Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          ZsDlnBf1UFGxEQ/jAjWHyNbajYDAFIob2sVPOeny8D4=
Subject key identifier:   F9:F5:86:90:ED:DC:7D:DC:FD:6B:B3:B6:FB:0E:CF:95:14:40:C1:0A
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       019642C336C56A6255CC2AD54A03F45C99DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          109D
Signing time:             Thu 17 Apr 2025 08:00:11 +0000
Manifest this update:     Thu 17 Apr 2025 08:00:11 +0000
Manifest next update:     Fri 18 Apr 2025 08:00:11 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: Rlj32OJAKXOLFy4Da7OYqd+xu9HDui7NP9Jgiz0xH7A=)
                          2: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (hash: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:c3:36:c5:6a:62:55:cc:2a:d5:4a:03:f4:5c:99:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Apr 17 08:00:11 2025 GMT
            Not After : Apr 18 08:00:11 2025 GMT
        Subject: CN=f9f58690eddc7ddcfd6bb3b6fb0ecf951440c10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:5d:4d:1e:2b:07:12:3c:ac:32:0f:43:ed:
                    6a:a1:cf:e0:11:b0:d3:e7:ee:ae:51:ea:75:e3:3a:
                    c2:02:69:0c:25:17:b2:ef:8f:cc:5b:40:1e:e8:98:
                    ce:a6:3d:1e:5e:35:22:cf:0a:18:71:eb:5a:e0:9c:
                    93:1a:5b:fb:26:b2:21:6b:05:e0:fb:0a:b4:75:51:
                    b0:bd:f3:9d:4e:61:9d:50:88:a5:ad:de:e6:e3:2c:
                    85:aa:c4:d0:4f:81:aa:84:af:b7:f3:2f:ef:2c:16:
                    39:4c:e5:7b:ce:3a:f6:90:3d:39:a6:1b:58:53:d5:
                    df:f1:b1:7e:0b:8d:8a:5a:6e:0b:14:7f:bd:69:33:
                    3c:09:c0:20:33:ed:72:d7:d5:f2:81:a7:ee:e8:4d:
                    d0:52:a1:ea:2b:ae:35:2f:25:1e:a0:52:77:69:dd:
                    95:65:40:02:c2:49:48:f4:13:e0:68:eb:96:7c:4b:
                    8e:f3:ab:91:d2:4f:89:71:d8:7b:96:25:cc:68:6a:
                    bb:8e:ae:ae:57:7f:03:0f:43:e3:38:93:e9:c8:2d:
                    bf:37:13:09:2c:7d:bf:86:90:32:5a:db:7e:36:d0:
                    c8:88:76:e1:df:93:b9:f2:42:ce:7b:f8:e2:a7:2e:
                    28:05:77:ff:aa:3c:b4:09:63:b2:31:e0:63:20:be:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F5:86:90:ED:DC:7D:DC:FD:6B:B3:B6:FB:0E:CF:95:14:40:C1:0A
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:d4:0d:a8:68:4c:8e:c3:b0:29:6e:53:94:6d:a1:5c:a0:
         f8:70:0e:44:46:e3:01:96:42:4a:f3:ca:c3:69:47:33:04:ea:
         c3:5c:57:01:5d:02:c1:a2:8e:5c:f9:c4:b4:75:98:cf:88:4a:
         f5:e6:82:68:44:8a:c9:7b:66:d4:87:37:e2:e3:e2:b7:ad:24:
         1c:5a:ac:a3:9f:d1:b8:05:54:ea:be:90:87:e5:b7:0a:c6:5e:
         ea:44:99:9c:c3:45:05:0a:2e:89:4b:87:0d:50:c8:39:85:94:
         c6:92:08:7d:95:1e:dc:a7:92:73:24:c8:69:2a:b3:26:55:c5:
         31:85:02:94:d8:9c:7d:73:29:71:c4:86:df:93:f8:c0:37:77:
         a1:92:c5:27:a2:02:10:99:b2:c8:73:25:a4:7d:d2:9d:a3:bd:
         03:e4:55:ed:96:4d:96:47:01:ee:0c:fe:1e:5f:4f:62:4f:17:
         b5:36:bd:2f:15:88:43:b9:8f:c2:f0:78:68:64:9d:93:87:53:
         89:81:35:00:8e:74:5b:47:63:93:72:4b:d1:59:a9:d5:1f:1f:
         cc:59:18:e7:01:52:7c:2f:1f:56:2d:1c:1d:ea:66:c0:22:f8:
         6e:72:0b:1d:f3:b2:59:3d:99:f4:02:28:cc:08:28:5a:a4:e2:
         9e:9f:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:51:08 2025 by rpki-client