Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          9wzL6jrbok2BGn+MBJv9MSP2lqPZdP/89fEwg+/pHVE=
Subject key identifier:   32:EE:3E:F5:47:82:54:F0:FC:60:4C:D6:F0:CD:7B:C5:98:1F:EB:F2
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       0197485531B9F4CF428EF84D42E3D533A67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          0E1A
Signing time:             Sat 07 Jun 2025 03:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:32 +0000
Files and hashes:         1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: FMqv3SP2ebqplKDtL/kf99mABCRm/H0cukyQNAeeS1M=)
                          2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:31:b9:f4:cf:42:8e:f8:4d:42:e3:d5:33:a6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Jun  7 03:00:32 2025 GMT
            Not After : Jun  8 03:00:32 2025 GMT
        Subject: CN=32ee3ef5478254f0fc604cd6f0cd7bc5981febf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:f2:93:9b:0c:c3:4d:d6:6c:25:7c:f5:37:
                    e5:b9:d6:55:f7:c3:91:63:db:d7:c9:c0:b6:a4:20:
                    20:d5:24:55:cb:1a:54:fa:51:ce:04:67:1a:c0:f1:
                    0e:4b:65:9c:d1:bf:d1:37:67:d1:39:fa:8d:70:28:
                    1a:2a:7b:6a:11:35:aa:f4:af:13:ea:f3:b9:7f:c3:
                    1c:76:60:8a:50:68:55:1c:cb:2a:a6:01:27:7f:91:
                    95:03:f2:5a:f2:ab:ee:5c:24:25:de:af:98:ed:63:
                    2d:7b:4b:21:b6:ec:64:f2:db:f1:76:f1:ec:f1:9d:
                    f0:4c:6a:fb:6c:91:e1:23:e4:67:2b:2e:45:cf:7f:
                    84:b0:32:9c:dc:8e:2b:59:98:7d:7c:3d:ff:13:ea:
                    72:f4:cb:f6:ed:9b:c5:6c:4d:fb:7c:27:e0:a4:ae:
                    2a:08:2d:5a:99:d8:84:d0:57:c8:c1:7e:7a:21:82:
                    98:f4:97:97:b4:dc:52:51:73:9f:65:d2:f3:22:79:
                    b8:26:e8:e2:79:64:95:a4:a9:5b:c0:3e:01:45:8e:
                    cf:25:cf:31:6d:b2:9d:00:e1:08:60:8e:60:05:14:
                    b7:8d:0e:08:fd:45:e6:ca:8a:79:a2:ea:8b:11:bf:
                    16:cf:19:12:34:50:07:3b:73:69:76:3c:6f:3a:f8:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EE:3E:F5:47:82:54:F0:FC:60:4C:D6:F0:CD:7B:C5:98:1F:EB:F2
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:e9:49:8a:cc:1a:c4:70:c9:cf:5a:fd:62:15:5a:61:06:
         44:8f:82:c3:ac:74:15:e2:33:d2:07:de:6d:ee:b4:6f:53:d3:
         28:d9:3e:9b:d8:79:3e:1f:cb:98:96:01:e3:45:1d:b1:03:97:
         22:dd:66:4f:bb:11:2e:a7:22:2e:62:e9:63:f1:d9:62:cc:7f:
         b7:cb:8d:4d:98:93:2f:a0:d9:e5:07:04:76:5f:ee:52:83:5f:
         0e:92:89:85:af:44:c4:93:ec:81:5e:a1:51:8b:48:b4:68:1e:
         74:11:a2:b5:9c:fd:92:f2:d3:5e:c4:85:d2:83:06:4b:63:57:
         fc:39:f7:25:bc:36:63:48:01:54:e7:b7:35:67:d8:46:dd:3d:
         d3:76:cf:f7:aa:5d:4d:1f:b7:fd:9d:6e:f1:55:ce:f5:9d:ef:
         dd:bf:de:36:ee:91:b7:0b:30:32:02:e9:7a:ef:5b:92:b2:9e:
         6f:e3:35:ce:e9:20:51:a1:67:26:f8:81:dc:33:5a:66:67:f0:
         49:46:5b:4b:18:0f:c7:bb:44:eb:ab:a0:3b:be:13:1b:ba:26:
         ba:c5:4b:0d:a3:a2:cb:4d:33:3e:73:a1:d4:08:f8:47:4b:65:
         d8:99:de:ec:1b:43:da:f2:e9:0f:60:23:1a:c6:26:f2:e9:ca:
         ec:41:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:12:17 2025 by rpki-client