Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File:                     jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier:          wOrtLn9oQ8GlTDHvzn7gdIgMbtuTmNoZ2lR6pUnra+w=
Subject key identifier:   E7:77:3E:5F:EC:D9:21:B4:3F:6C:93:52:50:F7:D5:64:AE:39:EB:AE
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer:       /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial:       019748C2F7A2F9D594755F1493BF1BCF6C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number:          10B0
Signing time:             Sat 07 Jun 2025 05:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:26 +0000
Files and hashes:         1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: qdrZrxZM3HXHQFrQ2QFzTTWxeMlRFSNEP0TCE5JnXcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:f7:a2:f9:d5:94:75:5f:14:93:bf:1b:cf:6c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
        Validity
            Not Before: Jun  7 05:00:26 2025 GMT
            Not After : Jun  8 05:00:26 2025 GMT
        Subject: CN=e7773e5fecd921b43f6c935250f7d564ae39ebae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:de:f4:e5:1b:16:0e:a9:73:5e:b0:8c:a7:
                    f0:8c:ee:d6:1e:ef:30:f8:42:95:ff:e7:81:a7:ab:
                    15:b0:03:de:85:f0:cb:2a:27:bf:b4:51:83:3b:dd:
                    36:a5:54:ad:fa:9e:a2:dd:62:16:2f:29:b3:0a:8f:
                    4b:7e:53:c1:e3:41:7c:5a:42:53:2a:56:ac:4b:bb:
                    ec:af:21:2d:9a:c1:37:10:89:0a:f2:06:98:e8:42:
                    e8:ee:86:25:26:4a:83:6e:6e:24:e3:0a:c5:e8:79:
                    e7:44:95:57:ec:8f:34:14:4c:f1:0c:11:c1:a7:5e:
                    24:4b:0f:c2:bd:48:bb:b8:fe:f0:8f:13:64:ec:00:
                    c9:ff:44:2f:0c:92:78:05:34:3a:b0:73:46:3c:f6:
                    fc:c0:94:8c:4d:7d:b8:f5:78:4f:8b:5c:3f:60:34:
                    b4:15:d9:5d:28:90:bc:84:98:31:f6:2f:fd:b2:98:
                    f1:25:42:08:83:9f:64:a4:e3:8e:ca:d1:d3:47:c2:
                    f4:f9:21:17:fa:81:2e:71:4b:9c:a1:ca:03:de:48:
                    da:41:4f:cd:f9:26:fe:5f:8f:e7:e1:e2:fd:56:36:
                    cd:51:5f:7b:80:92:8e:2b:06:5d:ec:1e:e6:e8:9d:
                    ab:a4:c8:e2:f4:66:5b:95:0f:18:f5:43:1f:32:42:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:3E:5F:EC:D9:21:B4:3F:6C:93:52:50:F7:D5:64:AE:39:EB:AE
            X509v3 Authority Key Identifier:
                keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:94:15:5a:9c:8d:9c:41:a0:6b:53:87:87:cd:c0:d7:ec:8e:
         29:11:f8:c0:7b:c4:92:7c:0d:b3:ae:92:2c:49:4e:7e:49:34:
         f3:17:ce:70:a5:dc:4c:4a:8c:0e:16:d5:2d:2a:18:f3:4a:39:
         41:a9:2c:14:a8:ae:ef:6a:c6:49:7d:6b:2c:2f:c7:b7:a5:e1:
         0a:a0:21:40:bc:b7:d1:17:81:1d:20:74:f7:d5:b2:20:24:e0:
         b6:db:6d:fc:39:b4:17:27:07:7b:e6:02:5b:4f:02:66:4e:ce:
         7b:eb:55:91:f4:cf:96:6d:4b:15:91:f4:56:8f:33:a6:88:c2:
         0b:b0:34:b6:77:f3:02:57:bc:36:a2:19:0a:bf:0a:c4:be:39:
         66:ae:2f:d7:78:e9:3e:f9:9b:22:b4:db:7c:ef:c6:86:20:9e:
         73:55:c1:fa:72:c5:ac:cf:74:8a:8f:7a:08:79:0c:e7:0c:e5:
         06:e8:70:d0:b2:1e:21:31:ab:74:35:d7:e8:b4:38:55:49:d2:
         53:e6:6a:6b:eb:7a:c0:75:ff:9c:a8:15:11:de:a5:32:3c:bb:
         92:35:e9:aa:62:64:aa:7a:01:af:55:0c:5a:89:0d:9c:6c:d8:
         d2:db:76:fa:3a:e9:69:c8:12:0c:9f:29:59:0c:93:af:ae:31:
         e7:2e:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:34 2025 by rpki-client