Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File:                     jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier:          YDAHkXVs4BYyUADu9dzU1mE5GU5nmMneG+jbpY0rY9A=
Subject key identifier:   0D:50:10:46:C7:8B:B4:E4:01:EF:7A:F9:89:8E:7E:DA:88:3D:34:2B
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer:       /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial:       019748F9F68E6A01F061D69DAFE794288B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number:          1022
Signing time:             Sat 07 Jun 2025 06:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:30 +0000
Files and hashes:         1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: Aawt4vAdGrHnVAdwUi7DkQQ9fprkjvGmMXgLSJMKkhU=)
                          2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:f6:8e:6a:01:f0:61:d6:9d:af:e7:94:28:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
        Validity
            Not Before: Jun  7 06:00:30 2025 GMT
            Not After : Jun  8 06:00:30 2025 GMT
        Subject: CN=0d501046c78bb4e401ef7af9898e7eda883d342b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:74:52:88:7c:f6:56:07:f2:1d:31:56:5d:
                    58:22:1e:34:13:5e:1b:6c:a3:5b:65:51:0c:a5:6c:
                    ab:91:23:8a:ee:c8:86:bf:93:53:2b:dc:a3:5d:e9:
                    8c:0b:0c:f1:f9:31:03:6b:76:a5:1b:b5:8f:ec:e9:
                    33:0e:d4:19:5c:f7:b3:1f:78:ab:2e:74:62:21:9b:
                    af:b8:39:0a:85:55:c9:5a:1d:19:fd:86:62:32:7b:
                    eb:5e:11:b8:57:c5:95:c3:ee:5e:31:52:6d:75:62:
                    34:2f:7d:c9:50:34:a2:e2:56:60:22:a2:50:4d:07:
                    57:92:2f:a4:86:90:38:12:60:95:2c:ab:cb:6c:ad:
                    74:47:bf:d2:d2:f6:f0:43:00:48:cc:db:04:cf:f4:
                    8c:9e:b3:4c:86:3e:b6:ac:a3:65:1e:af:17:2c:05:
                    62:9a:14:ca:16:45:ac:e2:cb:3f:6a:5c:53:03:3a:
                    59:ec:ab:3e:44:52:21:21:d8:ea:22:12:4d:e4:92:
                    21:4e:db:1e:72:22:52:bb:c1:60:e7:ce:3d:8e:5f:
                    85:ad:38:7f:0d:30:20:0f:e5:a4:f4:c7:38:2d:6a:
                    8e:67:10:c6:6d:5c:6c:e2:d4:a0:95:db:f2:58:4f:
                    88:fe:d1:06:53:f1:10:d0:4c:37:8f:d1:76:ed:c7:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:50:10:46:C7:8B:B4:E4:01:EF:7A:F9:89:8E:7E:DA:88:3D:34:2B
            X509v3 Authority Key Identifier:
                keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:3b:f4:ee:04:4b:3e:72:78:31:41:24:98:49:5f:ae:9b:
         65:53:9e:cd:f6:df:94:42:34:ef:7b:c1:4a:32:dd:01:98:fd:
         33:78:eb:2c:89:72:da:9c:a3:d0:aa:6f:83:2a:7e:e5:1a:4d:
         35:70:fc:f0:c5:15:5a:80:86:e4:3f:24:97:06:d4:17:ef:9b:
         65:2e:d2:61:b9:54:c6:b6:5e:6e:cc:e7:30:fa:ad:31:f0:5a:
         a8:82:27:92:93:3d:b8:58:82:67:3e:d4:f3:90:0d:46:c5:48:
         5d:c2:a4:2e:17:09:5a:43:d9:c6:4e:1a:14:21:f1:e7:36:c7:
         e6:5f:5f:f3:af:86:b9:a7:d7:df:f2:03:bc:25:eb:ad:30:31:
         27:a3:1a:f8:f2:a5:d5:b2:52:da:26:b6:8e:cc:07:65:48:3e:
         62:12:c4:a4:bb:d9:a7:67:a8:c4:73:09:d7:69:c4:e5:3f:bb:
         9f:71:a5:25:ce:36:6e:fd:3e:de:f1:4b:c4:8a:b7:2c:87:3e:
         11:e7:39:c9:54:ab:8c:e5:5f:8b:35:b7:0c:dc:e8:56:e0:71:
         bc:f3:aa:07:87:f4:9d:4e:24:42:18:9b:5f:5f:2e:64:0b:8b:
         36:17:13:d0:73:4b:96:72:7c:ee:4a:d5:d3:1c:63:b8:4d:ae:
         84:c8:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:00 2025 by rpki-client