Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          nCMggvPtdv+cVIchHEPUfWJYp0ZF9MS9JHoOynQ2xlQ=
Subject key identifier:   E7:01:C0:89:6A:BB:54:9B:FB:7B:9F:2C:46:55:8E:24:13:71:D7:A1
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       01974A7BA009BCFC00BA8AEBF02BC6C5E37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 13:01:45 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:45 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:45 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: /lvKO9X5tWNwC032tHEx6bOEAw21VhHq+evNwqaGNIg=)
                          2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:a0:09:bc:fc:00:ba:8a:eb:f0:2b:c6:c5:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: Jun  7 13:01:45 2025 GMT
            Not After : Jun  8 13:01:45 2025 GMT
        Subject: CN=e701c0896abb549bfb7b9f2c46558e241371d7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:79:69:e2:9d:76:ad:6e:fb:6c:2d:cc:22:
                    f2:e0:87:38:02:0a:79:2c:89:2a:52:e0:63:bf:6f:
                    c8:a7:50:1c:58:fb:1e:de:04:54:73:bb:ff:25:0a:
                    70:3f:cd:9b:48:7a:f7:9f:73:55:54:87:e3:e7:d4:
                    28:56:24:14:2a:1e:73:c3:e2:63:ad:05:68:dc:0a:
                    01:c2:eb:2c:99:b1:11:47:ad:f2:26:c1:ee:f0:8a:
                    73:a8:2e:e3:8b:d9:ff:80:8b:8e:6a:4b:83:e7:9f:
                    d1:a3:84:75:93:6e:83:0c:f8:3c:02:dd:da:09:fd:
                    0b:83:7a:2b:e3:60:aa:70:61:f8:23:1c:9f:95:65:
                    7b:66:5a:28:38:c1:12:fd:24:6d:80:89:e8:df:38:
                    13:ef:8f:91:89:32:e8:27:f4:8d:a9:69:3d:05:b7:
                    09:5e:8e:93:32:05:d1:59:0d:23:f1:46:30:21:be:
                    c8:5f:b1:9f:b8:c8:b1:65:23:93:17:d9:f0:4f:fd:
                    bc:24:04:6e:13:f9:28:a0:5e:d3:44:eb:32:f2:19:
                    e6:48:5a:fb:b2:06:60:44:52:02:f8:a6:c4:87:3f:
                    73:0f:e3:83:11:dc:3b:4b:c8:80:94:53:73:96:a7:
                    52:57:53:de:af:1a:a3:08:8b:91:1c:97:35:8b:ed:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:01:C0:89:6A:BB:54:9B:FB:7B:9F:2C:46:55:8E:24:13:71:D7:A1
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:42:94:d7:f4:ae:fb:bd:fd:b7:38:d4:ef:a1:64:a7:d6:85:
         0f:c6:08:1c:6c:f3:6c:7f:cc:73:4d:b7:7d:56:9f:dc:86:41:
         8d:83:14:68:1e:78:10:64:07:a2:ca:75:d8:1a:07:de:fb:4a:
         75:d9:cc:63:2f:92:52:b9:e2:82:20:5e:59:06:2b:b8:9a:ae:
         27:c7:51:a5:9c:91:f5:6a:f0:cb:26:32:06:b9:5d:b1:5c:42:
         db:ec:96:6a:bf:43:48:0a:ae:94:36:0a:ca:4b:dd:54:59:0c:
         07:99:59:94:77:a8:2f:00:6a:3a:39:e6:10:3b:46:e4:a1:ed:
         40:9a:13:9c:77:0c:ba:7b:02:c1:68:6b:08:44:08:73:68:05:
         52:b1:e2:7d:d7:20:d5:54:db:1f:56:45:20:37:5b:82:02:80:
         6a:9b:60:48:ad:0e:5b:e9:b6:b3:e6:d3:fc:62:26:c2:95:08:
         c7:80:64:3c:9e:aa:bf:6a:04:67:ce:a3:8d:8e:6a:7f:1a:e1:
         e5:0d:b1:c8:7f:fa:9a:39:dd:76:c1:09:4c:8d:2d:10:8c:a8:
         aa:ed:2c:49:0f:c9:16:fc:55:43:15:87:ff:4d:e4:8e:fd:42:
         34:16:8c:6c:e8:1e:35:cb:1d:bd:38:45:b1:2a:e7:ac:d7:18:
         37:5b:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:45 2025 by rpki-client