Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File:                     JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier:          /hiIyuPvfr8+gOZkH1gIZe32Qs9otUXRw5EBaI2j9Xw=
Subject key identifier:   0E:F2:6D:99:6B:43:F3:D2:AB:2E:92:44:1F:48:81:46:E6:0E:3D:CE
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer:       /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial:       01975CEE8AC3DA3723197F9D2BFB302455E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number:          1067
Signing time:             Wed 11 Jun 2025 03:00:26 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:26 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:26 +0000
Files and hashes:         1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
                          2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: S24bj028gX3NGT6B1eV+Ni+uMRHG0+phUeImem+s2d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:8a:c3:da:37:23:19:7f:9d:2b:fb:30:24:55:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241ed58e426975e299875897caff9552640d9c09
        Validity
            Not Before: Jun 11 03:00:26 2025 GMT
            Not After : Jun 12 03:00:26 2025 GMT
        Subject: CN=0ef26d996b43f3d2ab2e92441f488146e60e3dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:84:88:cd:ab:88:bb:70:b6:38:a7:96:c7:
                    6d:40:85:11:ec:75:82:0b:e8:89:d1:14:39:44:a6:
                    28:48:10:2c:31:49:03:bd:66:cb:99:6e:e6:df:2f:
                    08:af:ba:c8:01:6a:32:1d:28:da:98:e2:cf:7e:bd:
                    f8:18:22:8b:ff:bc:84:23:4e:b6:31:9a:7a:5c:61:
                    95:af:bb:d7:00:6b:ad:b8:e9:d5:24:b4:94:92:fe:
                    81:fd:ac:89:f9:ec:e9:da:cc:65:72:fe:9d:31:c5:
                    cf:d2:d9:c3:82:f5:6a:60:9d:91:f3:23:c3:b3:4a:
                    df:d0:2f:eb:a9:6d:31:61:21:18:ae:c4:06:0d:d8:
                    27:ee:92:fe:36:9b:7b:47:ce:e5:63:5c:6c:da:0d:
                    fc:a6:d2:e8:96:f4:b5:38:8c:62:c9:83:9c:68:52:
                    c2:17:f1:ff:38:f7:b8:8c:e7:42:ca:d6:1d:2b:be:
                    14:11:8f:ec:48:05:40:e5:31:ca:f3:f7:78:63:ca:
                    d0:bb:79:c3:56:75:2d:e4:8b:06:de:6f:a9:84:e7:
                    b0:48:6f:74:f2:6d:c1:12:91:f7:b5:7f:55:fb:ab:
                    36:ee:11:44:0c:52:f1:55:e8:fa:74:c6:21:5c:10:
                    b1:85:c6:80:57:e0:7d:fe:43:2c:e4:cf:21:27:cc:
                    06:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F2:6D:99:6B:43:F3:D2:AB:2E:92:44:1F:48:81:46:E6:0E:3D:CE
            X509v3 Authority Key Identifier:
                keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:bd:1f:49:b0:ce:84:43:3f:db:90:03:c5:3a:af:33:aa:
         7b:49:57:da:44:4a:4f:ab:96:07:13:32:d7:33:ab:22:54:42:
         76:c7:50:74:8b:1d:67:27:10:ea:7f:35:e1:3f:06:97:b1:9c:
         de:65:4f:9d:00:a2:7a:b9:cc:97:a1:b9:59:8e:b9:c1:5d:c9:
         f7:9d:72:b9:39:29:04:e1:fa:d5:76:6c:1d:b2:71:21:fb:23:
         57:6b:d5:5f:eb:1e:6f:9d:b2:e4:d4:69:f6:d7:40:d2:35:5c:
         82:bc:9f:b9:da:54:2b:be:67:88:f9:dd:97:0a:11:92:4b:43:
         77:00:7f:d5:7b:eb:a7:46:86:f5:c3:1f:74:2b:9a:d7:dd:ff:
         ac:66:2b:68:63:70:6e:42:52:09:16:28:c4:46:89:94:ed:13:
         13:ef:b6:eb:7a:09:0f:fb:64:14:4b:3a:3f:08:f5:af:d6:3d:
         2f:e7:43:d8:c4:6a:33:3c:a0:98:11:39:4c:5e:73:9c:71:96:
         40:f8:56:8c:1a:80:9f:75:16:a1:e0:60:c5:a1:2c:b3:f5:ec:
         c2:4a:e9:20:ad:b6:b3:39:0a:79:26:c3:ea:a2:7a:dc:51:cb:
         53:26:72:19:2a:a9:25:d1:f9:d8:7e:bd:70:be:13:6b:e6:b7:
         38:c0:e4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:06:44 2025 by rpki-client