Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File:                     JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier:          Bw0bxrxCyVsCbUkYnWPuRv0MPIRnY+y7KGZaADYg+f8=
Subject key identifier:   EC:01:16:F9:B5:F9:CD:4D:3A:FD:E5:2F:35:75:A5:62:DC:03:8A:88
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer:       /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial:       019747E78D71410A13BA5A5941AD3ED9D3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number:          0712
Signing time:             Sat 07 Jun 2025 01:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:46 +0000
Files and hashes:         1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: DBdfQv2Od2nOqhpcZykGe6UKyrMqSAyv+ILCTWcbm6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:8d:71:41:0a:13:ba:5a:59:41:ad:3e:d9:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
        Validity
            Not Before: Jun  7 01:00:46 2025 GMT
            Not After : Jun  8 01:00:46 2025 GMT
        Subject: CN=ec0116f9b5f9cd4d3afde52f3575a562dc038a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:cb:d6:dd:5a:e9:80:c7:fd:12:fb:8b:72:
                    47:e0:60:c9:d3:c0:02:7d:4a:a3:9c:49:53:25:d8:
                    43:4d:7d:7b:20:18:cb:b3:46:62:e9:9a:f3:b0:8e:
                    87:87:6f:78:7a:ac:2d:53:4a:e3:16:fa:5d:c5:85:
                    b8:93:f5:92:0a:e5:2b:58:63:70:5c:47:e3:f8:fd:
                    ab:e4:0d:f7:c6:f8:bb:35:fe:48:72:f4:82:97:11:
                    eb:95:97:34:dd:fe:c4:a2:84:da:2c:7e:40:19:c7:
                    ff:e0:99:53:48:bf:0e:c2:07:4d:9d:1b:68:17:2d:
                    b9:80:40:15:31:eb:f1:4b:c2:2c:7a:0e:e6:d0:20:
                    e1:9d:ad:f8:ec:49:8d:02:ca:80:03:2e:27:10:a8:
                    70:1e:9e:5b:d1:8e:d0:03:5e:7b:43:a4:68:96:2c:
                    76:25:63:b3:e5:75:bc:13:73:f5:e2:1d:5a:c9:86:
                    04:27:30:6f:b1:72:f7:76:b7:01:2a:0c:e0:ba:39:
                    b3:c8:d3:b0:e4:f0:b7:da:75:f1:87:8b:51:77:d9:
                    e4:10:c8:fb:a6:96:b4:60:b8:b2:62:9c:4c:9a:28:
                    b2:33:68:73:a7:e5:53:01:2b:f4:02:78:5b:6d:1b:
                    64:5a:84:a3:03:e6:97:82:ef:7e:1b:80:31:45:66:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:01:16:F9:B5:F9:CD:4D:3A:FD:E5:2F:35:75:A5:62:DC:03:8A:88
            X509v3 Authority Key Identifier:
                keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:91:f0:74:7e:fb:ca:54:bf:1f:82:e9:33:c7:69:93:cf:33:
         32:5c:9c:44:a1:18:9f:93:f7:0c:d6:74:59:65:3c:12:f5:46:
         f1:11:9a:b3:c8:c9:20:d6:42:c1:19:dc:05:c7:95:54:a6:81:
         3e:8c:1c:d6:e3:04:fd:e1:1e:0a:88:cc:cb:e0:c6:45:56:88:
         37:2d:8c:3b:c9:7a:20:ce:c6:20:a8:5b:28:b3:22:6e:24:1d:
         d5:c0:26:f1:d7:64:13:07:6f:e1:d5:7f:e8:f9:38:39:22:1b:
         c3:dd:a4:fd:40:1b:a2:95:b5:0a:75:18:83:42:52:91:e3:fe:
         ec:00:5d:41:fb:5b:b3:2c:aa:8e:2a:b6:8e:4f:d2:2b:47:db:
         ac:51:06:33:ec:f7:6a:bd:f7:24:06:77:84:1c:95:4a:44:ea:
         9a:3e:10:b0:1b:20:c8:c6:d7:50:f9:ea:65:ac:21:d4:ef:3a:
         59:9f:0d:8e:36:89:c9:d1:4a:2e:70:be:9e:7b:6b:de:da:55:
         63:13:62:dd:0c:cb:82:5e:81:8d:ec:88:b9:da:57:11:5e:dc:
         f9:89:71:45:71:34:06:83:3a:22:dd:61:bb:0b:d3:76:00:89:
         94:ef:1e:00:42:ee:58:d2:69:8d:cb:97:e0:16:85:ee:c1:a2:
         35:ba:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:15:49 2025 by rpki-client