Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File:                     J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier:          17bqG6gg/uimcdtxjOSCQyT4oRjUNEzdcil68fG6GNI=
Subject key identifier:   C8:17:B9:D2:6D:E5:83:AC:A1:4B:43:C7:E2:FA:F8:DC:E5:01:70:A0
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer:       /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial:       019758DAD7580C75EF0ECCB5DCAC3E01A17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number:          0B99
Signing time:             Tue 10 Jun 2025 08:00:26 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:26 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:26 +0000
Files and hashes:         1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: 2w/mB5sQ578zwH3EA3a28ISgaazlnHk6fIZGvUwDtSA=)
                          2: T_CxlSwnknQox-JCH593XHkgLvM.roa (hash: CV6mCgtIXghwvOdJmAcgD8Xq7LAE7fozTfYdfKC5Sfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:d7:58:0c:75:ef:0e:cc:b5:dc:ac:3e:01:a1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
        Validity
            Not Before: Jun 10 08:00:26 2025 GMT
            Not After : Jun 11 08:00:26 2025 GMT
        Subject: CN=c817b9d26de583aca14b43c7e2faf8dce50170a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:e6:af:90:91:8a:ba:b3:f3:63:bd:5b:0e:
                    1e:7e:14:93:b6:00:9b:87:11:f5:d8:cc:5c:5c:2f:
                    14:c2:59:3c:ae:60:d7:6d:db:c9:0b:51:6c:64:18:
                    14:02:f4:44:2b:4d:82:3a:44:4d:88:20:9c:9e:68:
                    f4:9a:64:b8:c0:31:49:bb:bc:bd:62:a0:f9:9b:d0:
                    77:70:45:dd:37:3a:e8:ba:e5:ee:7d:01:14:83:dd:
                    12:53:1e:9f:d4:c4:6f:be:60:e3:52:46:28:55:48:
                    a9:e3:70:1c:45:38:ee:8b:18:65:d0:1d:bc:b9:e8:
                    39:df:4a:4a:ce:67:7c:22:cb:1d:94:fc:e3:26:65:
                    e5:1b:37:20:89:99:93:75:8f:ec:39:b7:e8:d0:5d:
                    c2:5d:c7:ea:d0:68:cb:74:97:bf:60:eb:aa:7a:d8:
                    1a:76:fc:8e:03:bc:e3:65:2a:07:1f:55:e0:0c:97:
                    7b:02:22:f1:20:59:7a:44:5e:21:99:ed:cd:37:b4:
                    e7:09:bb:52:0a:fd:78:bf:9c:b9:2d:f3:b1:20:e4:
                    5b:c1:21:78:e1:01:19:e4:38:43:a6:6f:a6:9a:af:
                    f5:39:ba:73:43:fa:24:99:78:ae:fe:c8:7f:15:7d:
                    8c:41:33:07:ed:2b:11:90:26:9b:3a:37:97:e6:3b:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:17:B9:D2:6D:E5:83:AC:A1:4B:43:C7:E2:FA:F8:DC:E5:01:70:A0
            X509v3 Authority Key Identifier:
                keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:d0:2d:f9:4a:0a:ca:ae:9f:b1:a2:82:b5:8b:d7:06:3a:
         8b:19:28:bc:cc:59:31:36:53:79:fe:bd:d7:50:1a:68:ce:af:
         65:21:cd:4d:d1:b2:60:61:74:25:e4:8d:66:e8:55:6f:0e:b2:
         a8:74:b5:98:bb:09:4b:84:34:50:da:81:54:17:9f:da:71:a4:
         88:3c:74:93:72:03:a3:30:a1:64:08:5e:38:cc:a4:5c:49:de:
         7f:31:a0:85:3f:ba:32:58:bc:53:c7:a7:46:9b:e2:d8:94:ef:
         14:8b:a3:a6:2f:a3:9f:ff:f3:91:31:39:d7:da:26:2a:66:4c:
         20:19:52:7a:59:bf:5b:fd:da:3a:06:3d:84:aa:b6:3e:de:7d:
         c6:70:7d:a4:81:44:2e:ec:d3:9e:b8:10:76:7a:7d:63:18:34:
         e0:52:70:ae:a2:a1:90:4f:f7:05:46:9d:cd:9d:a8:2c:e8:5e:
         29:bc:e3:53:b6:ea:cf:d0:30:fa:e1:ef:84:39:42:23:a6:45:
         e5:b5:26:24:44:9c:5e:16:5e:cf:3d:bf:3b:2a:52:e9:3e:ed:
         07:f5:01:cc:4d:c1:ca:29:75:22:c4:66:d5:f6:32:92:e7:5c:
         c4:c4:0f:80:59:26:8f:1e:b0:da:d1:7f:43:99:23:0d:78:4f:
         e8:51:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:22:39 2025 by rpki-client