Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File:                     JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier:          h2+EsBkgVUWHDGXPIHiW+WNaNlVZRiCzJJjvLxvz33Q=
Subject key identifier:   CC:CB:E1:98:10:7B:11:40:56:E0:06:E3:95:D5:2D:98:7E:73:FB:70
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer:       /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial:       0197488C3850C7E466B95881600098D7DA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 04:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:38 +0000
Files and hashes:         1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
                          2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: +gAlIvXZznjmT/F1jrKOv+cmP9fCxep5YWOCtZnQGTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:38:50:c7:e4:66:b9:58:81:60:00:98:d7:da:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
        Validity
            Not Before: Jun  7 04:00:38 2025 GMT
            Not After : Jun  8 04:00:38 2025 GMT
        Subject: CN=cccbe198107b114056e006e395d52d987e73fb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:65:e0:90:f1:58:02:c9:51:92:be:d8:8f:
                    e2:9e:62:1d:cb:c5:a1:44:20:46:1f:9b:c5:84:88:
                    36:e0:c4:d2:42:dd:70:50:8e:5f:fe:23:90:a6:72:
                    3a:13:e5:d3:5e:4f:85:48:56:7a:ca:82:1f:62:1f:
                    37:91:32:98:81:3a:c8:8f:bc:ac:a4:68:c6:27:77:
                    0a:15:27:0b:88:07:b8:55:b1:d7:4b:3d:58:96:26:
                    65:b3:48:71:e3:14:9c:ac:76:b9:0d:8c:c2:66:25:
                    29:6a:f2:ea:f9:31:df:08:cb:fe:18:f0:99:a4:53:
                    f4:fa:3e:80:0e:b5:6b:0f:88:30:48:63:e3:44:83:
                    2d:04:25:e3:59:7e:4a:29:88:9d:ad:90:bb:7b:09:
                    ab:05:4f:84:d8:a5:ee:01:1c:42:86:6d:93:51:30:
                    63:70:b5:2b:df:b5:5b:49:70:c8:03:c3:83:66:70:
                    47:0f:0d:df:08:e6:e9:f7:12:38:42:ac:39:c1:05:
                    14:e5:05:42:9f:02:1b:ac:c0:15:1a:f6:7d:54:f4:
                    d9:48:a4:3e:e3:28:e9:1e:6d:52:11:af:43:54:68:
                    f3:48:48:43:15:b9:41:1f:dd:c0:de:1e:dc:5a:75:
                    22:65:e2:d8:f8:52:14:bb:dc:fa:6e:d5:95:ca:e2:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CB:E1:98:10:7B:11:40:56:E0:06:E3:95:D5:2D:98:7E:73:FB:70
            X509v3 Authority Key Identifier:
                keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:54:e5:da:f4:e1:c9:51:2f:81:68:7a:5c:1b:62:29:a3:41:
         cc:eb:a8:7e:a4:e6:48:d2:0d:7c:d0:62:bb:3d:0f:93:13:81:
         2e:06:64:20:e9:e7:c0:c7:19:85:31:eb:84:0b:cf:83:f0:c0:
         13:5b:cc:e3:2d:fa:c6:f1:92:3c:ee:c4:09:1e:ef:6f:82:7d:
         bd:f7:72:04:ab:76:bc:aa:58:4b:6c:63:0f:d9:41:e1:26:71:
         9c:92:6e:66:65:6b:33:5a:8b:20:94:55:34:5c:fc:cf:cb:e4:
         c2:c9:88:ad:e4:18:8c:f9:87:e3:eb:7a:2c:f5:60:fc:3a:43:
         32:9e:cf:03:20:a7:e3:f2:26:92:0c:e9:f1:e3:16:fe:3e:8f:
         bb:99:1a:89:a1:73:3d:56:95:fa:6c:ec:dc:5a:50:58:74:ef:
         09:33:0a:3e:b3:f2:19:a4:96:83:64:84:78:79:1b:78:9f:d8:
         c5:9e:9d:4c:a7:60:8e:1c:67:70:17:9e:be:d2:67:cd:f6:69:
         cc:66:bd:59:1b:f7:21:4c:84:20:31:a9:dd:ed:01:35:ff:6d:
         78:74:34:ea:1f:d3:b8:91:db:41:6c:13:82:8d:c6:ef:ba:52:
         22:cc:72:bc:81:44:3a:e9:e4:f6:5c:11:58:bd:f8:de:37:3a:
         23:a4:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:01 2025 by rpki-client