Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File:                     JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier:          eNH+2v4sqpEbJs2L88Ar54F6JA/bmY9tt/JID/fuOSw=
Subject key identifier:   0B:9B:58:22:95:7A:2E:2F:A0:A4:1A:59:4F:3D:42:45:DA:EF:04:56
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       01974DE9745C697E764E789139F29534F8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number:          0DA9
Signing time:             Sun 08 Jun 2025 05:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:34 +0000
Files and hashes:         1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: AW+tgbEsPkCFZ0gHbkqNsfiZejiN22mZ76MpOnZHEqA=)
                          2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:74:5c:69:7e:76:4e:78:91:39:f2:95:34:f8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Jun  8 05:00:34 2025 GMT
            Not After : Jun  9 05:00:34 2025 GMT
        Subject: CN=0b9b5822957a2e2fa0a41a594f3d4245daef0456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:a3:c2:d6:69:18:a3:d2:86:cf:23:b8:9b:
                    ad:42:08:86:3d:58:31:a4:80:a9:55:be:e6:20:2c:
                    98:11:ad:27:f8:6e:5a:b1:03:78:ac:58:0a:2b:c1:
                    fa:11:11:68:2b:ac:ee:4d:a8:5b:fb:be:7f:14:3a:
                    8f:b1:ea:53:14:dd:99:a4:0b:6a:42:69:64:17:a5:
                    24:ac:55:fd:8f:c8:21:13:45:7a:f9:a7:47:d8:dd:
                    b9:02:8c:15:46:b5:64:3b:5c:85:c7:b8:eb:da:d1:
                    9b:d4:0b:49:b2:da:e6:42:9a:70:a4:5c:05:89:c3:
                    ab:ae:c3:31:c4:21:da:91:09:c9:33:1e:00:e7:ac:
                    6a:70:90:e3:78:34:29:36:62:55:2a:86:03:91:6f:
                    e9:05:17:0c:37:37:c4:f9:24:24:dd:98:b9:0f:e8:
                    34:cb:ac:00:d8:f8:ba:5c:78:e6:59:fc:55:e1:83:
                    7b:39:00:77:50:62:ef:d5:53:27:b2:7f:c9:d2:7c:
                    75:80:d6:1b:e5:96:0a:2d:3c:aa:c9:e0:fe:cc:8c:
                    9e:db:94:4d:03:95:26:74:df:28:15:ab:27:0b:7a:
                    5f:2d:aa:85:3b:9c:5d:2d:a3:30:2b:0f:dd:28:e2:
                    f0:b9:c6:c9:49:89:af:a3:de:23:d3:6c:41:73:bf:
                    a8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:58:22:95:7A:2E:2F:A0:A4:1A:59:4F:3D:42:45:DA:EF:04:56
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:31:2a:98:ba:fc:7a:e5:35:fa:c7:f9:e4:0d:15:86:21:f6:
         08:75:af:e8:58:95:27:62:21:43:7f:cf:4a:41:bd:1c:f4:b8:
         68:ef:9e:38:59:9b:fe:90:74:6d:e2:59:b6:40:15:93:66:a8:
         38:55:ba:9c:21:76:cb:8f:d8:b3:fa:73:66:b8:6c:1c:89:32:
         54:9c:1b:21:88:97:4d:c4:1c:67:00:08:fa:63:dc:eb:5c:4b:
         11:29:ed:d0:50:7f:2d:eb:97:1f:a6:ba:64:7f:30:62:fe:cb:
         7d:38:8e:d6:0c:96:08:34:a7:1d:39:09:f1:01:11:36:68:67:
         2a:5d:4b:1a:e4:96:7a:ed:83:04:34:f3:cb:38:17:40:43:7d:
         2d:09:a5:18:ab:0b:80:2d:4a:5c:45:18:a4:f4:9b:6b:e0:a0:
         6b:d0:af:50:18:1b:0a:da:f6:34:ab:3b:6d:97:57:ae:8d:a8:
         43:06:ae:69:51:39:39:31:f6:c1:f9:32:fc:bf:b0:8a:99:60:
         bd:1c:40:bb:f7:4c:c1:89:57:6d:25:26:bc:2c:8c:d8:c2:95:
         1d:fd:21:af:30:cb:7f:9f:1a:40:b0:9d:16:b8:a6:4d:66:a3:
         08:47:1d:79:63:c1:ef:86:bf:13:45:ce:a1:ed:e3:84:e9:7d:
         5e:37:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:49 2025 by rpki-client