Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          UGVpAQdikkfIYYJBk8v9yrsNufSxx0sq+3wsIPWjY1s=
Subject key identifier:   1C:60:00:1E:AB:BC:E1:A9:65:14:57:75:44:11:EC:DE:C9:92:B5:36
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       0197654D44C76E4E724E55F92847CC4DA77C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          11A1
Signing time:             Thu 12 Jun 2025 18:00:52 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:52 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:52 +0000
Files and hashes:         1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
                          2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
                          3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
                          4: StWwJRIdLVG2AMr41LeqT3VLiMY.roa (hash: eHQmJVkUkkZ8vtMtrgklqHvKfJQIUIWoCE0Hf2r79IE=)
                          5: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: 28gkawFh+TJDttkArP7Kd1Ipl+Ej6ulla9pKAP6kpis=)
                          6: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
                          7: xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa (hash: ntcfKusbnH6G9LFWYHB/n9gMG8BQt0xnq4XPHB5frGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4d:44:c7:6e:4e:72:4e:55:f9:28:47:cc:4d:a7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: Jun 12 18:00:52 2025 GMT
            Not After : Jun 13 18:00:52 2025 GMT
        Subject: CN=1c60001eabbce1a9651457754411ecdec992b536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:af:38:26:01:32:25:be:e3:f8:8e:27:ea:
                    df:12:80:5e:6e:39:60:31:3a:b0:7b:8f:34:5b:c0:
                    3d:93:78:5b:18:be:3d:8f:57:cd:85:d0:eb:fc:92:
                    12:58:be:e3:0f:b4:38:75:4f:a7:a6:71:da:92:56:
                    28:2b:17:a6:a1:84:8a:12:a4:08:23:46:e4:22:ff:
                    07:8e:0d:31:87:a0:1f:a4:dd:32:87:c3:56:58:56:
                    ec:36:f5:6d:35:90:12:79:01:ec:bc:d3:6f:a9:9e:
                    9b:8d:5f:36:52:31:ad:23:ed:53:12:6d:5f:b6:74:
                    44:4b:3f:8c:67:ea:67:2f:81:59:ab:51:dc:71:9b:
                    31:5f:25:2d:95:ac:28:15:6e:7f:4f:32:c9:63:80:
                    b3:9d:cf:1a:2e:ec:23:c3:59:d0:45:10:20:b2:5a:
                    b7:2f:73:57:ce:16:13:80:63:1d:97:24:40:70:48:
                    f5:0b:f8:c9:f0:62:6f:f7:62:9a:fb:10:0d:cf:cc:
                    a8:b0:c5:d2:3a:ac:4b:80:fd:3f:d3:36:af:c3:59:
                    b7:cd:1e:fc:d3:b2:4e:bf:40:4a:21:df:0d:a5:1c:
                    8f:a3:d2:2c:1e:2f:f3:03:47:31:72:ca:a1:53:9d:
                    17:5d:3d:0c:cf:f6:36:f2:af:a7:f6:9e:7b:a0:aa:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:60:00:1E:AB:BC:E1:A9:65:14:57:75:44:11:EC:DE:C9:92:B5:36
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:f4:78:ed:25:d0:14:a0:46:2d:bd:16:1f:53:8d:16:0a:
         19:ea:3c:f5:cc:aa:21:4f:c1:91:3e:96:58:53:15:7b:db:ae:
         1b:28:4e:53:99:15:be:2f:ea:e9:1f:c4:9b:ba:f1:47:23:f4:
         61:fe:ab:6d:b6:85:37:cb:ef:1e:45:ce:87:9b:15:7e:6e:e6:
         07:0c:33:aa:69:e9:32:93:ce:7a:7a:86:12:02:82:eb:9b:b1:
         36:7e:92:a0:7e:6b:a1:d4:3d:54:ce:6b:fd:dc:ff:f6:7b:5f:
         90:ae:6e:73:e3:3d:39:c5:36:66:53:ae:44:f5:db:31:c9:e0:
         ff:da:73:86:69:f0:9e:a2:60:52:8f:31:bc:00:2e:9c:9f:c6:
         ae:09:5d:56:cb:7c:83:69:b3:d5:43:a5:03:fe:d1:ac:4f:94:
         00:9e:60:b0:5e:ac:8d:69:6d:f9:5c:45:ad:bd:c0:03:6d:a6:
         b8:2e:b2:ce:4e:ea:3b:dd:e6:6d:d7:ff:12:30:2d:ea:cc:19:
         a3:ec:da:d0:f0:03:fa:bb:3f:a5:0b:ee:40:ac:44:c9:31:8d:
         09:de:43:e2:06:16:8f:14:77:49:7c:aa:c3:ac:1f:46:50:25:
         d4:29:24:86:61:bc:4f:3f:74:96:47:ce:1a:1e:cc:c8:16:5b:
         69:46:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:09:19 2025 by rpki-client