Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File:                     JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier:          nTo3bb1veqxL2Hpp5tPQRsumIVvjNVcaqQQ9d7gp+ig=
Subject key identifier:   FB:8E:E4:DF:D7:A1:78:FD:8C:45:AB:C5:18:DD:94:8A:EA:54:D1:91
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer:       /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial:       01975723C1CF09FA691238F662D63E5E779B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number:          1064
Signing time:             Tue 10 Jun 2025 00:00:50 +0000
Manifest this update:     Tue 10 Jun 2025 00:00:50 +0000
Manifest next update:     Wed 11 Jun 2025 00:00:50 +0000
Files and hashes:         1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
                          2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: tMJJ6emeV6iIq/EkaPd4FshL4qoLeS/JREq/joIQDKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:23:c1:cf:09:fa:69:12:38:f6:62:d6:3e:5e:77:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241ed58e426975e299875897caff9552640d9c09
        Validity
            Not Before: Jun 10 00:00:50 2025 GMT
            Not After : Jun 11 00:00:50 2025 GMT
        Subject: CN=fb8ee4dfd7a178fd8c45abc518dd948aea54d191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:45:f0:c6:cb:fd:22:ec:de:f1:44:75:e8:
                    0a:d7:03:d6:17:48:0d:ce:66:f6:2e:25:46:54:bb:
                    b6:7c:92:c7:d4:61:6b:11:5b:c1:56:0b:12:49:62:
                    7c:fe:c5:66:75:16:da:f6:12:54:dc:70:a1:19:5c:
                    eb:5a:7a:eb:91:13:87:ac:63:9c:f9:86:71:bb:83:
                    f2:1b:eb:06:93:66:5c:3c:ad:05:06:62:88:0d:41:
                    72:4e:19:2f:1b:10:bb:22:1d:74:a1:ac:1b:bb:f1:
                    46:ed:ac:a9:15:88:bc:97:45:f4:f4:2f:ff:64:22:
                    a3:b2:59:3d:b2:cd:cf:73:20:23:6e:0b:e9:3b:df:
                    1a:4e:4f:3a:cb:85:ec:de:ce:53:b2:fb:15:68:87:
                    38:aa:88:5b:8e:2c:cb:8a:b4:07:53:f8:16:4c:95:
                    9b:cc:e7:97:ef:bb:92:4e:fe:4a:f7:89:ff:3e:8b:
                    40:21:2b:38:3d:d8:57:af:ba:a6:d5:76:cf:80:39:
                    16:6d:74:04:b9:21:01:a5:d2:af:ea:d5:69:a3:01:
                    3a:71:7a:7a:c3:d5:dd:bc:5d:ae:63:98:77:05:c3:
                    7b:d6:27:6f:cd:34:dd:11:94:70:db:9a:08:47:bf:
                    97:9b:82:fc:75:4c:cf:5b:15:59:a6:50:82:59:37:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:E4:DF:D7:A1:78:FD:8C:45:AB:C5:18:DD:94:8A:EA:54:D1:91
            X509v3 Authority Key Identifier:
                keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:87:00:fb:d9:58:e3:a9:3e:78:67:ae:fd:67:72:50:65:6c:
         1c:82:c1:84:ce:57:1e:c9:b0:37:ce:61:65:9f:9a:18:1c:79:
         a3:6b:fe:84:eb:7b:b6:41:e5:01:a8:d4:ef:d8:67:c5:88:1a:
         bc:76:d0:de:dd:87:24:22:e8:a5:35:49:e4:3e:8a:bc:29:c8:
         5d:56:e9:b4:fe:d6:48:59:6e:0b:b3:ec:8f:a5:de:43:f4:c4:
         a2:8b:3a:8b:d2:8f:12:93:8a:40:d7:b4:7f:b6:2b:2c:09:c1:
         6c:28:18:4c:e7:7f:5d:c3:c1:23:ea:3c:5a:14:4f:09:97:a0:
         0f:40:88:27:84:fb:18:6b:fa:00:b5:dc:98:19:3f:ba:d3:bb:
         10:6e:ed:46:63:2d:c2:bc:40:06:f1:f4:32:55:75:49:7f:62:
         0b:40:9b:00:f6:a8:23:e0:ba:a1:01:55:8e:20:85:88:23:ec:
         7f:46:9b:e0:93:55:a5:0d:73:f4:90:a7:75:ee:b0:fc:4c:cd:
         66:23:20:93:b2:78:93:41:f1:c5:bf:44:1d:84:33:cf:0f:09:
         39:02:75:90:a5:1e:df:d1:03:3f:c5:8e:0e:ac:fb:ab:17:71:
         30:ea:b0:51:3a:6d:48:f0:67:c4:16:c5:ee:29:9d:2e:68:0c:
         95:be:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:08:13 2025 by rpki-client