Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File:                     JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier:          rUumEPrI1EdpPthXtwnCJwgv6uaxWLpQrvaSgUjlkPI=
Subject key identifier:   93:C0:BE:C6:73:ED:5A:37:13:42:50:66:D9:B9:58:DD:C0:FC:48:7E
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer:       /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial:       019748FABC0A431AEF1335CFC7A1FAD32E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number:          0C72
Signing time:             Sat 07 Jun 2025 06:01:20 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:20 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:20 +0000
Files and hashes:         1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: NaEgvIlz7RyIBGb+chR4tCJCSorpyajaKfOZ7JMpffc=)
                          2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:bc:0a:43:1a:ef:13:35:cf:c7:a1:fa:d3:2e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
        Validity
            Not Before: Jun  7 06:01:20 2025 GMT
            Not After : Jun  8 06:01:20 2025 GMT
        Subject: CN=93c0bec673ed5a3713425066d9b958ddc0fc487e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:28:e8:cd:76:dc:70:5b:69:05:93:9e:b1:2f:
                    80:0f:87:e2:78:71:e8:02:fd:74:e9:2c:99:4e:92:
                    75:54:c2:b9:43:52:b3:a0:39:9b:78:4b:1c:b2:ec:
                    fe:b3:65:8e:4b:29:e0:e0:87:a7:6d:57:14:db:06:
                    22:62:83:34:8a:db:b4:d1:c1:2e:36:b3:d8:5e:10:
                    8a:e2:04:df:09:5b:ef:92:65:6a:d1:b0:a9:49:a3:
                    a4:c5:76:63:50:f0:10:c0:ad:a4:31:6f:4c:06:bf:
                    d1:75:5f:81:3a:8c:1f:aa:e5:fa:1a:f1:60:26:29:
                    c7:f2:9a:93:0a:4a:16:ca:70:b8:ff:73:56:48:49:
                    ac:a4:30:f3:76:39:a9:03:8b:22:fc:62:41:c8:18:
                    4f:05:a5:87:24:f6:89:aa:0a:24:46:51:26:15:7a:
                    d0:db:75:6d:01:8b:70:54:64:bf:2d:c9:fc:70:e2:
                    de:2c:bf:ae:c6:1a:0d:4a:db:3d:6e:6e:5f:4c:fd:
                    6b:6f:b1:15:c5:01:0a:fa:8a:bc:2d:92:78:31:9a:
                    5c:b3:1f:41:a5:03:c1:9c:8d:03:f5:e9:a7:f4:e7:
                    4a:ae:be:75:fd:38:62:87:1b:fe:44:24:84:48:e0:
                    eb:f0:94:e0:99:7f:a1:3c:3e:be:51:63:99:31:0f:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C0:BE:C6:73:ED:5A:37:13:42:50:66:D9:B9:58:DD:C0:FC:48:7E
            X509v3 Authority Key Identifier:
                keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:66:da:37:f4:9a:9c:58:e9:a3:35:52:05:64:bf:f2:51:f2:
         eb:db:e4:86:3b:f4:ee:ec:fc:86:eb:3d:bd:b8:ad:e4:d3:ef:
         23:b7:29:b4:58:b8:21:01:64:91:65:4d:89:29:e7:89:34:fb:
         0d:eb:60:30:05:26:46:85:da:3e:20:07:61:52:59:75:71:bb:
         7b:02:06:9b:5c:0b:e5:40:74:0e:71:a1:0d:02:de:a5:d9:67:
         fd:6f:8b:1c:69:c9:63:56:f8:67:b6:ea:89:f6:ff:90:1d:f6:
         d5:d0:d2:bd:72:d1:69:dc:98:63:84:f3:a1:76:d6:2b:2d:0b:
         3a:9d:1c:33:f9:50:49:21:05:43:c5:3d:87:9f:6f:73:13:83:
         18:19:e9:14:14:fd:f1:9d:d4:14:ac:82:85:ca:63:0b:3d:bd:
         c7:3f:69:b6:43:d2:d2:00:b5:94:8c:98:54:15:a3:e4:75:e7:
         fb:60:e5:1c:e5:c1:52:55:67:98:d2:e3:96:de:59:31:7e:eb:
         96:40:b5:ee:a2:33:64:a1:2d:e3:3f:6b:f8:50:d7:36:90:95:
         03:2d:c3:a5:98:47:bf:1b:05:7c:4e:64:d0:0b:fd:8d:68:64:
         fb:44:2a:47:21:50:8b:8b:3a:e7:e4:d1:7d:2a:45:a1:7f:d4:
         89:59:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:29 2025 by rpki-client