Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
File:                     JNnaT_sbttJz3hutXbvw0f9H8M8.mft (raw, json)
Hash identifier:          SSIGLcEGVFJCMsJlvRfEmymJ+Dp5Dvy3zfLT8eMx3S0=
Subject key identifier:   29:47:70:1A:7D:97:59:60:27:B3:1F:86:14:F9:A4:D6:99:85:33:80
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       01974D7BA150A05CCD1A70E355A18B5047FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
Manifest number:          08C7
Signing time:             Sun 08 Jun 2025 03:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:37 +0000
Files and hashes:         1: JNnaT_sbttJz3hutXbvw0f9H8M8.crl (hash: 5MaHcSXpXKDhfIL7YhjZtdSX2t+PE5WzflaVD7kc1p0=)
                          2: ma8zfvdT_VIzhcZ-Lp3w2kWF5zA.roa (hash: ioXdT326LeLVRC17TKm62fh113i8VMK3qPoClNNWHik=)
                          3: uWhjTQKzFf3bwM_2vEUVjNE6mto.roa (hash: FO0KiFq0MYIb532pTNbO3g2IyaIdRnwrp+VDkHC+8Po=)
                          4: xWH61H-UcUY6ZJDt-T0XZrm3Kd0.roa (hash: I6W0yqhD6f0inkp6BbBz5CSZ4vRRv1c8dDwlJ+6LOEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:a1:50:a0:5c:cd:1a:70:e3:55:a1:8b:50:47:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Jun  8 03:00:37 2025 GMT
            Not After : Jun  9 03:00:37 2025 GMT
        Subject: CN=2947701a7d97596027b31f8614f9a4d699853380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:69:ae:2c:0e:57:e4:49:9a:df:22:64:19:
                    54:18:75:ad:ea:e2:5d:7d:eb:06:e9:95:87:b2:7b:
                    4e:71:1a:cf:e8:34:90:30:e8:dd:c5:64:c8:fd:0d:
                    7e:af:75:ef:19:08:b0:f6:da:37:d9:2d:63:12:24:
                    c2:6e:98:ef:52:27:3c:66:34:a5:b9:c3:28:1d:44:
                    b3:01:89:96:cf:fb:f1:2e:ae:34:10:0a:86:0f:77:
                    f8:a2:b9:b7:0e:57:01:7f:84:83:a9:32:de:c6:8a:
                    e6:96:81:5c:c0:00:cd:99:a7:1b:47:f5:f4:04:cf:
                    a1:11:0e:71:1b:c3:20:94:b0:2d:c4:23:ec:3c:8d:
                    69:45:8e:63:b0:89:32:84:b6:b9:f9:1e:7f:ab:8a:
                    b1:71:ea:71:2d:b4:a6:75:cd:2a:74:05:dc:7d:d4:
                    e4:c7:ff:f9:12:f3:3f:af:83:59:e4:6b:7a:3b:bd:
                    24:3a:d8:50:ee:e7:68:f0:37:9b:4b:c4:41:32:92:
                    f8:1f:98:ce:b2:fc:52:0a:8e:22:07:9e:ee:e6:bf:
                    8d:f8:79:01:2a:7a:2e:e8:31:91:47:3f:32:04:cc:
                    88:f0:a9:17:78:7a:db:fc:99:cb:49:fc:70:9a:1f:
                    07:96:ea:43:5c:49:24:d1:18:3a:94:a4:56:eb:00:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:70:1A:7D:97:59:60:27:B3:1F:86:14:F9:A4:D6:99:85:33:80
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:5b:e2:4a:d3:0c:76:c5:7c:75:28:d7:4e:31:9e:a6:c2:
         c1:f6:59:6c:bb:a3:49:c0:43:b1:2e:33:20:b7:5a:d9:61:f3:
         8a:4f:4d:d8:27:ba:d4:d0:f8:c1:59:65:c7:3f:00:49:b1:9a:
         d4:a6:2e:e7:35:40:00:03:95:44:2d:2a:d9:a5:a9:59:07:aa:
         06:10:69:12:a4:7d:b3:31:06:10:3b:2b:3a:9d:64:48:85:a4:
         e2:90:14:24:1f:8e:d3:84:ab:8c:39:6a:e6:9b:58:cb:c2:e9:
         f1:f7:75:93:14:83:34:2f:14:9c:04:b8:f6:35:75:f2:13:97:
         85:7f:93:d6:a4:cd:70:5f:b9:aa:5e:de:18:49:72:2c:24:86:
         8d:80:28:ff:56:0c:e0:e3:03:8a:64:19:22:00:82:4a:45:13:
         da:6e:f4:19:f3:ad:bc:fb:1d:4f:ea:20:90:e0:33:32:d8:40:
         65:3a:27:6a:d2:41:3c:55:4b:93:b7:1c:0a:98:ac:e1:6c:d0:
         0d:a4:d1:a4:84:f4:f3:56:36:f5:76:10:1f:a6:7b:f7:25:98:
         24:2f:f5:ae:85:1a:29:f8:2e:ca:33:1f:3f:4b:13:05:fa:aa:
         77:f8:74:76:94:c4:e2:a9:5b:1b:b4:0a:3b:f8:8a:bb:3e:33:
         5f:8d:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:11 2025 by rpki-client