Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File:                     J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier:          OhAMHojHe0yA1rc32rhI7YLeyo70HaLa9zY6jL87RpU=
Subject key identifier:   ED:A0:E4:F1:C6:14:5D:E7:EE:EB:74:69:84:3B:C0:34:FA:DD:A9:4C
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer:       /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial:       0197481E9749E220ACE29DAA1F488BF7A103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number:          0C67
Signing time:             Sat 07 Jun 2025 02:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:53 +0000
Files and hashes:         1: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: sdrg7spQcjAwYW6lEQEcJY4SSntoGjLXM34/NTg8qBw=)
                          2: kH84XjWCF3YsEupBc9_NB-UJ1LE.roa (hash: vFi6ltA+YLY/2jEI7t4T0lx3r1xW2YaGJ9YVTzgeHZA=)
                          3: m8b-nSkJNQaQc9Ko3VmUYZ_aR5k.roa (hash: x/jmnJNzCw/+lpmfHMz6HsStw+fWqWLA6QrXjLJpCDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:97:49:e2:20:ac:e2:9d:aa:1f:48:8b:f7:a1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
        Validity
            Not Before: Jun  7 02:00:53 2025 GMT
            Not After : Jun  8 02:00:53 2025 GMT
        Subject: CN=eda0e4f1c6145de7eeeb7469843bc034fadda94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:79:ff:45:c6:ec:ee:29:a1:11:1d:95:cd:
                    6b:7b:a6:a1:13:3c:67:4b:eb:87:6d:4c:8d:c1:43:
                    82:d1:b3:92:f1:62:dd:e1:4c:d4:93:f2:e0:d8:f8:
                    b1:ef:06:ee:e2:c2:09:24:47:4f:ea:9d:70:19:e3:
                    f6:5b:8b:9c:e8:73:42:d7:6e:6a:29:9b:40:80:97:
                    80:e4:bb:4e:c4:77:55:c1:a9:05:05:f4:4f:5e:ab:
                    a0:5f:aa:5a:23:7d:bb:6d:89:15:dd:a1:0b:55:d3:
                    c9:c2:ee:8c:53:e4:b7:3b:d6:c4:67:07:c7:54:f0:
                    9a:a1:dc:70:16:b8:fd:2d:02:65:5a:d9:85:5b:5f:
                    38:27:34:b3:5b:9d:86:9d:a3:7c:e0:7e:94:be:9a:
                    cf:a6:5f:fb:41:35:b7:5c:48:ac:94:24:31:e9:f0:
                    a3:93:aa:f5:44:89:2c:0e:c8:0f:04:43:f9:d9:00:
                    96:f5:2a:50:78:c4:4f:a3:94:11:62:0a:eb:0d:39:
                    96:2a:f6:ac:4b:fd:23:5e:57:21:20:62:cf:bf:31:
                    91:b5:3a:d6:58:85:7e:ba:a7:5e:db:cb:94:89:b2:
                    80:70:f0:c9:2f:d0:e8:29:db:6d:83:ab:61:4a:b9:
                    30:bd:8c:30:33:c2:cc:4d:f4:56:27:2e:62:57:50:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A0:E4:F1:C6:14:5D:E7:EE:EB:74:69:84:3B:C0:34:FA:DD:A9:4C
            X509v3 Authority Key Identifier:
                keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:22:1d:e8:40:ea:ab:c0:60:fd:43:2b:48:3e:bb:87:74:
         f6:b7:c8:0f:1c:09:81:88:87:fe:21:e2:38:6c:9c:80:63:fb:
         fb:0e:64:ba:f3:c2:1c:be:00:c4:19:9c:ad:e0:d8:d8:75:87:
         d4:2e:ea:80:cd:89:17:e5:85:f6:79:bf:32:c0:9a:89:0c:27:
         b4:a2:86:ea:cd:22:c6:ae:1d:8d:48:d7:77:13:b3:51:9b:b7:
         1f:e9:d4:30:4a:1b:38:b0:8d:3f:55:b0:59:cc:f2:3a:7a:57:
         ab:e2:86:0e:04:18:9e:95:b6:30:f2:d2:73:ea:e6:d2:21:75:
         67:00:f4:1b:6e:bf:9d:ce:08:83:26:88:1e:36:cd:29:a1:73:
         80:2a:5a:6c:25:33:6f:42:3e:62:c0:af:39:ad:6f:7b:27:b2:
         0c:0a:8e:bb:78:36:1c:d3:6c:ef:c1:30:3c:79:f2:b6:0d:62:
         d3:e2:66:b7:11:77:3f:92:ec:0f:ca:0d:70:c2:09:ef:6f:ac:
         2c:f5:62:b0:8c:45:1b:6c:47:b8:37:a1:06:7c:7d:94:6f:87:
         6d:ca:c8:e2:1d:8a:3a:45:85:1d:bf:cf:bf:7a:30:9a:eb:d9:
         50:bf:a5:7a:5e:51:7e:f8:7b:95:31:e6:78:5b:46:f2:1b:47:
         67:3c:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:04 2025 by rpki-client