqr7dnb3Ahn5wpEKLL+o2nXwk4=
Subject key identifier:   C3:78:CE:96:03:1E:5C:4C:88:B6:0C:57:29:3A:CF:D9:2A:68:88:40
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer:       /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial:       01976A7391F186DFAD96F8ECB03F5D942E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number:          0158
Signing time:             Fri 13 Jun 2025 18:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 18:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 18:00:48 +0000
Files and hashes:         1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: oiB+GOfV+hgHlHunU8Ui3/NZrFr6c53zS/+IxecNsio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:73:91:f1:86:df:ad:96:f8:ec:b0:3f:5d:94:2e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
        Validity
            Not Before: Jun 13 18:00:48 2025 GMT
            Not After : Jun 14 18:00:48 2025 GMT
        Subject: CN=c378ce96031e5c4c88b60c57293acfd92a688840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:c1:d0:28:61:ce:b8:a0:9f:ff:7a:ae:08:
                    ac:02:a4:76:fa:d8:70:cd:e2:0f:ba:1f:7d:e6:eb:
                    9d:fe:a1:2e:69:a6:c3:36:56:aa:52:03:1d:49:00:
                    83:ed:1c:be:6f:ad:7e:e0:3a:36:e1:02:6d:98:85:
                    ae:34:22:d8:08:4d:52:09:39:34:bb:c5:d0:48:3a:
                    c2:ad:53:37:a2:9a:b3:5b:74:d5:96:a3:f0:67:b5:
                    6d:4f:a5:a1:33:a8:ae:f8:04:3f:58:a4:71:74:50:
                    a1:dd:fc:5f:16:f3:5b:0d:04:4b:2e:f8:f7:aa:05:
                    16:b6:e6:76:c2:f6:07:7b:4f:72:48:97:76:01:3f:
                    82:d4:63:ad:84:98:30:7d:e5:77:58:8f:ca:cf:3b:
                    be:ee:e9:3e:ae:e6:17:ca:71:7a:1c:1f:48:05:7d:
                    7b:42:e1:41:35:41:f4:15:b4:01:a5:6d:e1:b6:4f:
                    ff:b8:b2:1f:ab:49:00:d9:a6:bb:f4:e7:36:b7:39:
                    11:42:bb:54:08:c5:6e:77:5c:69:d1:2f:3c:e6:d9:
                    bb:cc:05:d1:1c:bc:95:c3:34:5b:72:ca:f7:c0:91:
                    b0:70:73:18:94:9c:78:cc:d8:2d:2c:ea:71:e8:01:
                    0b:dc:e6:8d:8e:80:3f:08:57:ae:ea:ce:cd:c4:6b:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:CE:96:03:1E:5C:4C:88:B6:0C:57:29:3A:CF:D9:2A:68:88:40
            X509v3 Authority Key Identifier:
                keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:dd:ad:1f:db:af:31:f9:43:d8:84:09:04:a5:b0:78:e6:
         df:08:0c:f0:00:49:94:59:a2:de:de:18:8c:62:bc:ed:be:18:
         9e:35:09:9d:b1:71:83:fd:5f:32:eb:a7:2d:ad:f3:95:f4:97:
         43:47:43:32:f6:4c:79:86:14:12:06:c6:2f:3b:44:33:4b:bd:
         4a:2d:fc:e4:33:43:26:fb:28:2c:26:80:42:93:0c:66:7c:f5:
         a1:75:10:94:b6:44:be:82:92:57:d1:b2:3e:1b:cc:6e:c5:3a:
         ff:f7:0c:2f:77:f4:cb:00:e0:1b:59:e5:e8:05:36:1e:a2:a8:
         76:4f:42:03:56:4c:66:e1:8c:10:da:b8:b8:fd:2d:53:e9:4e:
         0b:f9:2d:86:71:37:46:1c:c0:7e:88:ea:98:3e:40:b5:93:b7:
         c7:70:d9:31:65:96:1a:7a:51:fe:7d:f7:0f:4d:3a:83:8f:0a:
         67:dd:eb:d5:1b:04:a3:d8:9d:4d:ae:b6:40:f5:d8:8b:41:cb:
         4e:ac:b7:1b:48:c3:91:97:27:a8:70:18:3f:7c:7f:35:74:38:
         97:b9:93:b4:de:26:8a:62:78:e9:b6:61:7b:a1:3a:e5:b3:f7:
         e5:5e:eb:cd:c4:1f:19:0a:8b:78:cd:63:c8:39:a0:82:1f:fb:
         6f:6a:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:50:19 2025 by rpki-client