Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier:          wJmanjSi33EqXvjkyHmLqtvXJ7Zx/iA4hy0xmbpNoxg=
Subject key identifier:   59:A9:B4:2B:21:E7:9E:D5:2E:DC:8F:F2:8A:8D:A4:97:87:77:3B:92
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer:       /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial:       01975459AA0AE65845769D3EEB5CC2EA9289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number:          1581
Signing time:             Mon 09 Jun 2025 11:00:51 +0000
Manifest this update:     Mon 09 Jun 2025 11:00:51 +0000
Manifest next update:     Tue 10 Jun 2025 11:00:51 +0000
Files and hashes:         1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
                          2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: TdrVouRYqIUofSIlwjLSHMSuKLW3K4+MhHbx0WNZHBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:59:aa:0a:e6:58:45:76:9d:3e:eb:5c:c2:ea:92:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Validity
            Not Before: Jun  9 11:00:51 2025 GMT
            Not After : Jun 10 11:00:51 2025 GMT
        Subject: CN=59a9b42b21e79ed52edc8ff28a8da49787773b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:62:cd:eb:7e:6d:c0:58:4c:06:06:f2:29:
                    de:5b:74:a2:e3:9f:bc:2a:35:80:9f:4d:51:78:a3:
                    f2:a0:9d:30:1e:3b:6d:ca:c0:18:e6:87:74:df:30:
                    ee:94:8c:66:d2:2a:6c:bf:c1:a0:61:7c:06:44:3a:
                    5f:94:4f:64:f5:c1:8f:21:57:78:a9:de:60:07:f0:
                    6f:b9:29:62:be:64:d3:06:29:3d:03:e2:7d:87:eb:
                    12:56:6d:30:7a:db:0c:92:e5:46:c8:60:8b:b0:6b:
                    a1:7e:52:46:2f:10:23:4a:3c:74:b9:93:d9:18:22:
                    d5:ed:17:dd:6b:3c:50:67:6b:f7:f0:2c:eb:eb:77:
                    06:c7:f4:43:66:f9:a0:07:49:cc:4b:a9:c3:e3:31:
                    5b:b3:ca:db:d3:70:4f:ad:62:4f:6c:6b:f9:d9:7e:
                    3b:72:c5:0e:b8:3b:9e:30:b7:c9:de:bb:da:cb:32:
                    18:d4:c6:13:e1:89:fd:f5:62:8e:8a:04:c7:29:f6:
                    bf:34:7e:c0:4d:9c:72:97:a8:54:98:a9:6c:40:c6:
                    4c:f5:10:7b:cc:2d:27:21:d0:c0:84:b9:c6:07:fa:
                    26:b7:37:0e:48:0a:c2:02:7f:f8:8d:82:7b:63:f4:
                    08:ee:cd:34:58:4c:69:f9:83:0b:a3:42:74:4a:96:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:B4:2B:21:E7:9E:D5:2E:DC:8F:F2:8A:8D:A4:97:87:77:3B:92
            X509v3 Authority Key Identifier:
                keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:42:1b:f7:f2:cc:61:bc:d9:62:62:c0:26:02:73:9f:e5:
         39:4a:33:e5:f0:ab:5e:1d:40:00:25:7b:1d:67:b6:a2:df:0a:
         ae:df:b9:00:15:51:67:56:03:ab:ad:9e:ab:22:cc:78:ac:0a:
         83:43:46:00:cc:4a:d0:9e:31:42:17:19:bb:6e:08:e6:59:94:
         7a:61:cf:f0:84:a4:4f:17:92:25:d5:7e:da:da:c3:1d:50:53:
         74:84:03:1a:a4:d0:ce:cd:2b:b7:ec:fb:68:2b:90:b4:da:15:
         0c:da:47:0c:3b:a7:19:cc:14:df:06:22:ee:21:cf:c0:72:01:
         d2:fa:4f:87:35:45:02:87:4d:e5:60:39:9e:e7:0c:1f:dd:5b:
         3c:09:b3:9e:2c:09:f4:3e:4e:50:36:7b:ec:9a:82:a3:28:67:
         a3:5c:71:fe:0c:4f:c8:c1:a8:f8:2b:5e:97:d9:7b:bb:c9:ae:
         76:56:53:1c:0a:f8:4f:dc:0f:26:af:4c:1c:33:b9:84:50:51:
         ce:eb:ef:8d:0f:c8:37:b6:08:de:37:be:d9:6a:27:24:4f:63:
         01:f1:e0:1f:4f:08:6f:5c:34:ca:f1:bb:cc:56:be:94:7d:50:
         c8:1f:cb:03:b6:0e:93:28:85:a1:07:cf:db:2c:7f:3b:3d:96:
         3c:dd:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:20 2025 by rpki-client