Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
File:                     J0zEEJs00UTL604gpr08B1kYIbU.mft (raw, json)
Hash identifier:          Y42np3F1o0o5SRAgr8/wcoKcj2vT1CR1lfTAx+q/kl8=
Subject key identifier:   37:85:8F:D4:76:F2:22:73:DA:59:95:E0:13:24:94:2C:DB:78:FB:2F
Authority key identifier: 27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
Certificate issuer:       /CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Certificate serial:       019749680F13A9987C86F38735B31BF957C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 08:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:45 +0000
Files and hashes:         1: J0zEEJs00UTL604gpr08B1kYIbU.crl (hash: 175wDIrSeH9c30Hc9zGPCV7tbKZJwvXfIjJ2hGajGvc=)
                          2: W2Bt5n75RL1yPisK5n22fF2D8bI.roa (hash: paOvg+wgSlBKgewYZP5vibp/Ng8VGrHC/AvIdfss8fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:0f:13:a9:98:7c:86:f3:87:35:b3:1b:f9:57:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
        Validity
            Not Before: Jun  7 08:00:45 2025 GMT
            Not After : Jun  8 08:00:45 2025 GMT
        Subject: CN=37858fd476f22273da5995e01324942cdb78fb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:94:56:f5:48:e8:c6:bc:0c:92:aa:92:0b:
                    56:be:c8:5e:37:b3:1f:53:27:2b:d9:34:2e:9f:f6:
                    1c:f1:4c:4f:d1:56:94:79:a3:83:49:7f:a9:04:4a:
                    34:12:76:ff:22:02:e7:22:8d:c3:d7:92:20:96:07:
                    78:28:34:b3:7c:ea:48:f4:2a:d9:0c:94:e9:62:54:
                    ad:6e:95:8c:80:26:c4:c3:72:80:ef:0d:9d:db:7c:
                    d2:70:c7:c7:87:11:04:52:37:00:73:6b:ee:7a:86:
                    45:00:3a:4b:9a:ff:50:ba:ed:9a:81:25:ca:c0:88:
                    57:b4:4f:62:3a:d5:dc:60:68:f2:6e:e4:c5:d9:3f:
                    cd:bc:41:9b:75:ae:18:d9:3e:6e:fa:dc:47:73:12:
                    43:9f:e5:ec:a6:e1:02:bb:f0:e1:d6:c3:70:24:e9:
                    cf:82:44:d7:80:9d:e5:fb:58:ce:a6:4a:bb:77:fc:
                    3f:e0:0f:6d:4a:13:ad:1d:bd:b1:e5:fe:92:59:10:
                    7b:8e:ea:b6:33:e6:fd:ba:eb:da:4d:73:d1:f9:d9:
                    af:ef:83:7d:9f:c3:21:99:9a:d3:7d:09:a6:c8:b1:
                    2d:f1:02:1b:2e:ba:28:13:e5:9e:34:de:08:6d:a2:
                    49:2a:2d:78:99:3b:69:cc:68:e1:78:40:73:d8:93:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:85:8F:D4:76:F2:22:73:DA:59:95:E0:13:24:94:2C:DB:78:FB:2F
            X509v3 Authority Key Identifier:
                keyid:27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:07:b8:b4:53:11:7b:90:79:34:7d:2f:27:9c:a0:68:79:e3:
         eb:a0:33:51:bc:be:e7:19:6b:0a:d6:b5:3a:92:45:bf:00:81:
         b1:46:06:31:e7:ec:d7:3a:24:2b:1e:f2:09:93:74:21:64:7e:
         7b:24:d6:40:00:b8:da:6d:a3:ba:2e:57:42:54:c4:95:af:ba:
         2d:d0:6f:93:60:0c:8e:7c:83:fd:0d:75:09:68:45:a3:fb:ce:
         80:8f:9c:eb:d3:e9:41:72:ec:19:1f:22:ae:6f:ef:e4:b3:91:
         4a:85:7d:38:4f:a7:26:d0:3e:82:d3:ae:48:9a:6e:05:9f:97:
         8c:12:e7:1b:e3:9f:15:30:65:74:95:c6:d6:bd:8b:37:54:06:
         aa:2b:64:d8:a6:50:81:a0:7a:de:ba:3d:c8:55:c7:0b:71:72:
         5b:af:b6:77:e2:90:9a:e0:92:0d:eb:a5:3d:36:c7:d5:95:f0:
         a7:b8:6e:53:12:25:d5:3c:1e:37:a8:f8:1e:e2:68:4b:8e:bb:
         bf:83:bf:c1:24:d7:14:ea:42:69:f8:02:56:1a:2e:ad:29:6d:
         0b:2c:06:7d:bb:3d:ae:82:7c:22:5b:39:33:e3:e6:e9:f0:f4:
         c9:1e:71:07:30:90:50:dc:5e:43:b1:3e:57:57:1a:b8:ae:97:
         20:74:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:47 2025 by rpki-client