Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          s0jNpMpH5uJ/GAUeYQQSO2GoLvQShL2TrnZ8KmnUyWs=
Subject key identifier:   A6:23:CF:19:9E:8E:80:EF:0E:05:E2:E4:B5:C0:58:BF:A4:A1:DA:86
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       0197488CD4FE7764E3B3E8C8116090E62AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          04C6
Signing time:             Sat 07 Jun 2025 04:01:18 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:18 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:18 +0000
Files and hashes:         1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: yaNHhVsV1bq+AsqmsRM696Rp6ywz5cHl9zoGf5Nsulk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:d4:fe:77:64:e3:b3:e8:c8:11:60:90:e6:2a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Jun  7 04:01:18 2025 GMT
            Not After : Jun  8 04:01:18 2025 GMT
        Subject: CN=a623cf199e8e80ef0e05e2e4b5c058bfa4a1da86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:2b:f8:1c:d4:dd:98:30:ed:19:cd:ae:90:
                    3e:0f:ab:4b:92:68:4f:44:ad:c7:08:1c:e6:73:e3:
                    de:9e:d1:a3:50:83:fe:10:1f:c3:fa:be:be:f0:41:
                    fc:6b:ba:d6:34:52:03:ae:d4:e3:ea:9a:18:d5:4f:
                    f1:e9:55:6c:23:b5:49:32:5e:34:7e:70:37:38:1f:
                    86:f0:71:8c:c8:24:f8:e4:60:78:86:50:63:4b:e0:
                    5d:fa:32:a9:a4:7d:e7:6b:23:08:3d:5b:6a:fc:32:
                    fb:cb:d4:0c:86:c1:9c:fb:7f:a5:24:bd:1f:0a:1e:
                    bb:33:12:c6:52:cb:4c:7e:2f:8c:18:bf:a8:c9:41:
                    bb:df:5e:0a:9d:6b:91:2a:17:8f:61:4d:15:a4:fd:
                    d8:74:10:38:08:3e:85:25:c2:ea:06:9d:85:1f:fc:
                    83:09:58:6d:16:67:e2:59:9e:fe:88:51:7e:9a:69:
                    f7:b4:8d:71:5a:af:62:cf:71:cc:5f:7b:e5:5f:18:
                    1d:0c:13:e8:63:50:59:24:d7:90:1c:52:e8:7c:19:
                    f3:5a:2b:65:5d:6c:61:55:ee:b7:0c:d9:3e:04:9e:
                    a8:81:ad:b7:72:c4:8d:83:c8:c2:ec:a3:cd:2c:08:
                    83:33:5e:15:15:6c:ff:d3:1d:84:b5:aa:ca:ef:09:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:CF:19:9E:8E:80:EF:0E:05:E2:E4:B5:C0:58:BF:A4:A1:DA:86
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:90:dc:3f:c7:35:08:c4:5a:fb:fe:76:92:7b:36:1b:47:09:
         fd:cb:84:e1:ab:45:5f:69:04:0b:96:0a:41:26:9e:fc:79:89:
         29:fb:d3:67:21:b4:a4:f1:13:c6:15:ba:7f:f5:be:0c:21:b8:
         62:19:b6:ee:45:fe:e7:86:fb:bf:c5:c2:79:d4:5c:b8:f9:ad:
         ca:0c:ba:13:09:e1:b6:39:41:b7:e5:8c:c0:3c:97:c5:b3:b7:
         b3:bd:d6:15:07:6d:a9:68:a3:b7:4b:ba:46:b5:1b:9c:c3:cf:
         28:50:23:bf:a5:83:bd:2e:25:26:a8:a9:ab:b8:8d:76:06:39:
         49:9c:62:11:9c:a5:18:9f:21:16:e0:75:8f:d6:f0:a6:2e:12:
         fe:d0:f6:b4:8e:bd:2b:52:17:0d:ce:25:6d:ae:e7:58:2f:e0:
         51:25:34:72:02:25:3e:e7:d1:c3:59:97:cc:d5:48:be:cd:b8:
         b5:5f:60:85:8d:6b:44:d8:97:7f:d0:bf:1f:f7:c4:92:2e:c6:
         b3:f6:97:15:7c:6d:3f:4f:e2:7c:03:c7:3a:6d:1b:9c:a2:d7:
         ef:70:d0:0e:bf:78:8a:86:b1:12:f8:e6:28:46:9f:cf:6f:cd:
         49:4c:4d:bf:54:81:96:82:41:7c:98:8c:b0:3f:f0:fa:8b:ca:
         4d:1a:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:45:59 2025 by rpki-client