Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          xdM/ZvblSgsy//8WQn5+boDRkGd+GWvTJABCYA+CxTk=
Subject key identifier:   28:4C:F9:4D:E5:22:C2:20:E6:B1:8F:48:F8:33:25:8A:84:BD:07:9B
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       0197470BC542E9D66533A6215BD25FBB09F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          0656
Signing time:             Fri 06 Jun 2025 21:00:43 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:43 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:43 +0000
Files and hashes:         1: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: EjSHP1XB+cLoCKwMoQtXxat05DV+HmMFC5/nBTDUnuI=)
                          3: rDlkyigziSazpq7KkBehs1Ktw-g.roa (hash: 0blcMDi8SQKGoP7zdqimF2o0peaDeYPg+Ie2kFh43K4=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:c5:42:e9:d6:65:33:a6:21:5b:d2:5f:bb:09:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Jun  6 21:00:43 2025 GMT
            Not After : Jun  7 21:00:43 2025 GMT
        Subject: CN=284cf94de522c220e6b18f48f833258a84bd079b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:c2:b6:59:e4:ce:bb:d8:42:dc:1e:7c:3f:
                    50:c8:b2:40:ef:83:4f:f9:54:f3:86:5c:b6:ef:51:
                    27:f7:60:9f:f0:ef:c5:9e:ce:04:23:ac:a3:34:80:
                    99:55:d5:aa:ed:e3:7c:a0:f9:8e:48:a4:51:ac:ab:
                    80:45:98:06:63:03:8c:72:30:0c:ae:db:c8:4d:e2:
                    ff:b8:17:36:3b:2f:88:84:fd:28:d1:fa:e1:bc:1c:
                    bf:42:56:55:73:04:b8:f2:da:af:70:83:f3:7c:17:
                    6c:e5:dc:55:09:2c:3a:87:8a:b6:69:fa:ed:b0:bc:
                    43:27:f5:81:55:1f:b4:f8:5f:79:1a:08:07:be:c9:
                    fd:25:88:ec:ad:cd:61:00:32:99:93:eb:34:d3:1b:
                    5c:25:6a:93:9a:85:8e:46:59:d7:a4:52:41:e3:4c:
                    fc:e5:b7:97:17:0e:e9:37:0a:99:6e:62:cb:33:1d:
                    d7:ab:f7:df:ce:a9:9a:38:54:cc:3f:31:72:2f:e1:
                    32:a2:b2:c2:88:74:94:70:d1:d6:c0:1f:1d:e8:99:
                    a6:b2:62:39:cc:3a:0a:b6:81:cf:68:02:23:b9:c0:
                    21:24:78:ad:81:fd:1b:d6:ba:38:36:2c:77:d3:21:
                    ac:88:c3:10:16:1e:83:6c:cc:eb:72:d2:ea:d6:97:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4C:F9:4D:E5:22:C2:20:E6:B1:8F:48:F8:33:25:8A:84:BD:07:9B
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:1d:1f:11:e5:2b:58:79:59:5c:15:de:06:0e:b8:23:d0:62:
         8c:2a:be:9a:c0:ed:87:3a:74:f2:87:7d:f8:d7:d4:c7:6d:4d:
         c3:f7:51:35:6c:ff:09:48:2f:92:66:7f:34:07:d3:c5:df:08:
         60:11:38:f9:c2:dd:bd:6c:be:e0:24:11:e6:49:19:dd:aa:f4:
         13:94:58:35:7c:6f:dd:cc:e0:03:dd:15:7f:15:e8:6e:14:ba:
         1d:e6:cb:d1:9c:55:6d:2a:70:16:2d:22:e2:20:85:05:98:31:
         43:99:22:77:c5:46:73:f6:e7:15:d6:9b:c2:3d:8b:4d:24:bf:
         5c:c2:66:b3:20:b3:39:70:ca:2d:14:9a:20:5a:5b:f8:9f:c3:
         dc:27:52:1b:24:82:c5:62:b1:94:01:a7:bf:80:94:5f:e4:c9:
         9e:01:2e:64:e1:b9:5f:5e:34:c7:fa:98:94:25:f7:f4:9f:72:
         b4:1d:aa:ee:49:b1:42:0c:0a:6f:2a:2a:5e:2a:3d:4d:b2:9d:
         cb:10:62:12:d2:93:b5:30:51:b5:4e:0b:b3:e4:b8:0d:ae:18:
         3a:ca:f7:e0:91:3c:4b:bf:c8:7e:92:83:e8:6d:e4:d6:03:ff:
         91:6f:43:fa:0a:ea:9a:e2:55:f1:c5:7b:bb:c5:7d:6c:da:87:
         08:13:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:36 2025 by rpki-client