Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
File:                     jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft (raw, json)
Hash identifier:          VyMd6UI9ueoElL15+APNIkEKdpA1MZYMUZX7QF2BVP4=
Subject key identifier:   B7:A7:1B:07:0D:EE:80:15:70:4F:B2:36:6C:B6:1C:39:1C:A0:EB:18
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Certificate issuer:       /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial:       01974AE8B033B1CC88D54864857BA05A36FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
Manifest number:          06E6
Signing time:             Sat 07 Jun 2025 15:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:52 +0000
Files and hashes:         1: jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl (hash: Lrsa5wGFrVmbj0U6ojCQw7ioG+AJv6kRUYNs5rmHo38=)
                          2: sMrQzs33rrsyMFOFMFTjCINTzTQ.roa (hash: M0Ho0S0WzI5DOHL0C5sQ6HcQ5teNM3kvhCzMJa29/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:b0:33:b1:cc:88:d5:48:64:85:7b:a0:5a:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
        Validity
            Not Before: Jun  7 15:00:52 2025 GMT
            Not After : Jun  8 15:00:52 2025 GMT
        Subject: CN=b7a71b070dee8015704fb2366cb61c391ca0eb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:2a:a7:1f:76:27:40:33:df:9d:f8:36:83:
                    29:fe:d0:a8:55:7f:15:e5:cc:63:f3:f5:67:1a:75:
                    68:b8:bd:6c:e2:54:52:4f:0c:af:2a:ec:db:69:f6:
                    8f:0c:1f:68:4c:34:fa:10:ba:59:43:d6:ed:f2:d4:
                    c2:b2:7b:a4:08:d3:1d:9c:c8:4d:c9:cc:f8:55:78:
                    3f:30:4c:01:b4:1c:8a:39:71:c1:99:5a:c1:3b:60:
                    01:d5:8a:56:7d:52:d6:57:e7:c8:77:3f:3f:4c:27:
                    18:bf:ed:5a:6b:a9:8d:28:56:2a:df:4b:52:a9:a3:
                    2b:d6:2f:6e:37:df:5e:87:b8:ca:0f:0e:3d:a6:e1:
                    21:7c:e4:16:60:d3:06:b4:0b:fc:fe:fa:e6:ee:a6:
                    9e:75:65:82:51:d9:1b:c9:ed:0a:b5:72:5c:38:76:
                    b7:0f:43:b7:d7:8b:fd:ef:d4:36:78:39:dc:c8:a4:
                    8a:ed:d2:27:42:f3:ab:2c:8d:10:54:7d:a7:da:24:
                    3d:51:4b:1e:a8:22:e1:10:70:b8:b5:c5:19:c4:0a:
                    78:c6:85:c9:68:c0:80:79:c5:cd:ca:66:08:24:12:
                    20:55:58:f0:85:21:a6:91:90:14:0a:b8:ec:30:3d:
                    96:aa:de:fe:76:7d:76:92:b3:15:51:ee:21:4a:9a:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A7:1B:07:0D:EE:80:15:70:4F:B2:36:6C:B6:1C:39:1C:A0:EB:18
            X509v3 Authority Key Identifier:
                keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:d8:23:95:f8:0b:00:f3:64:9d:94:a6:e1:8b:4b:ef:ba:
         fd:09:54:46:03:31:0d:b4:83:3e:bf:09:03:04:e5:68:7c:4a:
         af:d2:12:e5:4c:10:e6:87:66:69:33:56:b6:d9:97:39:07:54:
         95:cd:3b:7b:44:16:4a:ad:2f:11:b4:27:97:2e:15:3d:a4:1f:
         f3:d8:37:b0:b2:0d:26:cc:1c:ba:a2:6b:0d:80:79:16:56:e5:
         f8:74:e6:d4:59:14:92:f3:d6:99:d5:03:56:4b:66:58:3e:f6:
         f8:5b:70:ba:89:37:27:61:b7:ea:43:53:92:d1:b0:f2:3a:b5:
         84:0e:48:9e:aa:fe:ca:0d:30:fb:4b:97:cc:f2:44:70:41:30:
         30:55:87:1c:39:a7:04:d7:e4:a2:95:d5:3c:0b:8f:48:06:58:
         d5:c7:e0:17:38:f9:11:a4:ab:4a:6f:88:42:96:94:e3:c6:af:
         fe:1e:f9:a9:b5:67:d4:a7:81:6b:8f:8b:64:9a:56:17:3b:bc:
         7e:da:7a:38:e4:37:89:a2:ce:74:76:f8:9a:44:4d:42:99:c1:
         82:77:ac:0d:52:55:3f:c3:32:68:d6:5d:c1:b6:92:79:7b:fc:
         37:5c:95:cd:ca:e3:11:1d:da:cc:78:18:ff:bf:8b:8c:7d:4c:
         4c:a6:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:03 2025 by rpki-client