Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File:                     jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier:          Mi5kMbLEwNTZzK0F9iphJCjis7TItNvG+h3FozfdMaM=
Subject key identifier:   F0:E2:75:F7:A9:FF:B2:F5:68:C3:F6:6A:71:41:37:59:21:30:10:1B
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer:       /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial:       019771BF6DEA04A908D2A36C2F2AF1DF9969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number:          1596
Signing time:             Sun 15 Jun 2025 04:01:00 +0000
Manifest this update:     Sun 15 Jun 2025 04:01:00 +0000
Manifest next update:     Mon 16 Jun 2025 04:01:00 +0000
Files and hashes:         1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: 3s3U7EgHSvic3a/PMAcEI3mO805/GYonvagnPF2OtVA=)
                          2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:6d:ea:04:a9:08:d2:a3:6c:2f:2a:f1:df:99:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
        Validity
            Not Before: Jun 15 04:01:00 2025 GMT
            Not After : Jun 16 04:01:00 2025 GMT
        Subject: CN=f0e275f7a9ffb2f568c3f66a714137592130101b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:e0:f3:bd:7e:75:da:f7:22:6d:49:44:d8:
                    c7:70:b9:64:fe:d3:81:69:46:f3:5e:5e:d4:08:26:
                    15:39:ad:fa:9b:45:6c:a0:c0:64:d2:2e:80:b4:10:
                    e0:aa:41:dc:2a:77:aa:f6:88:8e:27:ac:d0:48:94:
                    7c:72:75:80:af:bd:ac:d1:9c:4c:da:1d:95:fb:8e:
                    bf:13:1f:da:4f:5f:79:5b:67:71:81:f2:34:bb:94:
                    b3:91:9f:47:10:54:f4:96:c2:45:e5:74:76:56:30:
                    5b:7a:42:68:30:b8:d2:4a:78:94:ea:43:25:fe:d5:
                    f8:74:ae:5c:72:5e:72:61:92:7a:9f:33:16:fb:65:
                    39:bf:b9:11:dd:0b:27:f1:e5:95:17:90:f5:95:c4:
                    56:52:74:97:68:c6:8e:a3:60:44:b1:95:98:e5:c4:
                    d7:f3:66:5c:d1:e9:f7:e2:e6:0c:86:e9:40:e6:55:
                    28:75:eb:c3:f4:dd:dd:4b:73:f8:87:9d:00:94:f4:
                    2f:c0:80:6a:9f:ed:80:8a:6e:30:3f:64:07:c8:a7:
                    9a:b4:76:de:bb:d5:57:80:12:7b:03:36:ac:59:dc:
                    b7:1e:80:d1:cd:48:41:76:1d:da:5a:07:43:a0:d4:
                    dd:0c:df:93:20:1d:8e:2c:eb:36:1a:63:67:40:7f:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E2:75:F7:A9:FF:B2:F5:68:C3:F6:6A:71:41:37:59:21:30:10:1B
            X509v3 Authority Key Identifier:
                keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:bf:c2:04:67:8d:d9:34:71:19:5c:e6:d8:6b:ea:d0:a2:
         fb:1a:7c:d8:74:5a:26:57:65:8a:75:b8:39:f5:53:dc:1d:a2:
         db:81:0f:ef:55:00:07:c7:2a:81:81:d5:91:4a:ee:89:8c:4e:
         bb:59:2b:8a:fa:26:08:67:16:a0:7e:4f:41:5a:68:ee:de:ad:
         68:94:23:4c:3c:db:a0:e9:cd:b7:64:e8:e1:06:28:8f:a5:6d:
         07:d5:77:d5:8d:ca:c9:da:91:07:04:85:21:05:f1:87:fa:2a:
         53:4b:98:33:36:f1:23:d2:ff:2f:a7:f8:fe:6a:05:c8:c8:45:
         cd:26:7d:69:2c:b4:c6:9b:7a:26:3b:3d:14:0d:22:2f:56:02:
         cb:4c:b6:98:37:9f:11:4c:c5:c7:46:61:86:c2:3b:df:2b:b9:
         1a:ac:02:25:16:29:a2:82:7b:aa:d6:90:90:fc:b1:af:e5:f0:
         cc:71:b8:b0:37:e9:d1:04:d4:fc:cf:44:9d:b2:f5:10:4a:34:
         c2:be:c1:52:13:a8:99:c1:f4:1c:3d:bf:27:48:89:5e:87:cb:
         f5:a3:38:90:d3:ab:cc:a7:c4:08:4f:c4:7c:50:51:92:68:9e:
         5e:78:bb:90:14:af:84:a8:55:07:65:5d:ae:4c:f2:6e:1f:d8:
         e6:5e:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:43:10 2025 by rpki-client