Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          Yb+Y0p8b4FHAKfiL03L2K9q6sbV2zpd4wCtotCqlCl8=
Subject key identifier:   3B:B7:54:7A:AC:6E:3E:2F:49:F7:62:74:9B:19:A5:71:9B:B1:22:69
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       019767E0A8CC3968AE93D57A0EE5E6C65AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          0666
Signing time:             Fri 13 Jun 2025 06:01:05 +0000
Manifest this update:     Fri 13 Jun 2025 06:01:05 +0000
Manifest next update:     Sat 14 Jun 2025 06:01:05 +0000
Files and hashes:         1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: Ap6kPs0j/StKZ3vahJ2Hju7Qw566a+paM0eCqsDz1QQ=)
                          2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:e0:a8:cc:39:68:ae:93:d5:7a:0e:e5:e6:c6:5a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Jun 13 06:01:05 2025 GMT
            Not After : Jun 14 06:01:05 2025 GMT
        Subject: CN=3bb7547aac6e3e2f49f762749b19a5719bb12269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:e7:75:30:5d:5e:05:7d:2a:55:10:6d:5a:
                    9c:fe:a2:c0:3d:d0:22:75:9b:5e:33:2b:fa:fb:31:
                    37:22:2e:e4:e3:ba:77:0d:81:15:83:1f:88:b4:4b:
                    de:e5:d2:63:ba:07:6f:dc:a5:83:b2:20:82:59:ea:
                    90:b4:d9:e7:da:85:b9:4f:e0:f4:5d:19:b7:de:b1:
                    66:6f:f3:81:16:8d:53:e5:1d:81:63:7b:26:5b:c2:
                    23:ef:09:11:03:2f:c0:ec:58:6d:f4:c0:6d:80:7c:
                    17:8c:e3:2d:53:5f:10:de:86:63:46:cf:67:e4:df:
                    ae:f8:6f:14:47:98:c0:0c:61:a9:e1:21:b4:03:72:
                    1b:db:aa:9b:8e:f6:3b:37:2a:0e:8a:68:6d:a6:18:
                    e5:d6:a7:ec:d6:c3:83:3f:91:c0:50:25:61:31:f6:
                    ef:b5:a7:6a:80:8f:92:2e:e2:b5:0b:75:6e:46:b9:
                    14:40:c8:19:2b:8a:9f:48:89:f7:51:2d:b9:14:d5:
                    8a:2c:82:14:63:66:c3:03:93:2b:95:04:98:d6:2e:
                    fb:f2:9d:31:a8:21:20:38:fe:3f:05:71:53:8f:0d:
                    d6:10:b6:8f:2a:7b:fb:c3:72:64:61:df:87:d2:3f:
                    b6:9a:98:b3:bd:fb:d8:92:c3:20:7e:37:97:7d:b0:
                    4a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:54:7A:AC:6E:3E:2F:49:F7:62:74:9B:19:A5:71:9B:B1:22:69
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:82:37:9d:7e:56:09:2d:11:f8:f7:e7:7a:a9:60:b5:ac:10:
         d0:76:32:a4:96:12:b3:70:5f:af:ea:b8:c2:66:89:c5:d3:df:
         b9:35:08:0e:d5:a3:36:0a:22:17:ef:fb:d1:64:07:b0:79:34:
         a4:73:08:3c:7c:86:08:75:df:04:ea:12:3a:44:fd:12:f7:e6:
         fc:ba:21:8e:0c:9c:e4:8b:4e:8e:69:07:d2:fe:86:d8:30:c0:
         78:23:d8:9c:a6:99:09:33:4d:bc:38:39:90:a8:78:2d:d7:06:
         3a:e5:0e:e0:79:bd:5e:3c:fd:b6:1d:ac:2c:69:10:03:7b:a7:
         3f:8a:63:a3:4a:2d:16:f3:0e:2f:90:fe:57:ce:39:cd:08:42:
         39:33:ce:65:56:d6:13:86:82:44:96:65:63:d1:fd:33:fb:8f:
         27:f5:cb:e3:0f:c3:97:83:5f:26:a9:30:a2:9e:5b:7e:32:12:
         93:73:69:38:b7:e2:d1:4f:58:cb:1c:73:22:a4:3f:21:04:bd:
         43:4d:36:23:e8:1d:47:07:78:84:c3:bb:47:1d:7f:60:0b:3f:
         02:12:ef:4e:d1:ca:5e:92:9d:00:3f:05:c1:e2:93:5f:2e:c5:
         fa:2a:b7:f2:43:c9:cf:2f:d3:57:b9:83:48:93:73:30:50:f9:
         33:40:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:16:43 2025 by rpki-client