Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
File:                     JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json)
Hash identifier:          nYCyPVui0722HMHTj+Gjr4z+5RScVPIxLemKsegwjYw=
Subject key identifier:   EC:73:F5:F1:8D:9A:CE:A2:26:C1:90:6B:4F:5C:7B:7E:A6:1E:52:20
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Certificate issuer:       /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial:       019744B001AE27643BEE77D9D55C895F91CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
Manifest number:          02E2
Signing time:             Fri 06 Jun 2025 10:01:14 +0000
Manifest this update:     Fri 06 Jun 2025 10:01:14 +0000
Manifest next update:     Sat 07 Jun 2025 10:01:14 +0000
Files and hashes:         1: 5_wrTSOzkEFkkNCOm-aPJQ6g-ks.roa (hash: MnzABlRB9zAfXgr3KOIwgG+mPu7rINrzCKmSJs1qoHs=)
                          2: 8irZy2V_SHs0ikDlT3HoUGHPpBc.roa (hash: ktGCRrCCmdPPWWR6aei4/ftpTdWVZoIYkk/wJpTtUbs=)
                          3: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: ITCRFgc5E2GvE9efJsEqssxq2UFaeuG33ir6dRmz9sA=)
                          4: LVAav_DbE0Bn_vYesALzQOtzKjY.roa (hash: 4RX3D3BO7OZGFhz2Gjt6JnBHkmsWj0HFcGJycXe3uBc=)
                          5: _VjKlmvzYVy8ktZu-wqjmjiAJmo.roa (hash: sT06t+r7xF4EKER4Eq9ja2KenwXiwwXnRLng7zaXna4=)
                          6: oLLFimpiIjJAatRY99k9UQMOCQQ.roa (hash: wTcQB20VYZ/GbSK9GTTzmMAtJntg2q+//028FiIAhtc=)
                          7: qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa (hash: uW0LUh4aX/A4RWhfxffVlViL65qqd1EWr8OCT6eFcKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:44:b0:01:ae:27:64:3b:ee:77:d9:d5:5c:89:5f:91:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
        Validity
            Not Before: Jun  6 10:01:14 2025 GMT
            Not After : Jun  7 10:01:14 2025 GMT
        Subject: CN=ec73f5f18d9acea226c1906b4f5c7b7ea61e5220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:f7:1a:52:3e:90:e5:56:a6:48:5b:5b:3a:
                    0a:dc:10:f9:6b:f0:fe:a8:63:fc:34:18:fe:bc:f6:
                    b0:71:17:38:d1:a1:dc:ba:4d:00:3b:ea:08:1b:a2:
                    1b:77:81:d5:24:22:78:75:08:9d:ae:d5:b8:6c:5f:
                    6d:e0:37:0a:a5:33:f3:93:0d:60:24:97:60:34:c1:
                    fc:38:cc:8c:fb:0e:b4:ce:45:1f:72:95:80:97:b6:
                    e2:5a:b6:7e:0c:41:9a:a5:92:52:d6:1c:93:4b:0e:
                    6a:4e:a5:dd:27:22:63:d9:c8:48:1c:39:67:59:7e:
                    5a:51:c1:93:4e:8f:ef:b3:31:56:3a:ab:8a:d3:0e:
                    bd:36:b3:37:f1:38:89:b1:a3:a8:0d:d1:44:f1:2a:
                    cc:ca:65:68:a7:66:b2:d7:0c:25:e2:37:62:3e:84:
                    74:2d:4b:eb:be:84:54:5d:f1:a5:7d:2a:31:ca:12:
                    d4:5a:e3:95:d4:cd:0d:df:e7:97:d6:75:7a:40:90:
                    d0:c2:8a:b1:01:b0:19:c0:13:22:d7:c2:14:b0:12:
                    e1:52:dc:44:d6:60:67:72:26:22:7a:11:c6:9b:63:
                    72:a5:80:e2:f1:e8:b8:7d:a2:62:5f:1c:75:2b:5b:
                    b9:cd:ec:06:7f:77:55:aa:53:0e:01:ce:9b:0e:cf:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:F5:F1:8D:9A:CE:A2:26:C1:90:6B:4F:5C:7B:7E:A6:1E:52:20
            X509v3 Authority Key Identifier:
                keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:3d:16:a9:9e:14:e9:66:12:b7:62:83:5a:7b:7a:3f:9e:
         a3:29:4c:47:33:de:b7:0c:da:bb:f7:89:9d:da:df:6e:b6:9d:
         82:9d:77:21:d6:2c:1e:ec:aa:bf:ef:e3:d1:d4:12:bd:65:09:
         3e:2e:08:46:5b:fb:c1:2d:6d:98:96:66:d9:f3:0a:60:7b:1e:
         97:f8:22:52:a4:fb:1c:bb:61:c4:ef:d1:a9:7b:05:19:d1:fc:
         6f:58:23:4d:e2:1f:a1:3b:9c:55:c6:ab:7d:50:1f:12:14:72:
         6a:76:cb:2a:2b:ce:da:44:18:e5:93:4e:e4:ef:23:b0:58:fe:
         53:f2:f9:ce:db:e5:3d:5a:3d:da:19:0e:b7:90:19:f7:97:75:
         d4:fb:b7:08:aa:dc:ce:9b:a1:76:6f:eb:e0:e9:83:fd:1f:65:
         94:a1:38:0f:97:26:33:85:a6:45:ab:ae:eb:da:38:db:74:43:
         d4:39:ea:00:0b:ba:a6:03:15:71:2a:62:3b:69:2e:af:2d:4e:
         6c:e0:0b:be:4f:d5:f7:ef:00:02:95:98:38:5d:ae:8a:2a:4f:
         42:aa:ca:ef:15:82:3c:bd:cf:cc:c5:72:c5:35:bf:bb:ea:f1:
         8d:80:7b:53:b7:eb:24:d8:36:91:f6:38:c5:83:2a:a7:f0:07:
         f1:26:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:32:44 2025 by rpki-client