Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File:                     JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier:          GKDTxztWP3EVuLf6cUT1iudJwcZVSV9k4FM8QMLFTyI=
Subject key identifier:   48:69:0D:AC:33:31:BD:1B:1C:72:34:8B:1D:B8:89:E7:ED:04:EF:40
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer:       /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial:       01974E573092F0117808662BA2722053F5E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number:          1235
Signing time:             Sun 08 Jun 2025 07:00:26 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:26 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:26 +0000
Files and hashes:         1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
                          2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: 3hYATNdAJO0fNIbdrhZLXtK5KunnuSTOZTMPhnO2EVk=)
                          3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
                          4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:30:92:f0:11:78:08:66:2b:a2:72:20:53:f5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
        Validity
            Not Before: Jun  8 07:00:26 2025 GMT
            Not After : Jun  9 07:00:26 2025 GMT
        Subject: CN=48690dac3331bd1b1c72348b1db889e7ed04ef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:1b:95:6a:d0:8c:23:66:82:27:d0:b7:7f:
                    2a:9f:88:4e:5d:26:e3:43:32:54:b2:f9:10:f9:d2:
                    64:80:b7:01:55:2c:e2:95:47:d3:c3:fe:ff:d4:57:
                    6e:4a:17:19:36:68:dc:0f:ba:99:98:0f:ae:d9:ca:
                    88:12:1c:e7:de:e5:c8:99:6e:68:fc:af:f0:81:47:
                    7b:ca:80:27:b2:c2:cd:49:bb:93:72:ad:75:21:03:
                    9a:8b:9b:b1:78:77:db:36:88:f4:5a:3b:f4:42:09:
                    f7:9e:31:6c:ec:7d:bb:fa:70:ab:4b:2a:ac:49:f5:
                    05:5c:7b:cd:7c:e6:73:78:f1:1b:a5:30:04:31:48:
                    6a:d2:73:0c:5b:33:c2:9b:b3:6b:d6:7a:8f:89:9b:
                    74:b6:ee:60:b0:42:75:63:56:67:9b:91:23:97:07:
                    08:aa:ec:e0:d8:fc:37:69:1f:24:e6:23:d6:a5:6b:
                    67:8d:a7:6b:5a:90:cc:11:dc:bd:6e:64:e0:03:73:
                    08:cb:c8:b3:57:01:ae:af:24:84:60:4d:f5:c5:37:
                    c3:8c:17:92:85:e9:0d:c3:90:d0:98:d5:d5:c6:30:
                    50:f2:7f:70:79:ad:63:a0:35:b0:e5:0d:d2:18:94:
                    4c:bb:21:f2:03:7c:7f:7f:90:dc:ca:b3:ec:38:5d:
                    41:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:69:0D:AC:33:31:BD:1B:1C:72:34:8B:1D:B8:89:E7:ED:04:EF:40
            X509v3 Authority Key Identifier:
                keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:be:7e:7f:4c:41:a4:2f:39:e6:61:71:c0:e3:ee:e9:e5:
         6b:ed:50:0a:89:02:dd:1a:8e:54:43:78:41:43:67:83:55:f1:
         e5:3e:c8:00:b3:0c:0c:9c:bd:46:a6:8f:95:a4:8b:33:6b:00:
         2b:e3:c4:bf:2d:c2:df:be:f8:77:bd:c4:0e:b3:2a:83:e4:07:
         db:77:b7:4c:6e:3c:54:e2:02:95:a1:9f:c0:13:dc:7e:3a:f0:
         8c:fe:ef:e4:47:b2:d5:19:79:a7:f6:de:c1:62:4e:a8:c0:fe:
         10:fb:e0:c4:d4:ec:ed:9d:50:b7:41:88:ac:17:93:14:c3:a4:
         a1:cb:2c:97:52:cd:94:d2:ba:cd:1f:31:3f:a5:10:f2:a3:21:
         ab:64:04:2e:0f:51:ab:9b:68:ee:88:cf:92:a4:24:8a:6d:49:
         22:aa:d6:29:c3:3a:26:ae:bd:5c:8d:50:8b:1d:6a:bb:c2:d5:
         b9:2f:06:d3:de:0f:bc:53:fa:fa:bf:56:d2:e3:18:13:da:b1:
         35:d0:81:29:ff:0b:e0:f0:3e:9d:c0:d7:f5:04:82:ac:a4:fb:
         13:74:8f:8a:01:2b:c6:89:5b:3e:bf:a5:fb:2c:23:05:be:8d:
         55:af:70:98:f1:47:48:4c:e9:66:2b:97:d3:2a:98:e8:4d:38:
         81:d3:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:20:45 2025 by rpki-client