Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File:                     jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier:          c/3nQU7nY0VisRt1phMplx5LN/eVLBmXXOduepGIps4=
Subject key identifier:   26:2F:01:95:99:75:45:66:6F:93:58:64:16:38:44:F6:A8:8F:6E:3F
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer:       /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial:       01974BC45D33C0240EEC0507421BE0587AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 19:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:49 +0000
Files and hashes:         1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: vfNMXOiPknjokC8hcgPHJg0T66OBQURSDXmEkxxKD+g=)
                          2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:5d:33:c0:24:0e:ec:05:07:42:1b:e0:58:7a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
        Validity
            Not Before: Jun  7 19:00:49 2025 GMT
            Not After : Jun  8 19:00:49 2025 GMT
        Subject: CN=262f0195997545666f935864163844f6a88f6e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:50:32:15:17:09:de:1e:37:71:89:48:14:
                    61:a9:98:ba:63:bf:f0:d1:07:b2:49:a5:0e:b6:5b:
                    94:98:5c:09:38:74:70:c6:52:cb:f8:8b:77:98:ae:
                    a9:67:a9:88:d2:74:3b:1a:72:68:8e:89:83:39:75:
                    5f:e8:c8:21:67:2e:62:77:08:02:aa:ce:c6:a5:fa:
                    e7:7f:22:7c:c2:5c:34:20:69:11:e3:53:55:9c:c3:
                    3c:08:eb:74:a3:18:b1:8d:8c:fd:44:c5:20:18:8a:
                    19:55:cb:68:73:60:dc:b0:67:0b:15:b7:71:6d:58:
                    88:b6:a9:6b:59:6a:af:fa:30:84:73:83:ca:52:1c:
                    76:b1:0e:68:02:5b:b2:82:bf:e8:32:74:94:5a:c4:
                    73:05:d2:f9:45:ba:2e:b0:0b:8e:a6:de:48:76:8c:
                    28:f8:b3:31:5d:f3:58:c5:5a:3f:6e:c4:b8:87:fa:
                    2d:33:c8:d9:7c:c5:da:b1:dd:d3:67:b3:03:e1:e5:
                    59:f0:48:48:ac:ae:ae:18:29:77:be:a3:ac:bf:b2:
                    90:84:6b:a2:f6:4f:66:fe:48:eb:0c:e4:60:ca:7f:
                    0c:03:5f:7b:e8:bc:10:ff:ca:f2:bb:54:d7:6b:86:
                    d4:6e:e8:09:b4:32:2a:32:fe:db:ed:2a:9f:41:18:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2F:01:95:99:75:45:66:6F:93:58:64:16:38:44:F6:A8:8F:6E:3F
            X509v3 Authority Key Identifier:
                keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:13:b1:79:29:11:31:a4:37:22:f8:9d:9f:27:d2:34:6e:9f:
         53:ba:75:9c:68:a0:3a:2f:e1:9c:c9:59:b9:43:2e:1f:dd:34:
         63:a1:17:3e:44:cc:0b:9d:b3:2d:af:7c:cf:c2:53:79:01:2a:
         c1:0a:a2:7a:64:00:33:85:40:f8:1c:62:0b:d0:0e:7f:d6:9a:
         89:08:7b:6b:dd:f4:e4:3b:9f:77:57:ea:4b:76:9b:1d:88:26:
         ce:2c:15:dd:df:75:aa:db:01:65:41:12:d1:0f:7f:13:db:d0:
         b5:61:e7:ed:5f:0a:27:1d:6d:e2:60:9f:77:31:e6:9c:53:c5:
         41:b5:60:6c:03:7a:61:25:c9:64:88:26:34:a0:d6:e6:f1:44:
         84:6d:22:d2:ba:66:59:b9:42:75:96:d3:8b:ca:d5:a0:0f:f1:
         59:5f:70:a1:5a:2b:1a:20:4a:28:fd:32:90:69:b0:53:f3:f4:
         99:0b:75:77:54:fd:c9:ae:2d:73:9e:6c:49:c4:c6:c4:e1:fd:
         27:0b:a1:a0:28:9a:72:35:a8:48:9b:1b:60:c9:33:ca:bd:97:
         d5:ae:67:38:49:b8:26:ad:de:bb:1a:30:27:44:7d:67:dd:c6:
         7f:b1:74:e5:15:37:41:b6:dc:f5:59:46:66:d2:ce:63:4c:b9:
         a7:5d:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:42:22 2025 by rpki-client