Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          K9ZN8zpNy2yqYxrFf8b1b8JqYhKobIYl8ThFV4V7KYc=
Subject key identifier:   FB:2F:97:39:1C:66:F0:41:DB:F8:6B:53:00:C3:50:9F:E7:E6:80:90
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       01974DB2A2306F3787CD8B46D5A29387321C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0A27
Signing time:             Sun 08 Jun 2025 04:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:41 +0000
Files and hashes:         1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
                          2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: p8mBrN/eAi4jjAy5yFvfyX8qphaTkTfq7jpI2idD0ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:a2:30:6f:37:87:cd:8b:46:d5:a2:93:87:32:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Jun  8 04:00:41 2025 GMT
            Not After : Jun  9 04:00:41 2025 GMT
        Subject: CN=fb2f97391c66f041dbf86b5300c3509fe7e68090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:6a:46:2f:d7:83:09:13:a7:d3:3e:70:3a:
                    8e:a0:83:0a:7e:14:bc:07:b4:16:ff:02:e3:3c:05:
                    63:35:22:1e:55:6c:60:6e:27:79:c8:2c:ee:3b:b2:
                    ff:1e:77:9e:c2:19:27:30:92:bd:33:ce:2a:b5:a0:
                    ab:8e:d9:00:74:34:eb:94:a9:32:3c:fc:14:93:ca:
                    ef:71:13:8e:df:aa:2e:5f:8b:b0:c9:42:81:80:c4:
                    b9:7c:a7:72:e0:2e:db:ba:f9:07:78:ff:e7:2e:8d:
                    91:1d:a1:e5:56:c0:c5:88:7b:f0:de:e8:9b:de:de:
                    45:44:96:50:ef:83:96:b9:c2:38:b1:62:92:ea:20:
                    79:58:11:68:61:15:18:f4:f9:89:3a:e5:ae:0e:cc:
                    4e:67:f7:f3:69:a8:f1:9b:bc:78:a5:a3:50:e0:c6:
                    df:8f:9e:f4:2a:01:82:5f:55:56:c4:24:08:45:2f:
                    a2:39:0a:ac:bf:e1:df:0a:fb:e3:3e:8d:c1:35:be:
                    4e:00:89:6e:33:5a:30:5c:e3:a7:23:23:4b:c7:f3:
                    86:0b:57:f7:98:7a:3a:48:3c:17:1e:ee:b8:1b:d8:
                    28:7e:a3:02:8b:14:d4:92:27:24:a0:83:08:24:91:
                    0a:78:9e:e0:8c:9f:32:df:d2:a7:bd:b5:43:ab:f6:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2F:97:39:1C:66:F0:41:DB:F8:6B:53:00:C3:50:9F:E7:E6:80:90
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:4f:bd:a2:8d:4d:dc:29:b0:46:42:54:4b:51:9b:bc:22:
         b6:15:f5:6e:37:35:db:ff:99:fe:a0:65:79:72:18:d4:11:43:
         c6:bc:fd:6a:21:40:9f:d1:56:a7:61:b1:1d:0c:3b:55:90:1e:
         61:bc:f7:bc:55:66:a6:30:77:82:37:5f:20:89:b9:5d:23:7e:
         84:70:48:c7:36:42:7a:ae:0b:0f:41:0f:7a:1e:01:37:a2:22:
         31:b9:6e:b7:aa:ce:09:cb:a6:77:17:d8:3f:ca:ee:6b:24:e7:
         18:51:24:5c:c7:17:55:9a:96:2f:0a:23:d5:8b:9f:e1:57:79:
         76:41:d9:14:a0:d4:4f:5f:4f:66:d4:c6:b0:e2:78:3c:5c:7d:
         9a:2e:79:94:d4:53:0b:bc:f4:15:b1:1e:e4:7f:86:f7:d5:51:
         d9:fb:0d:02:d3:98:4a:f1:1f:ab:42:28:3c:9b:33:29:ab:06:
         71:2a:a1:c9:7a:bb:31:31:22:e2:a3:d6:7b:e4:61:52:83:b4:
         3b:50:df:37:b4:32:a4:cf:80:e4:af:fd:37:12:8f:05:76:a7:
         5b:e5:82:a2:ff:7d:00:28:4f:09:bf:2f:04:ca:87:7b:78:e5:
         b1:12:57:3f:75:5a:a6:67:b9:67:f0:fb:2b:a6:64:41:47:8f:
         40:a0:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:21 2025 by rpki-client