Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File:                     J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier:          j7HOo+nsii6f0ZhVaKVX51q4wNucZoMyK4TN6NBHRBU=
Subject key identifier:   EC:6F:8B:84:94:B2:48:E6:FA:91:76:46:BD:72:8C:9F:EA:F6:05:B5
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer:       /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial:       01974D446B0785B4D9260BD5C9279A145AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 02:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:18 +0000
Files and hashes:         1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: uB51yVUDgUsrHBckps689yX3GHyACaxCOj0hadK7leQ=)
                          2: hTYp4tVFk2Iv0MXe_TkiKDxhHf0.roa (hash: 6GO6BRanOpSP6VfdzTHxANKln0jgA0SAFTnzf0Z3Hfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:6b:07:85:b4:d9:26:0b:d5:c9:27:9a:14:5a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
        Validity
            Not Before: Jun  8 02:00:18 2025 GMT
            Not After : Jun  9 02:00:18 2025 GMT
        Subject: CN=ec6f8b8494b248e6fa917646bd728c9feaf605b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:ed:a4:24:12:a9:ea:d5:f6:dc:47:9b:2c:
                    51:eb:fb:65:16:de:ec:e8:26:34:91:ef:84:62:d0:
                    e9:0e:a7:2b:7d:a0:85:2d:36:aa:c3:30:84:2c:b8:
                    d1:93:91:ce:83:bf:ba:6b:59:78:08:1c:b2:07:b5:
                    e5:e6:24:73:44:51:cd:5a:ac:8d:f2:f1:5c:4d:14:
                    1e:21:29:f3:ed:f9:b3:73:37:d1:be:e9:78:5e:60:
                    26:54:8c:6c:8d:6e:06:f8:57:a8:27:a0:b7:05:f8:
                    1e:50:9c:f1:aa:b3:36:42:15:83:2c:1c:b7:f2:d5:
                    ee:18:eb:ae:2a:d5:d8:a0:bd:9c:44:f4:96:b6:0a:
                    c8:8f:56:9a:0c:f9:30:66:b7:86:9b:f2:01:a4:01:
                    7f:4d:28:9f:f4:ad:d3:37:0f:54:e8:a9:47:c7:b1:
                    f4:5c:70:32:f0:ce:3b:40:60:33:27:9c:93:42:4c:
                    25:5a:63:3c:0c:86:04:79:0b:95:a0:ab:10:8a:52:
                    1e:7a:17:20:58:3b:d1:9c:86:18:5c:de:2e:10:35:
                    70:e8:c8:3c:f2:b1:17:47:78:3d:bf:92:93:d2:56:
                    75:95:0a:d3:c5:2c:63:d1:0f:79:e4:20:a3:57:10:
                    17:90:18:bb:db:28:f0:35:23:62:b3:c7:1d:10:d6:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:8B:84:94:B2:48:E6:FA:91:76:46:BD:72:8C:9F:EA:F6:05:B5
            X509v3 Authority Key Identifier:
                keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:d8:17:fe:d3:c0:96:f3:38:61:6f:71:5f:c4:e3:09:32:
         04:f2:dd:d4:49:df:11:35:54:8e:67:6d:2d:48:b7:9e:79:23:
         98:4a:9c:90:82:66:87:7c:ee:a4:d8:1c:93:c3:be:b4:58:fd:
         e8:ab:da:20:e7:7d:3c:28:f0:03:40:55:3d:53:23:f4:79:6e:
         4e:9e:6e:c5:0d:10:ca:7c:02:a5:ca:d4:bc:e9:f7:1b:e0:06:
         b2:b7:0c:40:1c:5d:95:72:ee:72:1d:2a:7a:a1:ee:bb:b6:41:
         41:43:33:13:86:bf:26:1f:38:99:13:d0:34:3c:55:e2:66:91:
         c7:73:14:26:7e:6a:a0:98:c4:47:bd:c0:e7:b3:86:8c:1b:eb:
         47:87:bf:ad:67:e4:43:a5:24:3e:7f:74:77:6e:57:79:d8:32:
         98:13:10:54:5a:39:d8:dd:1c:06:b9:5c:d4:61:77:2c:26:89:
         cd:84:41:75:97:40:84:cd:a1:8b:a0:d3:9b:27:37:90:30:9d:
         90:0a:c9:df:d7:99:3d:7e:cc:5a:df:a9:13:b6:16:cd:22:c8:
         4e:e1:10:40:ab:da:2e:d8:9d:d2:54:77:b4:c5:ab:25:7e:e2:
         28:a4:f5:45:a4:24:45:32:ae:4f:94:a2:86:ff:83:1a:03:ed:
         a8:aa:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:36 2025 by rpki-client