Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier:          VagyCZBAgPjHPYBb3j/O0NspNL+fGHRLvKZ+Fyfnm9k=
Subject key identifier:   9D:68:18:26:2B:87:A6:46:19:92:BE:59:CC:B0:0C:5A:11:FC:10:D9
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer:       /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial:       01975E01DABD59D33C99D41E65FD3B259300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number:          1586
Signing time:             Wed 11 Jun 2025 08:01:09 +0000
Manifest this update:     Wed 11 Jun 2025 08:01:09 +0000
Manifest next update:     Thu 12 Jun 2025 08:01:09 +0000
Files and hashes:         1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
                          2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: GEznvF11Mzs0dWbm2l0tMXVg6uEMHmq2RdnFch2Ohn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:01:da:bd:59:d3:3c:99:d4:1e:65:fd:3b:25:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Validity
            Not Before: Jun 11 08:01:09 2025 GMT
            Not After : Jun 12 08:01:09 2025 GMT
        Subject: CN=9d6818262b87a6461992be59ccb00c5a11fc10d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:a2:3f:f2:a0:07:c5:f8:1c:1e:28:27:b3:
                    8d:a8:ca:37:be:44:55:2a:6c:22:6f:c7:f6:0d:e1:
                    6b:6e:30:42:47:d3:82:ad:42:43:46:7f:8f:fc:4b:
                    3c:48:7e:ee:fd:59:e7:e9:28:cb:52:9e:1a:7c:9e:
                    8f:79:7b:89:04:88:68:8b:65:71:8a:b7:f9:a0:d9:
                    24:f1:79:59:6c:1b:a4:93:af:6c:b7:b1:88:64:2f:
                    c4:b6:5a:51:75:40:0e:f6:28:4e:da:cf:5d:a9:23:
                    47:0c:bc:0c:5d:6e:6a:91:e5:5a:7c:f6:31:07:e6:
                    7e:9f:5b:c6:f8:34:82:20:b9:29:dc:74:70:76:dc:
                    fa:51:47:8f:62:c0:12:75:5d:fd:10:64:83:ac:41:
                    b0:9a:91:6a:28:33:5e:d0:ee:98:12:69:bd:18:8f:
                    9e:27:5a:d4:89:2e:b2:61:e2:46:3a:52:d0:08:1d:
                    ed:66:3c:cb:83:65:fe:23:76:fa:d4:31:21:71:66:
                    4a:d5:07:d4:e1:5f:be:9c:c2:17:cf:67:95:8d:03:
                    57:90:29:40:68:87:7c:af:81:32:db:07:dd:ea:e9:
                    86:a7:13:27:83:0f:31:cd:31:bb:36:bf:85:7f:20:
                    d7:9f:56:83:97:7f:1c:e5:2d:5a:d3:7a:95:cd:32:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:18:26:2B:87:A6:46:19:92:BE:59:CC:B0:0C:5A:11:FC:10:D9
            X509v3 Authority Key Identifier:
                keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b5:0d:86:57:49:b7:98:75:ff:b9:00:9a:c0:49:7d:24:5e:
         86:91:7e:3c:25:e7:16:2a:51:a9:e0:76:ea:e9:a5:63:b5:14:
         fb:34:d0:f8:8b:17:b7:39:eb:e9:3e:8e:69:d6:2f:86:ac:e4:
         7a:c1:e7:a0:e8:ef:77:e5:cb:4f:f9:91:6a:c4:cd:f4:29:ed:
         43:6f:6a:05:81:c0:e1:5d:74:ce:d1:54:fa:e4:fe:38:fd:0b:
         3b:7a:a7:90:39:2a:95:bc:0b:65:e6:2b:23:f4:18:3e:39:36:
         d1:ca:14:53:b9:82:69:09:8e:2d:81:ec:b4:51:ee:62:84:e1:
         e0:c5:e9:17:f1:91:0c:07:8d:0c:6a:a3:37:47:8e:27:5e:49:
         0d:a5:b6:67:a9:34:8d:84:6a:5e:65:c6:19:62:73:08:c8:79:
         15:03:1d:03:34:74:e4:b8:52:c1:8c:30:07:1a:a3:2b:25:b9:
         7c:87:11:44:63:6c:75:bc:a9:d8:ef:e1:80:1c:a9:98:f0:8c:
         12:c4:41:e1:d4:77:da:20:dd:e6:ed:54:62:00:a2:aa:14:1a:
         3e:51:c2:ea:9a:65:3e:df:d8:2d:ff:45:d2:47:4b:f3:0e:42:
         d0:0d:18:98:87:2a:c2:38:fc:ed:c5:40:b3:a3:cc:45:8a:7d:
         84:6b:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:47 2025 by rpki-client