Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
File:                     JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft (raw, json)
Hash identifier:          9zbdO/1SQ+t7qUhO03k65dZUoyR2AFQtF9Lcs3yj6uY=
Subject key identifier:   4A:FB:CE:76:45:72:58:08:FF:4F:ED:E4:C3:22:E3:D0:27:45:93:A1
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Certificate issuer:       /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial:       01974CD6F96AB6298A3A85A9699482A279A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 00:00:46 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:46 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:46 +0000
Files and hashes:         1: JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl (hash: r/aJX53FihlXk3xddoiVxDkU8QWKR0xhSByfoBAxhXo=)
                          2: gMRvTZlzAH8OSJTttCNJ8Cyj7p4.roa (hash: p+544aG9xmj27ntfAfl2YzT4JNjkf/4dF3LHwwe9mf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:f9:6a:b6:29:8a:3a:85:a9:69:94:82:a2:79:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
        Validity
            Not Before: Jun  8 00:00:46 2025 GMT
            Not After : Jun  9 00:00:46 2025 GMT
        Subject: CN=4afbce7645725808ff4fede4c322e3d0274593a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:e6:8b:cc:72:e5:0e:8f:a8:9c:a7:48:60:
                    06:15:30:93:c7:7a:6a:28:04:b6:54:ad:d5:8e:69:
                    39:7c:31:fb:db:be:78:3b:22:3a:f7:55:8b:37:d4:
                    d8:8f:93:45:ee:be:48:40:38:57:6b:73:d4:c8:3d:
                    16:1a:ff:ec:91:65:dd:d0:2e:50:16:33:26:36:63:
                    0c:09:e3:f8:a9:c0:91:20:d9:d1:5a:ca:07:42:dd:
                    b7:b7:18:97:dc:d1:d3:07:3d:6b:63:78:20:38:c9:
                    9f:c5:b7:b4:44:68:e9:85:e0:d5:75:2f:c6:25:d1:
                    25:27:f4:a8:0e:a4:77:ae:2a:7f:97:a9:14:7a:f1:
                    9f:60:e4:f8:59:83:4f:35:a0:25:18:32:fc:72:d0:
                    9c:32:81:76:a4:0a:93:d4:7b:0e:a2:9d:a5:b7:e2:
                    0e:99:90:c9:e2:dc:89:53:53:a7:8b:4d:15:0d:a9:
                    db:4d:9a:a4:ec:f0:11:2c:15:7a:bc:78:aa:6e:c7:
                    a4:fb:a9:f2:5c:eb:e3:b1:93:fd:03:d4:c8:3e:a9:
                    ff:40:09:17:81:b5:c8:a8:85:73:d3:4e:2e:2a:42:
                    b2:ac:67:3a:b6:2e:5a:df:b1:f1:02:62:87:90:a2:
                    40:4c:fa:bb:64:64:56:0e:91:00:24:4d:58:68:0f:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FB:CE:76:45:72:58:08:FF:4F:ED:E4:C3:22:E3:D0:27:45:93:A1
            X509v3 Authority Key Identifier:
                keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:69:16:d1:7a:38:22:5d:71:17:60:64:ec:30:e4:c4:ba:ff:
         82:d0:bc:3e:32:0a:e8:26:46:f0:81:15:6d:00:60:86:e0:b4:
         67:70:7d:d6:99:a4:44:d1:88:27:c4:12:ad:5d:3e:0f:6d:98:
         f1:69:07:57:16:b3:58:07:aa:ec:9d:2f:53:cc:46:49:8a:ba:
         a0:0d:4f:c8:95:94:57:70:ba:a9:bf:e2:fc:3e:0d:27:af:f0:
         20:35:e3:0c:b9:5f:47:66:22:9f:57:57:dd:46:07:0e:09:27:
         bb:ba:24:0a:3c:a9:25:ac:a0:2e:c9:6e:7f:a9:3f:f2:e2:2c:
         9a:b5:72:39:c3:e1:57:53:56:13:7e:53:25:ae:d1:8b:a1:40:
         24:2b:f4:ef:87:fe:6d:d3:52:91:61:4b:0f:8c:79:bb:32:b7:
         10:fa:63:35:f7:1b:6a:5d:a4:87:d2:10:af:34:37:03:ae:88:
         69:80:08:5e:6f:f9:17:e4:e9:5c:aa:42:7c:dc:2c:88:80:3f:
         4a:78:54:67:77:c5:fb:f0:84:9f:c6:9a:c0:05:09:52:13:72:
         ba:53:cf:f3:08:25:42:f5:b6:da:34:98:a9:e6:eb:93:70:4e:
         cf:88:5d:06:c8:ad:0e:7f:1d:ef:f6:4c:83:56:6d:ad:6a:00:
         89:1c:b6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:26:11 2025 by rpki-client