Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File:                     jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier:          vSM9h/XsVQILLsaTcuWdZg0INIXk8o2SvAEP4h2HWl4=
Subject key identifier:   84:90:DA:38:B9:EE:E3:0E:60:95:78:22:8F:C4:EF:46:79:A2:0B:18
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer:       /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial:       01974441D75FFB035B922AF89345FF003841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number:          016E
Signing time:             Fri 06 Jun 2025 08:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 08:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 08:00:55 +0000
Files and hashes:         1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
                          2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: NfLGdVESeK1rV/a//oCvukYHG5jESJBNJtF8PMTf0gE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:44:41:d7:5f:fb:03:5b:92:2a:f8:93:45:ff:00:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
        Validity
            Not Before: Jun  6 08:00:55 2025 GMT
            Not After : Jun  7 08:00:55 2025 GMT
        Subject: CN=8490da38b9eee30e609578228fc4ef4679a20b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:03:6f:5c:e7:15:6f:07:f5:e2:12:ae:bd:
                    97:21:d8:0f:45:98:86:83:01:61:00:62:e5:fa:5a:
                    90:7a:1f:3c:7c:56:4f:1d:c7:66:89:c3:09:46:b1:
                    9b:b8:b2:0c:ab:26:3c:23:14:25:c7:40:76:e5:46:
                    18:ff:82:aa:1e:8b:5b:f8:ae:8e:2a:74:11:32:55:
                    4b:91:be:0f:28:e1:a1:8c:7e:82:a6:f5:2d:03:05:
                    39:03:4f:3b:fe:fa:44:75:c1:38:5b:e7:da:52:a6:
                    52:77:82:10:70:48:c4:e1:a6:4a:b3:11:d7:0e:b0:
                    19:c9:ff:48:98:69:c2:e4:ef:77:3c:db:d1:50:61:
                    50:7d:77:f7:f7:ee:24:31:b0:06:f6:3f:eb:b6:fc:
                    71:c0:bf:3b:c4:a3:aa:1c:8c:d0:be:49:bc:c5:03:
                    71:ea:b8:54:b3:09:8a:f7:b9:76:0f:09:55:99:6d:
                    75:a4:b4:05:20:e1:24:45:1b:ad:ef:57:f3:d5:38:
                    c9:b8:96:81:46:dd:9e:fd:89:84:17:d2:65:9b:71:
                    3d:05:d7:29:3b:a7:28:0e:77:ba:8f:c3:0d:23:1b:
                    e9:89:43:dd:59:c2:15:c3:51:52:38:39:3c:bf:71:
                    a8:a2:e8:64:f1:02:b2:4c:2b:b4:b0:66:e0:e8:39:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:90:DA:38:B9:EE:E3:0E:60:95:78:22:8F:C4:EF:46:79:A2:0B:18
            X509v3 Authority Key Identifier:
                keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:f6:78:73:8a:7b:10:25:aa:f9:80:c4:9a:9a:c5:56:48:
         4a:06:87:62:c0:84:44:25:de:bf:3a:4e:d9:2f:e0:bb:3a:ba:
         ae:d4:3d:44:ad:4e:6f:6d:97:c0:f4:1f:4b:37:69:7b:06:71:
         8c:6a:42:92:d5:f5:9d:15:93:6d:e6:47:f9:ab:f3:a1:33:08:
         50:b5:d2:f0:30:8f:2d:e9:59:2b:89:b5:5d:10:0e:52:8f:64:
         12:50:f6:10:2f:bd:23:30:43:25:1e:34:82:6c:22:4b:a9:db:
         17:a5:44:a5:8f:28:7f:82:fb:56:aa:77:05:f3:99:b5:a8:34:
         ea:ff:4c:66:d8:56:7e:b4:82:8b:b0:13:60:e7:cf:8e:a8:d7:
         84:e7:1a:f5:f0:77:14:ec:a7:16:94:37:b9:d8:d2:84:0a:f7:
         76:3f:c3:ce:d6:55:8b:27:cf:cc:46:e8:7f:70:20:a6:b2:eb:
         26:6c:37:5e:4d:27:65:4c:75:bb:e1:2c:7c:c5:75:76:04:a9:
         08:5c:f8:3c:58:0e:c3:9c:fe:eb:7d:3e:e2:96:57:e8:a7:46:
         bc:36:f5:23:ae:cf:f3:11:0b:81:04:6f:95:dd:af:7f:55:15:
         de:d7:50:11:d7:7f:6a:81:52:80:7f:82:d3:1d:da:8e:ef:37:
         97:cd:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:01:43 2025 by rpki-client