Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File:                     Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier:          4CSC4LBU9XfFjLOFZR3cRFfel2asb6xHSK+OHKRSC/Q=
Subject key identifier:   55:52:CA:71:E9:A3:A7:F5:BF:A8:40:53:CE:33:B5:01:40:D2:09:45
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       0197534725A2B9BCEAAF99E2A11F84566657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number:          1484
Signing time:             Mon 09 Jun 2025 06:01:01 +0000
Manifest this update:     Mon 09 Jun 2025 06:01:01 +0000
Manifest next update:     Tue 10 Jun 2025 06:01:01 +0000
Files and hashes:         1: 9fqGagQCaL9MHwqiYLgCAlKltnI.roa (hash: BoPMzB3MdLpYYYjTBd+oogzMIYiLuFwZJGpH1bZ5Vr0=)
                          2: GCtomsNTvimtD6w0xyjU2ZUFcjE.roa (hash: XJ7hu4TR2M0+QkNeH26j5olN/g4SK2uhya5ykeMaklA=)
                          3: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: 0PaYi5hRwB8xgjikmASYUgSk8gC/r0cfWjdeCUzwBRQ=)
                          4: LHSJXrq4fzboLah7C-gF4O-Krh4.roa (hash: dXC1M1f4xcsgjz8JdVvS5mt/3DkRXhiljl0W1UwisK8=)
                          5: Q6RmB3OAGm4Vjy2TH2zbAYpRCGQ.roa (hash: ZCXGsBStLuz3my4wp3w2URXBjzO0MBkzxRD9Thq+40A=)
                          6: Qi8od9-5X1sf48lKzwcNnNg6mHM.roa (hash: /syJMd1k0a2wLIgM5pfF31EnkGqqCBO2Z4W2CDpPvuA=)
                          7: Ufr2afGXnfRf4I0gb-jEiflvE4U.roa (hash: M+HA2yRnaGNn/L+MV9quoWf8gGEo+L0udQeBQZgiv0o=)
                          8: VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa (hash: UBuFnXhpXMmhVnBct5Az+Ev2H/iUBQnvBw+Z0vvL/Iw=)
                          9: a-UPHbc06elr_blSu9vS7q86SLw.roa (hash: 5vOUevzZOr+5szST6vxZMIM+U+1SeNXKPgwq9P6XW/E=)
                          10: whkZ_BkkFSHSkNjButU4XMY1DcA.roa (hash: Zk8kttrdhe59iQKDIw6twr0aGQmmu/VzqY2FZozR1Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:47:25:a2:b9:bc:ea:af:99:e2:a1:1f:84:56:66:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Jun  9 06:01:01 2025 GMT
            Not After : Jun 10 06:01:01 2025 GMT
        Subject: CN=5552ca71e9a3a7f5bfa84053ce33b50140d20945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:cd:3a:36:68:77:6f:15:be:f5:d4:70:72:
                    56:05:50:dd:7b:ae:c2:74:fa:38:b6:b2:f7:4a:f1:
                    6d:48:d6:b7:5f:0e:e5:00:1a:98:60:eb:e9:b9:a5:
                    1f:b5:1c:88:a4:98:37:87:6d:9d:36:11:77:89:f8:
                    9c:5d:21:7a:82:e2:01:20:b4:de:bd:46:ac:94:b8:
                    f9:31:ff:65:c2:bb:2a:59:42:78:ab:17:dd:01:cd:
                    b8:d7:3a:bf:ae:0c:c5:ff:eb:c9:af:9d:0b:42:3b:
                    6d:ed:83:8d:a0:cc:cc:64:02:04:01:1d:be:12:9d:
                    4d:b9:33:7a:3a:c2:d2:1f:be:95:ab:f5:80:3e:d7:
                    01:bf:a5:11:e4:5b:10:20:54:b0:53:50:64:5c:00:
                    47:90:90:c3:9f:39:c6:b8:64:98:c8:72:7e:f5:f7:
                    e3:29:33:13:c8:f9:8d:34:ae:38:30:a8:fb:f6:6d:
                    8f:c9:b7:0e:04:51:50:df:dd:1e:b6:f4:07:dc:30:
                    08:14:ee:de:a1:c4:bc:99:78:f6:e6:a6:d9:1b:f8:
                    ec:16:83:8c:2c:66:1b:89:29:ce:ac:a7:c9:70:de:
                    e1:5d:43:8f:60:15:2e:28:f1:00:4d:6f:64:ac:53:
                    f6:65:4e:82:56:26:e8:34:cb:11:f7:a2:c1:22:1e:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:CA:71:E9:A3:A7:F5:BF:A8:40:53:CE:33:B5:01:40:D2:09:45
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5a:24:93:16:dc:13:4d:a6:55:45:15:5f:9b:b5:6f:c6:d3:
         34:2d:90:c4:68:47:56:66:56:5a:2e:28:ad:22:07:c5:f0:9c:
         12:36:c4:cb:6b:c0:75:55:a8:ed:a5:d8:59:70:a5:de:a9:e7:
         23:2c:b1:ee:50:29:bc:d2:dd:32:5d:de:a2:68:ce:67:3f:c8:
         58:be:5d:0b:f3:0a:89:46:3b:48:a4:45:d1:9e:ab:3c:af:c2:
         e3:ab:c7:9a:59:f4:96:e3:99:56:05:b4:49:eb:2d:3e:e4:7a:
         6d:46:ce:8f:55:c0:ab:c3:eb:5b:7d:6d:ee:73:6b:f5:14:11:
         dd:ef:e1:2c:ba:8e:8b:ed:e5:c6:ae:dc:df:f7:5a:2c:61:39:
         ad:d6:32:d5:b3:54:15:f0:47:e8:8d:3b:20:a3:1c:81:18:b7:
         5d:54:d8:de:ef:cc:d7:2f:68:01:b7:4e:4e:30:ac:45:3d:22:
         df:31:fc:d3:2f:6f:dd:ae:2e:3d:f7:d4:ed:dc:38:97:93:f6:
         63:a6:20:18:1a:72:13:e0:56:bf:f6:20:a0:99:2e:4e:09:e6:
         df:27:b3:24:08:03:38:ce:84:c5:64:15:a6:29:d0:52:6a:72:
         c6:66:74:c2:ec:d2:14:f2:92:e1:4e:80:c9:73:a9:c4:2a:e1:
         2f:06:ce:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:46:14 2025 by rpki-client