Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File:                     j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier:          4weKePMtwzcti/5toNHy1Wq14u9DlZfW+aD7JlbT/rM=
Subject key identifier:   42:81:2A:BD:A2:71:99:07:66:4F:C0:F6:1D:BF:93:DD:3A:B7:CC:F6
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer:       /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial:       019748C2F96224177BD5792687CEDFA3250E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number:          1257
Signing time:             Sat 07 Jun 2025 05:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:26 +0000
Files and hashes:         1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
                          2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: 6vaBdFbQ9xbd/BG7/LOTDJ8q12JqtAP29FI8pLYGqP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:f9:62:24:17:7b:d5:79:26:87:ce:df:a3:25:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
        Validity
            Not Before: Jun  7 05:00:26 2025 GMT
            Not After : Jun  8 05:00:26 2025 GMT
        Subject: CN=42812abda2719907664fc0f61dbf93dd3ab7ccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:62:58:61:ba:4f:fa:9f:17:92:df:90:7b:
                    b6:46:ce:61:3d:d1:87:42:8e:a5:47:1a:6a:eb:02:
                    d9:42:b1:aa:30:ca:d7:06:7e:99:f2:35:0c:a5:d3:
                    57:17:ab:ad:88:6d:76:41:f5:69:e2:43:56:f7:b0:
                    b0:a7:a0:a8:bd:38:fa:a1:d2:4b:ed:07:f4:bc:8a:
                    bb:06:ee:53:1c:7c:93:8e:2d:6d:0a:1f:f0:2a:ed:
                    8b:1b:5d:9e:75:e2:14:f1:5f:a9:2a:bf:0b:d6:76:
                    9a:a8:e3:f1:ac:3f:45:40:15:4a:24:26:b6:4d:b4:
                    3d:65:e4:dc:3e:35:46:a4:75:d5:38:43:77:b9:dc:
                    21:b7:a4:87:25:55:85:d7:bc:3a:b9:7d:be:1d:8c:
                    54:17:d3:24:4d:dc:84:71:fb:42:5c:5b:38:94:1c:
                    8f:f7:12:89:9f:4d:2e:1c:de:79:b8:3a:09:f6:e7:
                    50:e0:5e:3a:a6:7a:99:ba:eb:fb:07:53:b8:78:fa:
                    50:2b:23:52:22:7d:40:6b:13:3a:43:23:b7:29:46:
                    7d:15:31:a2:14:8b:8c:c9:1e:39:39:e8:72:b4:95:
                    b1:b3:50:a3:64:0b:1a:a8:4e:1e:b7:79:3f:63:70:
                    8d:41:85:f0:1f:46:91:9f:9d:dc:9f:c9:af:af:e0:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:81:2A:BD:A2:71:99:07:66:4F:C0:F6:1D:BF:93:DD:3A:B7:CC:F6
            X509v3 Authority Key Identifier:
                keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:53:9d:c6:da:cf:44:94:3d:94:36:64:43:08:57:ad:7d:
         21:d3:d5:00:fd:c4:91:44:77:f1:09:92:da:a9:ea:f2:20:93:
         1a:43:68:b8:c1:55:b4:3c:88:79:60:8d:38:ee:d4:e5:c2:66:
         fd:a9:ec:94:4e:a1:16:10:af:b2:36:3a:96:c3:1f:7c:b0:c4:
         5c:03:cc:d0:2c:69:bb:c9:21:f3:cf:5d:5e:33:cc:75:da:fe:
         3b:d8:bb:6f:63:2e:ba:88:4e:ca:11:bd:9f:72:19:53:85:b4:
         60:53:7a:be:19:71:19:54:a1:ac:47:bf:1a:63:d8:9e:71:f2:
         b0:2e:73:bd:ec:d8:20:b7:04:dd:57:17:20:2e:75:21:b1:fa:
         f7:69:8a:3c:5c:6d:13:3a:7c:d0:78:ca:31:4b:8b:a6:56:f0:
         90:e7:20:2a:02:12:c6:1a:fb:2f:7b:10:30:d5:a2:94:85:69:
         d9:c9:51:4a:91:a5:ee:6b:08:a2:06:76:7d:59:f6:3b:be:44:
         b8:67:a3:ad:af:02:f4:4a:e2:ef:62:ab:2d:02:ba:f3:0c:e2:
         50:c9:c5:9e:47:0c:d7:39:e4:c9:60:0f:e6:9f:75:cc:ab:72:
         7b:c0:e7:78:5f:2e:0e:5f:c3:e7:3b:5f:8e:9d:fe:ae:65:e9:
         63:4d:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:40 2025 by rpki-client