Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File:                     jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier:          0/y0Ojb+amVkAyAPSGBoXihZ18dEjezO5CUwHH7A23I=
Subject key identifier:   55:4A:B4:78:FA:22:31:2A:35:EF:B9:27:F1:63:70:C5:02:37:C6:51
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer:       /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial:       01974B8D6B5EE0F28E81807BE2EA50AD6FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number:          0629
Signing time:             Sat 07 Jun 2025 18:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:48 +0000
Files and hashes:         1: 4B72C5PV7fqeVjBdU5ceRiPTNhg.roa (hash: pFCtENG1V0wvmJ9u/UiMV0R5c9b/plH5LI5iiczeDJ4=)
                          2: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: DDMDLuiVXl8yMVhybL/dKY/a0uSPzquSmplX1LnC6Mo=)
                          3: wBXvBP-sIHkTwmZUmnZjwsOY0so.roa (hash: sf9c/AK0uTzIyNN2fC+2QGD8WVkysi/YAMOyb/8pxmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:6b:5e:e0:f2:8e:81:80:7b:e2:ea:50:ad:6f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
        Validity
            Not Before: Jun  7 18:00:48 2025 GMT
            Not After : Jun  8 18:00:48 2025 GMT
        Subject: CN=554ab478fa22312a35efb927f16370c50237c651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:0a:88:bf:88:e5:21:22:3c:73:f2:bb:ea:
                    ac:36:f0:14:f0:01:7b:2a:37:9e:fe:46:89:dd:39:
                    45:13:a9:f4:bb:13:58:f7:03:4d:c2:7c:20:29:ae:
                    a2:a4:cb:dc:bd:7d:7c:70:08:db:00:3a:27:2e:55:
                    6a:21:28:17:54:5b:67:4c:9b:09:34:a6:d1:0a:c2:
                    4c:15:e7:fe:b1:0a:44:f6:a4:99:45:da:03:ac:74:
                    a2:dd:36:e9:03:fe:54:a3:7d:9d:7a:f0:b0:46:36:
                    6c:7a:21:71:9d:b4:dc:8b:46:0c:ba:25:89:5c:66:
                    68:52:f5:d8:50:bb:10:af:7d:5b:11:a4:a5:c2:45:
                    87:06:3a:1a:4a:5b:37:fe:59:71:0d:bd:4b:5c:5c:
                    be:c6:2d:77:e4:01:01:8d:83:e2:54:47:b3:25:5f:
                    c9:3f:33:da:37:01:ef:00:b9:ae:f3:fc:a1:a4:b6:
                    6f:eb:98:ab:68:ac:e8:7a:89:fe:26:ab:94:d3:1f:
                    fa:f4:2a:c2:62:40:6b:ba:f1:fa:26:85:33:4b:83:
                    f1:2a:aa:73:b0:b8:95:c1:60:bc:77:e1:61:7b:02:
                    90:ed:36:b4:8c:0d:c0:40:12:77:7f:c7:bb:6d:1e:
                    d4:11:a7:7f:8f:f2:d7:13:e5:4a:ac:cc:fa:72:f6:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4A:B4:78:FA:22:31:2A:35:EF:B9:27:F1:63:70:C5:02:37:C6:51
            X509v3 Authority Key Identifier:
                keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:14:84:5e:c8:60:36:cb:5d:e3:6b:e2:58:f5:c1:74:de:
         ac:4c:95:99:f9:c6:09:a6:2b:70:37:6f:b0:c5:6b:ff:aa:06:
         2e:70:24:45:6b:8f:41:a2:54:5d:68:09:04:8d:1b:9f:8f:32:
         50:ef:08:be:1b:a3:82:65:80:85:d5:3e:e4:5e:7e:15:46:59:
         a2:7f:4f:49:1a:bd:d7:11:fd:0f:6b:f6:82:1b:85:a9:18:f1:
         17:3c:ce:33:6e:06:a2:51:fb:3a:d3:fb:dd:f9:f1:cd:0c:a0:
         b0:f8:f8:00:bb:47:69:45:43:d2:09:b6:e7:cc:b4:7f:56:52:
         96:12:46:51:02:d8:a7:b2:7c:8d:6a:38:51:d6:bc:7b:b9:f7:
         e8:96:eb:3c:2d:75:26:ab:e2:8c:00:86:3b:d8:44:a5:af:37:
         46:26:fc:81:02:86:18:43:3e:6f:e0:4d:85:23:5c:10:6a:89:
         d4:b4:68:e8:b4:dd:5c:4f:69:4f:54:4b:33:41:bc:6f:d4:a5:
         ce:3b:a1:b8:e1:fd:20:fc:8c:9d:3f:b2:66:43:ca:36:5b:69:
         6f:26:c1:44:3b:27:9d:32:85:1f:ed:f3:7b:c5:80:6e:88:d3:
         01:6d:02:20:16:b8:77:78:fa:2f:fa:9c:62:b6:38:b3:16:86:
         4f:04:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:12 2025 by rpki-client