Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File:                     J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier:          ImtpNzTPgOrHcF9HPLonnH9JpJfcT7czQ0Y9Y1c5sVc=
Subject key identifier:   47:B4:F7:1F:AD:09:07:91:D7:7B:A5:3B:FD:8B:A2:2D:C9:32:4D:C3
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer:       /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial:       0197530FEDC90DD65EC0D7BB828446441F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number:          0B96
Signing time:             Mon 09 Jun 2025 05:00:42 +0000
Manifest this update:     Mon 09 Jun 2025 05:00:42 +0000
Manifest next update:     Tue 10 Jun 2025 05:00:42 +0000
Files and hashes:         1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: x8sNYaZzzTipQOUfXLch7p1XnoZgZotJl0EBfh2NoCg=)
                          2: T_CxlSwnknQox-JCH593XHkgLvM.roa (hash: CV6mCgtIXghwvOdJmAcgD8Xq7LAE7fozTfYdfKC5Sfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:0f:ed:c9:0d:d6:5e:c0:d7:bb:82:84:46:44:1f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
        Validity
            Not Before: Jun  9 05:00:42 2025 GMT
            Not After : Jun 10 05:00:42 2025 GMT
        Subject: CN=47b4f71fad090791d77ba53bfd8ba22dc9324dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:21:58:da:40:c2:aa:cc:1f:5d:50:d3:4c:
                    a9:61:ea:4c:be:46:51:31:59:e3:22:44:8f:8f:47:
                    88:52:9f:b1:54:65:58:f3:2b:51:a4:3e:89:8d:01:
                    f5:70:db:42:26:27:76:29:06:13:5f:89:7e:c9:16:
                    83:c4:9b:bb:04:7a:c3:58:2e:08:bf:61:89:78:29:
                    de:d8:ae:9d:2a:3b:bc:5c:13:2c:78:ed:58:01:8e:
                    75:61:82:70:6f:9d:c2:65:2b:eb:90:81:d7:ff:d9:
                    20:61:9d:c1:9a:92:4f:da:2a:1f:98:35:16:ee:e9:
                    e5:26:53:21:fd:e1:4d:f4:64:e9:d3:2d:a5:61:19:
                    64:24:70:4e:25:54:d4:fe:c9:74:3d:26:59:ea:be:
                    eb:c2:c9:c5:e1:3d:06:e3:6d:ef:ac:8c:d6:42:fb:
                    de:f6:c8:dd:5b:4e:02:f2:05:f1:c4:3a:39:ea:d4:
                    5a:8b:71:9a:40:23:6b:7b:65:f3:b1:ce:d0:d6:d3:
                    66:72:70:36:a7:5e:ca:00:a4:6f:81:1a:f3:1c:a8:
                    63:c3:48:a6:ed:4a:2f:4a:bf:d3:9e:6a:8d:ab:26:
                    bb:c8:04:7b:82:16:53:98:08:dd:37:fa:9a:3f:fd:
                    dc:32:9b:15:0e:21:ad:2a:a6:3a:91:66:fe:4a:47:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B4:F7:1F:AD:09:07:91:D7:7B:A5:3B:FD:8B:A2:2D:C9:32:4D:C3
            X509v3 Authority Key Identifier:
                keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:8f:9b:10:2e:bc:78:95:73:94:3b:a9:fb:0e:8a:9b:9a:
         0d:fd:ce:b2:e4:eb:e7:ed:e0:02:dc:9b:ee:57:27:bb:11:c4:
         0c:d5:4c:1e:5a:1b:97:b1:b7:35:4b:35:a4:1b:20:10:21:f0:
         5c:cd:1c:f4:02:97:74:c0:f1:b5:21:c7:e3:27:a7:56:dc:58:
         36:19:52:c5:6f:ab:cf:2e:3c:32:34:af:af:18:14:51:86:bd:
         f9:bf:cb:84:86:3b:b7:79:c2:53:a4:97:87:0a:da:e3:e4:85:
         92:01:07:81:94:60:3b:1d:5e:5e:91:2f:28:d2:0d:a7:1b:fd:
         8e:2d:66:c3:ef:fd:dc:ff:d6:94:4e:7a:47:45:2c:4a:1d:30:
         ca:ca:81:48:33:35:b1:69:6e:3a:9f:4e:ca:c9:41:06:10:16:
         ad:56:aa:35:34:82:b4:28:12:92:67:9a:4a:63:2b:c6:58:4e:
         49:40:63:9b:4e:15:c3:fb:af:72:a9:dc:99:ea:70:2e:35:df:
         a7:cd:7d:ae:51:bb:3a:fc:2d:db:26:70:ac:f6:d0:8c:76:c5:
         f4:9e:96:ad:68:4e:62:b8:5d:51:4b:87:08:1c:b1:03:7c:7b:
         be:c1:0a:c1:16:9b:02:87:c6:4a:20:b5:67:e6:cb:15:75:a5:
         07:6f:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:45:06 2025 by rpki-client