Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File:                     JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier:          zgoJAagSdnqzVATZb1yypdhHV7Vnp67CaYdL9SjFq/E=
Subject key identifier:   AB:BF:AA:ED:73:67:9F:0A:5E:83:B2:67:23:CC:32:37:0E:A1:C8:E4
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer:       /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial:       01974B8D8A92F09E48E9DD9EF1C6627226C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number:          0C12
Signing time:             Sat 07 Jun 2025 18:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:56 +0000
Files and hashes:         1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
                          2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: OlcAFMAXOu9O6s00Kiyp7AeRWHjba8gDX5gLlWq6qF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:8a:92:f0:9e:48:e9:dd:9e:f1:c6:62:72:26:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
        Validity
            Not Before: Jun  7 18:00:56 2025 GMT
            Not After : Jun  8 18:00:56 2025 GMT
        Subject: CN=abbfaaed73679f0a5e83b26723cc32370ea1c8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:c3:ac:69:05:43:8a:5b:1d:4e:75:51:02:
                    2c:60:69:dd:04:bf:cd:92:0f:fd:38:f1:74:38:50:
                    86:e2:b2:8b:a9:f0:4d:ac:e8:4c:0f:d0:86:69:d5:
                    a9:87:f5:af:54:f9:b6:10:4c:85:35:83:26:5f:58:
                    c0:06:d9:c0:31:cb:69:ff:d7:82:4d:1c:ed:d0:6c:
                    87:9d:2c:da:17:1e:bb:56:dc:65:73:b7:2f:03:be:
                    a0:6b:99:e0:73:3d:1c:76:87:55:67:2d:fb:af:51:
                    fb:2f:f4:79:c6:0d:90:08:5f:01:a5:a1:4b:b5:24:
                    94:c2:79:94:3f:e1:a5:36:ff:c6:58:1e:35:3e:14:
                    b3:6e:35:5a:a8:47:90:2a:28:6e:ed:8e:dd:1e:43:
                    04:b2:48:00:12:58:43:ce:4d:02:4f:26:85:f4:c7:
                    f0:5e:e6:e2:0b:46:9a:53:c6:26:ca:25:95:d2:c6:
                    d1:08:4e:a0:74:69:ba:e8:41:72:b7:16:6d:2e:08:
                    f5:a3:d7:a2:e1:62:74:ef:20:f4:c9:ad:e9:2a:08:
                    87:2b:e1:fa:e9:c0:8b:23:08:3d:ba:1f:79:78:12:
                    d1:89:f6:85:29:4f:43:7f:cb:de:b8:74:94:a3:c5:
                    c1:68:9b:cb:fc:6c:89:bd:3f:6c:20:48:93:02:93:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BF:AA:ED:73:67:9F:0A:5E:83:B2:67:23:CC:32:37:0E:A1:C8:E4
            X509v3 Authority Key Identifier:
                keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:24:ef:4c:e2:e7:55:d9:6e:16:7a:36:d1:39:2b:96:77:
         fc:5a:ab:6b:51:a8:50:7d:42:20:dd:56:29:5a:97:65:72:88:
         44:9c:d5:90:8e:f4:18:1c:9a:08:e8:8f:25:f6:1a:fe:12:19:
         45:34:39:be:35:cf:04:c4:2a:bf:bd:a6:fb:ee:a6:12:d3:4e:
         07:8c:68:94:a4:c9:48:ec:5b:23:d9:f2:68:b7:7a:80:b6:0f:
         39:5d:02:a9:0c:48:6f:19:5a:89:85:f2:26:f4:4c:cf:ea:1c:
         5c:6d:8b:a5:9c:5a:09:c6:92:b5:70:d4:82:f0:67:ab:b9:15:
         b3:cf:a5:11:ce:50:5a:83:ba:52:85:fc:b4:79:cb:11:39:b0:
         01:de:3a:6e:6e:05:1c:a0:f1:ee:7a:f3:fe:9a:1e:fe:c5:2f:
         72:d4:7d:58:30:0c:b3:cc:c7:47:4a:c5:2b:0e:e2:6c:4c:3a:
         a7:3d:8e:04:5f:1f:7c:a5:f8:63:ee:05:f1:3d:33:ae:f5:b7:
         f9:1b:35:5a:36:6d:65:03:fa:82:09:0f:16:58:c7:61:9f:c0:
         de:44:59:9a:6c:95:27:88:76:a4:3b:12:09:d6:4a:9c:44:51:
         8c:49:e3:d7:c3:57:04:ff:1e:40:33:a3:61:e6:ee:f1:e8:b2:
         f4:23:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:58 2025 by rpki-client