Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          8Tz7xs1eRzwgbwWE3hzF2T/e9V4J++nR520rC2AtOVM=
Subject key identifier:   11:E2:A1:4E:FC:EA:21:3A:F5:0B:5F:2D:C4:68:E3:DE:DA:C6:F3:C5
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       01992255F13000A53931D3CA44DF8B94467B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          EB
Signing time:             Sun 07 Sep 2025 04:01:21 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:21 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:21 +0000
Files and hashes:         1: 1-hKq9wb4D_GY_fnZO_c_s4LLEX0.roa (hash: GBxwWVnB/Rc6j+xa3+zoxw/YNpQwaqrDeItK1vr3xY4=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: e5y12R64ZcvetF1Z/fcecKHryqIYTSoMZPYmjxW4O0U=)
                          3: TOkxEOih0AWVPHi1e8WKWrt7QXA.roa (hash: dzQs5/UcI04rskBqMhv8VF3TcibwTWfajt/YKT8d1pQ=)
                          4: eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa (hash: lAwc3uWm+AaQ5JvjoDVtmKeHt76LzcXeYzYWfm4Odtk=)
                          5: jZbpJpit-Lsd4dvBv-eijT1tPzY.roa (hash: 4vmUiP1P84jE5ddsRzTqHbpq5+SB2pApAR6uzAQoPmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:f1:30:00:a5:39:31:d3:ca:44:df:8b:94:46:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: Sep  7 04:01:21 2025 GMT
            Not After : Sep  8 04:01:21 2025 GMT
        Subject: CN=11e2a14efcea213af50b5f2dc468e3dedac6f3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:04:52:5d:5c:0c:56:31:1d:7d:8b:c6:43:
                    f1:0a:b4:08:67:89:2b:1b:9f:1c:ef:79:8b:5c:ca:
                    fc:43:63:51:54:52:80:b7:32:9b:cc:7b:88:79:5d:
                    84:09:dd:74:71:83:8f:41:fc:c2:ee:06:a3:79:17:
                    eb:d5:38:dc:af:74:b1:d3:dc:1b:1b:0d:62:59:e6:
                    d3:fa:62:6b:83:41:4b:4c:82:30:09:94:a2:11:f1:
                    c7:53:45:67:45:e1:d2:ab:df:ba:2d:c9:b1:6d:00:
                    01:83:b3:e9:c7:11:da:fe:ed:92:09:61:0e:5e:fe:
                    d6:dc:75:04:81:7f:06:91:e0:5a:6a:0a:3b:86:79:
                    5c:26:f7:da:af:73:cf:1d:b2:65:d7:e1:d8:b0:3c:
                    e9:6e:d7:1e:33:6c:f9:e5:14:7b:85:d4:79:18:41:
                    9c:ab:09:34:86:58:ae:7f:03:99:59:26:7b:c3:0b:
                    59:ad:04:af:3c:dd:ea:2c:9e:68:c1:02:73:c3:ca:
                    74:0f:70:1d:8a:ea:e7:5d:b8:a2:bc:56:0c:50:68:
                    32:26:e1:ad:2c:d5:3a:8f:81:a7:ce:61:4b:e9:3d:
                    99:53:cd:98:d0:aa:ff:6e:5c:e5:ae:47:ce:cd:51:
                    06:0d:23:a2:ed:6f:d2:9b:91:ef:d7:72:01:97:ac:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:A1:4E:FC:EA:21:3A:F5:0B:5F:2D:C4:68:E3:DE:DA:C6:F3:C5
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a4:d4:8e:a1:bd:08:e9:50:a4:3f:ba:81:82:2b:70:5f:22:
         84:d9:89:86:c6:31:60:e2:ba:58:bc:cb:78:ee:60:58:3a:2e:
         00:66:e7:84:92:13:3e:ee:51:c9:4a:86:39:3b:7d:36:98:80:
         f9:2f:54:4b:4a:31:f4:e9:69:1d:fd:35:0f:d5:ea:7f:01:3e:
         5e:e1:21:ea:ea:ac:2b:b9:d1:d2:ff:06:30:75:78:09:15:7a:
         73:50:1b:dc:44:e8:ae:57:2c:2b:bb:2d:0c:80:4f:8d:c8:c3:
         e7:97:81:53:b8:7a:34:04:18:5e:86:5a:5f:74:38:40:59:0c:
         72:a1:59:4f:ee:12:f6:00:a9:e6:84:28:c4:24:09:39:2c:b4:
         27:a8:8e:e0:04:e4:cc:62:1b:fa:d6:81:7a:94:3f:85:c4:fa:
         ce:a2:6b:14:ce:c7:f5:5a:8e:a7:47:6b:c9:a7:65:90:e3:02:
         ae:79:95:b5:f1:52:af:40:48:5c:71:57:9d:19:af:9e:e3:c2:
         97:9b:b8:47:64:ec:eb:06:6e:2f:3d:c6:b5:29:e5:18:df:e9:
         bf:d9:a1:1e:37:83:e7:0e:b2:c9:14:96:ab:53:73:43:82:e3:
         09:c5:f8:68:c4:2a:e2:38:af:41:2b:a4:e9:7b:4d:77:1d:ce:
         d8:87:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:29 2025 by rpki-client