Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File:                     jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier:          FEhmUrXrv+NZG4JygbdrWuUf9ODF2J8OnF7EnzT4dSg=
Subject key identifier:   13:61:A8:B3:85:EC:1B:CD:D2:C7:9C:F1:00:84:88:8D:D3:C9:01:C9
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer:       /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial:       01975C80B719354E8E573A934F461B9FBE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number:          01FC
Signing time:             Wed 11 Jun 2025 01:00:28 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:28 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:28 +0000
Files and hashes:         1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
                          2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: NP29yA9lkbglnt+pfmmVUR+uQzwDpoLfLGfdfAkHQAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:80:b7:19:35:4e:8e:57:3a:93:4f:46:1b:9f:be:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
        Validity
            Not Before: Jun 11 01:00:28 2025 GMT
            Not After : Jun 12 01:00:28 2025 GMT
        Subject: CN=1361a8b385ec1bcdd2c79cf10084888dd3c901c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:b2:83:14:46:44:ee:44:52:50:3d:25:aa:
                    36:68:35:b2:3f:5e:b6:20:2b:be:fd:27:93:00:cb:
                    f0:4e:7b:dd:d5:82:df:cc:11:46:e2:92:d3:16:3c:
                    c9:af:5d:09:76:47:50:1a:e5:96:86:04:8f:f2:0f:
                    38:a9:bb:d7:58:e6:49:15:01:e9:b2:3a:df:d1:e1:
                    fd:2a:7d:8f:db:47:61:b2:83:e9:fa:3b:ef:9d:89:
                    18:0a:ae:91:36:58:b7:be:aa:5e:56:d1:cf:84:bc:
                    b0:ca:c0:20:e8:e2:ba:c5:aa:5d:df:7c:f1:bf:e0:
                    19:6f:5a:42:52:c9:71:24:2a:e4:45:b9:49:d8:19:
                    08:20:24:36:68:0b:d7:cd:03:22:23:16:0c:e2:a5:
                    94:29:6e:18:9c:19:d4:43:f5:fd:06:e6:9f:1a:5c:
                    df:dc:0e:23:9a:76:9b:a2:fa:7a:ae:e6:cc:c5:0e:
                    90:e8:0e:5c:9e:8e:4f:e7:44:20:d7:a7:cc:fd:f7:
                    29:e2:8a:3a:a3:17:85:19:9e:e8:6f:d4:78:25:27:
                    cb:e7:c1:ec:81:53:9c:ed:92:a6:64:a5:ce:ba:8a:
                    4f:d3:4a:36:03:88:6d:81:fb:07:f3:39:7a:cc:67:
                    ab:31:90:b4:d4:e0:ee:d7:5e:d3:bf:4c:23:60:86:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:A8:B3:85:EC:1B:CD:D2:C7:9C:F1:00:84:88:8D:D3:C9:01:C9
            X509v3 Authority Key Identifier:
                keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:08:93:63:d5:17:4e:56:ac:0b:8c:17:6c:ac:f6:ae:fb:4a:
         aa:ef:f3:df:9f:70:07:74:2a:91:ac:ae:64:16:d6:c5:4f:af:
         7b:31:8a:ca:e2:6b:d8:cc:c6:e3:b1:1c:01:14:3b:74:e1:c0:
         0c:dc:0e:83:ae:8d:f0:5d:d0:a3:18:81:2a:9d:95:8c:da:7a:
         89:89:ea:76:fa:92:1a:ab:32:2f:e7:e9:f1:d2:4a:c1:98:11:
         79:45:7d:43:07:24:00:9e:80:b3:3e:0f:13:e6:bd:e5:98:a7:
         79:e9:da:f8:02:92:ef:55:ec:bd:32:72:bf:9f:79:4a:b4:9d:
         64:c5:34:91:1f:9e:c5:19:f9:91:5e:7d:65:23:db:86:df:b4:
         8d:e3:94:fa:38:a4:51:32:45:95:a2:6e:be:70:4e:71:6b:67:
         81:e9:37:31:14:56:f5:49:79:39:5b:0a:6f:32:fe:2c:cf:dd:
         3f:85:0d:dc:fb:ce:23:b7:e1:21:eb:89:41:f5:ec:33:4d:3e:
         0f:bb:80:3c:38:cd:2f:c1:12:eb:d8:57:8e:a2:b3:67:03:3b:
         27:2b:23:29:34:64:16:0b:05:a6:1f:5d:30:0e:9d:23:39:d2:
         e8:f9:eb:05:85:09:cd:70:05:0d:19:6b:e5:3a:b5:48:fb:55:
         f2:92:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:43:49 2025 by rpki-client