Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          4ST91LaOs9SwJoVxgjGjWg7xQsZCWbx9dgFf9f1akdU=
Subject key identifier:   2F:72:61:17:C3:34:46:BC:E3:77:E8:7D:E0:BB:4C:34:07:5E:B4:D2
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       01975046B2FF4E702E85A3B1E6E79117EEEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          1585
Signing time:             Sun 08 Jun 2025 16:01:40 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:40 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:40 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: 0kwccxx+B4oxlfdW4T7yDd+dH7ei23GUeua56CD5N9g=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:b2:ff:4e:70:2e:85:a3:b1:e6:e7:91:17:ee:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Jun  8 16:01:40 2025 GMT
            Not After : Jun  9 16:01:40 2025 GMT
        Subject: CN=2f726117c33446bce377e87de0bb4c34075eb4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:33:7f:51:17:0b:28:a8:5d:23:83:bc:f6:
                    62:b9:f3:72:90:9e:27:fc:f0:7e:76:50:5d:84:af:
                    48:f2:f6:62:6f:c9:7b:d1:65:4e:63:5a:59:63:bb:
                    fd:cc:c5:d2:6f:ae:d0:04:91:fa:76:f3:e1:bb:63:
                    3d:5d:c0:84:75:85:e3:18:c6:49:85:47:fb:40:82:
                    45:42:1b:53:00:ee:1a:03:6a:47:e0:f4:e3:00:f1:
                    fe:65:8a:b8:f8:f9:59:bd:ae:fc:a7:65:26:9d:93:
                    a8:5b:8d:0a:da:e4:0c:78:69:47:4d:c0:3d:66:c5:
                    89:fa:9f:bb:8c:c9:50:30:c6:83:14:be:18:ad:dd:
                    da:84:49:6a:3b:2e:aa:96:ae:8a:46:1c:dd:b0:c4:
                    50:f8:f4:ad:f0:97:69:27:cc:fb:26:d5:b0:67:91:
                    4e:bc:1a:ee:0d:43:93:2c:9c:12:1b:4d:92:69:cf:
                    b4:c0:50:01:2d:66:cc:ed:ba:71:84:15:de:51:0e:
                    18:af:33:bb:35:74:26:d5:fc:1f:ae:63:73:19:d9:
                    fa:17:48:68:51:97:c0:ce:83:b7:34:09:03:50:a2:
                    a8:f9:11:1a:5e:eb:ed:b0:e4:70:12:fc:d6:d3:e4:
                    96:ec:a5:03:93:d0:94:a2:da:ea:fe:e1:b0:9b:de:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:61:17:C3:34:46:BC:E3:77:E8:7D:E0:BB:4C:34:07:5E:B4:D2
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:df:52:04:49:c7:d8:23:9d:47:c5:4d:98:73:34:4d:b4:ed:
         64:42:56:62:7e:2c:34:bf:45:b1:05:88:b9:c0:2a:db:7b:05:
         bb:6f:da:4d:4c:52:43:a6:e0:1b:4e:3e:07:8b:97:99:fc:05:
         04:53:1e:c9:dc:09:dc:70:c5:5e:23:2a:11:b8:53:6f:c4:51:
         79:70:cf:66:af:2d:73:b9:a3:e0:ef:66:f4:36:6a:05:23:9c:
         b0:9d:0a:fd:e8:ad:bf:75:1c:8b:d6:5b:19:f1:f6:70:39:50:
         59:8e:8c:1d:37:39:fa:f6:ef:17:d1:57:c2:b1:97:19:f8:78:
         44:8b:bb:0f:a5:e8:e4:b5:66:65:05:9f:0c:87:02:76:fa:f0:
         af:4a:a8:49:f2:fc:0b:bb:c3:10:c2:c5:9b:2c:66:e0:ba:88:
         d4:07:bb:86:06:93:50:32:24:aa:3e:72:87:ed:5d:42:0a:53:
         f6:15:41:0d:31:05:87:94:39:cd:54:6c:0d:ae:70:39:5f:d7:
         d9:63:f2:53:65:cd:6d:b6:1d:e7:34:df:05:ea:b0:14:40:ef:
         f8:e1:82:25:26:6b:f2:1d:45:d8:f5:04:a4:46:e2:99:c6:cb:
         93:be:12:f6:62:40:b4:d2:0f:ba:10:44:98:81:df:f5:a4:1c:
         90:c1:60:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:19:26 2025 by rpki-client