Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          10WEE+Jb0mOH6CJuEluIh4HI/6j6AGjA/TYe/s5gWoI=
Subject key identifier:   18:29:4B:DB:DE:FB:28:49:8E:F9:B2:3A:EE:C1:25:7E:BA:6E:B4:92
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       0196523654F10123ABC5D5D377ACA7299813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          1017
Signing time:             Sun 20 Apr 2025 08:00:14 +0000
Manifest this update:     Sun 20 Apr 2025 08:00:14 +0000
Manifest next update:     Mon 21 Apr 2025 08:00:14 +0000
Files and hashes:         1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
                          2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: vzgDkMnRufmJEj4MnWaMcWVuUC3q71+CBD5SFaWIDts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:36:54:f1:01:23:ab:c5:d5:d3:77:ac:a7:29:98:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Apr 20 08:00:14 2025 GMT
            Not After : Apr 21 08:00:14 2025 GMT
        Subject: CN=18294bdbdefb28498ef9b23aeec1257eba6eb492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:09:71:7a:65:9d:20:39:71:3d:33:8a:d5:
                    f7:52:09:c5:8f:f7:32:60:ad:fe:ba:9c:38:cc:48:
                    0d:36:a7:bc:43:f8:64:ed:ed:1f:cf:9c:e0:0e:68:
                    e2:11:b2:15:31:12:42:47:77:d8:29:89:be:17:f0:
                    ea:95:70:89:6f:08:ad:8a:b6:fc:46:b9:f8:2e:3d:
                    ef:ad:31:bf:b0:cb:37:74:d4:6c:70:89:08:4b:60:
                    1d:0b:d9:50:bf:cf:39:16:68:70:f0:43:ed:f6:26:
                    3c:bb:12:9e:e9:56:d3:e5:b9:3a:86:8b:9a:43:1f:
                    a1:44:4c:3c:6d:9c:35:05:9a:44:a7:e0:57:92:74:
                    b8:1c:4b:72:30:5d:f4:93:83:43:cc:ce:38:1a:68:
                    76:e4:94:89:5f:d0:41:07:f4:8a:d8:22:d2:08:41:
                    ac:5c:08:ab:a1:6e:6e:59:56:7b:fe:c5:79:60:42:
                    a6:17:69:32:75:0c:68:a5:e3:2d:06:5d:21:00:7c:
                    52:85:65:24:67:3d:60:8f:5c:c1:76:e0:5c:89:70:
                    7d:64:8a:36:b9:46:47:78:8e:ca:0b:a1:3d:b3:13:
                    9f:a3:27:3f:86:21:c7:43:32:d0:f9:c7:4f:1e:43:
                    e5:f1:7a:1d:b7:ff:72:c9:1d:b7:0f:04:13:5b:1e:
                    94:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:4B:DB:DE:FB:28:49:8E:F9:B2:3A:EE:C1:25:7E:BA:6E:B4:92
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:27:4e:80:e4:29:44:58:91:4c:14:9e:ee:a2:b0:4d:35:2b:
         11:43:2e:19:23:c6:9c:8e:93:7f:db:f2:cf:5c:68:c6:86:e2:
         82:44:25:a3:70:d0:14:26:71:3f:45:fa:b3:cc:00:cf:c3:07:
         41:10:e8:35:f7:c3:f5:50:e3:f1:ed:3a:bc:17:03:d8:33:93:
         d8:c1:2d:b9:36:2a:26:2c:d7:0c:b7:39:79:15:a2:e5:c8:30:
         8f:d1:5f:fb:c9:56:1e:18:e4:b3:d0:16:bc:49:98:2b:b1:11:
         f9:c7:54:95:3f:c9:48:75:1d:de:b2:ca:d8:74:ca:fa:53:03:
         d8:91:e2:4f:95:39:39:79:02:7d:f5:2e:a8:58:e9:99:23:d4:
         96:6e:7f:97:f0:50:e8:35:07:11:87:4f:14:d0:ca:04:5e:09:
         f4:74:a3:72:a0:d6:1b:a0:8b:ec:57:6a:fc:37:77:81:0f:58:
         ab:13:d6:35:44:29:35:b8:a9:64:a1:3a:87:7b:8c:aa:24:8b:
         a4:27:98:e7:5c:d1:90:28:1a:a0:4d:8f:f9:75:c0:87:49:08:
         43:40:de:9d:e3:f3:ce:36:5a:d3:73:22:fe:24:f9:1d:0f:74:
         47:af:3b:bf:86:d9:40:b2:3c:16:10:e0:6a:8f:3e:98:69:eb:
         30:2d:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:46 2025 by rpki-client