Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File:                     jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier:          t5ihWLL+R4JDm9Mmj1AFptBLqSMKRibf6KEcjZTOCGM=
Subject key identifier:   F6:CB:CE:C7:C4:EE:59:3E:AC:45:4E:96:CA:C5:E8:67:8C:A5:A2:BB
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer:       /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial:       0197518FACD1E45CAEFD150F8BF41A2718EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number:          1213
Signing time:             Sun 08 Jun 2025 22:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 22:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 22:00:59 +0000
Files and hashes:         1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
                          2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: Twz7nGkjznPaeppx4MUl8pyfKpPKor/ct387FCXwc9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:ac:d1:e4:5c:ae:fd:15:0f:8b:f4:1a:27:18:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
        Validity
            Not Before: Jun  8 22:00:59 2025 GMT
            Not After : Jun  9 22:00:59 2025 GMT
        Subject: CN=f6cbcec7c4ee593eac454e96cac5e8678ca5a2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:db:21:1d:b7:bb:97:c3:1b:e6:eb:2c:a6:
                    8f:12:1b:fa:89:96:25:1d:60:c5:6e:db:50:3d:05:
                    9a:31:69:d0:e5:22:06:96:6b:de:11:d0:4e:7b:fd:
                    9d:1f:cd:53:b8:b1:63:9b:d8:df:5b:6c:ae:c2:2d:
                    11:e7:1a:8b:1a:87:60:78:25:99:75:0b:0c:ca:b1:
                    5a:65:39:81:e3:e5:67:59:1c:b1:22:22:00:ac:69:
                    38:fd:bc:95:3c:6e:e3:22:57:17:3e:37:b8:6e:b9:
                    67:ff:68:d5:c8:d0:c7:d2:2a:55:8d:47:09:7d:50:
                    a5:f5:ad:69:ac:a0:47:ea:fc:74:0c:e6:a5:39:25:
                    61:dd:eb:b9:f6:01:02:08:53:71:7b:c2:ae:96:a5:
                    a3:9d:b5:86:23:74:83:00:5a:2f:88:d7:33:99:ad:
                    dd:c1:f3:15:3d:a0:59:1b:22:ae:68:97:15:64:4a:
                    a3:44:20:80:c8:fb:5a:b8:c4:93:ce:20:88:4d:40:
                    05:15:b0:23:3a:43:6f:21:25:8e:8b:ab:01:6c:b0:
                    cd:cb:73:2a:ba:01:a1:90:59:6f:39:dd:d3:cc:d0:
                    68:d9:87:ed:3b:ad:70:08:76:54:bf:4f:fd:f5:9c:
                    ad:2c:ed:42:5b:d8:b3:d1:3c:10:ad:47:b8:62:96:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:CE:C7:C4:EE:59:3E:AC:45:4E:96:CA:C5:E8:67:8C:A5:A2:BB
            X509v3 Authority Key Identifier:
                keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:73:f4:10:d6:e3:d8:e3:55:41:e7:61:06:b0:20:36:13:
         4c:a6:12:43:79:c3:15:52:58:21:8d:f6:a8:f4:ab:3c:4d:3e:
         84:99:54:f1:7b:6b:7e:39:cf:f5:d9:ec:a4:1a:7e:35:40:66:
         85:b4:8a:56:5f:11:f9:76:78:83:c7:a4:5c:08:15:92:bf:08:
         e1:41:f2:89:bc:78:a7:9e:34:60:0f:52:0e:f4:d7:c9:2e:0e:
         9a:12:34:d0:8d:ae:54:47:58:85:74:33:ff:cf:67:e8:bf:24:
         28:48:b6:9f:c9:a1:18:55:4f:c9:97:94:19:b1:84:7b:94:b6:
         23:4d:bb:4c:bd:21:1b:ad:78:54:a6:81:24:67:14:40:f6:cd:
         43:da:a8:67:b3:50:16:cc:d8:f9:10:ad:17:ab:84:51:12:80:
         4d:3a:c6:f4:79:46:50:88:1c:17:9d:9f:71:29:5a:91:70:d2:
         cf:19:31:c3:b9:92:81:fe:72:ad:ad:39:92:2a:34:ca:d3:11:
         ab:a4:bd:a8:5f:09:ea:15:99:5a:cc:c4:19:17:b9:3e:07:0b:
         2d:cf:e6:dd:ef:ad:44:1c:7d:77:48:23:27:8f:53:b5:7f:e0:
         49:96:6c:a5:a5:b7:ef:f1:e2:04:a1:22:ff:cd:e7:33:2e:2a:
         45:2b:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:09:18 2025 by rpki-client