Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          vrb7XVLEa5hdQXbpzq2xGi6AU14gLnHnlfOW0wqQyYg=
Subject key identifier:   48:8B:23:54:BA:52:FD:06:4E:DE:98:38:F3:0B:79:CC:0B:A8:D2:95
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       0197CDCEA878623252AC0DECB348123AD1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          3A
Signing time:             Thu 03 Jul 2025 01:02:42 +0000
Manifest this update:     Thu 03 Jul 2025 01:02:42 +0000
Manifest next update:     Fri 04 Jul 2025 01:02:42 +0000
Files and hashes:         1: 1-hKq9wb4D_GY_fnZO_c_s4LLEX0.roa (hash: GBxwWVnB/Rc6j+xa3+zoxw/YNpQwaqrDeItK1vr3xY4=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: bJ9hzXdrkJFc/kb0tDpmncUWrnex2/dxdafvqnGdpPw=)
                          3: TOkxEOih0AWVPHi1e8WKWrt7QXA.roa (hash: dzQs5/UcI04rskBqMhv8VF3TcibwTWfajt/YKT8d1pQ=)
                          4: U9ve-ub2Kq0uVjJaRtH3iG-eEI0.roa (hash: e1vSTrCrDaoF+Wa5nMhoDmxXAurT9CLjVAo5POzht2w=)
                          5: jZbpJpit-Lsd4dvBv-eijT1tPzY.roa (hash: 4vmUiP1P84jE5ddsRzTqHbpq5+SB2pApAR6uzAQoPmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:ce:a8:78:62:32:52:ac:0d:ec:b3:48:12:3a:d1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: Jul  3 01:02:42 2025 GMT
            Not After : Jul  4 01:02:42 2025 GMT
        Subject: CN=488b2354ba52fd064ede9838f30b79cc0ba8d295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:b9:7d:97:43:8d:20:4e:d5:04:00:f7:5f:
                    b0:ea:52:5d:7b:d0:b5:69:41:4f:43:5b:35:61:94:
                    53:55:a8:7b:8b:60:bc:e4:4f:8e:00:65:c3:f9:72:
                    60:37:17:52:6c:78:84:2e:c3:56:04:d6:b8:bc:b6:
                    f3:7c:08:69:e4:c5:f7:f0:b3:4e:66:c9:3a:97:d4:
                    f8:5a:fd:97:05:ed:cc:cc:61:2f:cd:3e:7a:78:4f:
                    cb:75:30:da:05:47:18:89:c6:8a:d5:91:d0:7b:84:
                    52:ae:ea:1e:93:70:1b:73:52:33:e4:4c:65:59:b1:
                    37:86:da:da:a4:cc:f7:17:8a:d3:7d:68:4c:63:a0:
                    7f:db:9e:8d:ed:bc:07:3e:43:c1:d6:27:3c:09:6a:
                    70:98:cb:c6:73:03:3b:f4:93:b3:b3:d8:10:e3:ea:
                    f0:f2:cd:6d:6f:55:71:c4:50:02:4e:09:b3:9e:75:
                    ce:92:f6:f0:7c:c5:92:6e:12:88:da:2e:0c:32:95:
                    e6:1e:1c:e1:ee:c8:c7:16:a2:90:37:6c:35:7f:f4:
                    6f:17:78:c9:36:cd:f0:71:d2:70:14:4b:5b:9f:03:
                    44:30:bc:c4:91:d3:36:5a:b7:a6:3e:03:bd:fa:e2:
                    49:7d:ed:87:0d:df:c3:9f:bb:a8:c2:c5:d2:c9:5f:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8B:23:54:BA:52:FD:06:4E:DE:98:38:F3:0B:79:CC:0B:A8:D2:95
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:f8:ba:36:47:93:61:80:4e:6e:1b:80:d4:f2:0d:cd:20:
         b1:89:39:d2:23:44:90:eb:68:f3:93:51:5e:a9:3a:6e:63:fe:
         54:2b:57:31:c8:d3:8a:12:a8:15:8e:ba:c2:0b:03:fc:79:62:
         a1:11:c5:82:14:02:59:7c:e2:ff:5b:ee:13:20:39:72:4d:e4:
         3b:96:85:2a:82:3c:56:ef:85:71:f9:81:44:29:4c:4c:e1:c1:
         9d:c7:5d:b7:44:c8:cc:ff:6e:68:51:a4:b3:73:59:36:78:70:
         89:9d:8e:81:14:6e:28:ea:f7:89:b8:62:30:67:80:66:68:7b:
         5b:a5:6b:f5:ff:9a:a3:01:e6:0d:8f:33:60:e9:94:75:65:3a:
         74:e2:cf:b7:ee:d5:7d:60:fa:f4:40:f2:9c:bc:71:83:1b:24:
         fc:e4:3a:96:5d:69:e6:f6:d0:fc:9e:c5:c0:40:e4:b6:60:ab:
         e7:8c:77:de:39:56:73:33:3c:77:63:39:66:2e:da:3a:91:77:
         76:4e:fc:41:cb:fa:af:ff:59:02:10:96:37:5d:0f:56:b1:0b:
         81:ad:58:2d:3b:37:de:87:ed:4d:12:2c:75:76:52:6c:d8:4c:
         d8:5e:7c:fc:51:e3:67:b1:e5:37:a7:84:34:86:ae:45:87:cd:
         30:a7:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:23:34 2025 by rpki-client