Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
File:                     J0iJxEELQxcvQcjBSuqJm7sq2r0.mft (raw, json)
Hash identifier:          1R5pYBe7AD/QVadSXoRwfHhigprt0OOjNlAe+lvJ2uE=
Subject key identifier:   C7:26:0A:BC:78:0F:6D:2C:C8:44:83:AF:D1:3B:C0:CC:B0:A0:B1:C3
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Certificate issuer:       /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial:       01974BC4AACCA3FAC4E73F12B77173905898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
Manifest number:          0B71
Signing time:             Sat 07 Jun 2025 19:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:09 +0000
Files and hashes:         1: J0iJxEELQxcvQcjBSuqJm7sq2r0.crl (hash: uO1OA4BRfjmlVs5xUppW2HwNC0W13WVaFpwEsTouuHM=)
                          2: gFEXxLFUU8a__opADc1vfw8jMw8.roa (hash: GCpDj9Bn6kn9jlHLv2Vqxyqzwpl4Us46FPPhGtO7UYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:aa:cc:a3:fa:c4:e7:3f:12:b7:71:73:90:58:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
        Validity
            Not Before: Jun  7 19:01:09 2025 GMT
            Not After : Jun  8 19:01:09 2025 GMT
        Subject: CN=c7260abc780f6d2cc84483afd13bc0ccb0a0b1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:db:40:d1:38:31:03:f0:4f:ca:1f:62:8e:
                    e6:68:11:d5:7f:e0:a1:77:44:ef:e1:d6:cf:2e:7d:
                    93:22:1c:92:07:18:e5:fe:35:70:1b:de:89:21:70:
                    88:df:5d:ad:87:a5:60:7f:84:67:fa:c4:2f:cd:0e:
                    d6:3d:0a:6a:94:f9:63:18:1c:77:a9:4b:ac:c8:39:
                    d4:93:9c:8b:ed:ec:36:d1:62:27:9e:f9:bc:c2:9c:
                    6b:c7:2e:0f:8c:de:e5:eb:11:3e:fa:b9:00:ed:f4:
                    1d:48:3c:6b:b1:a6:47:d7:2e:23:ac:51:6c:ba:db:
                    73:06:eb:9e:4c:c9:bb:3f:a3:43:38:9b:ca:f5:9c:
                    cf:fc:8f:aa:88:69:10:76:99:ce:c4:16:4f:49:c5:
                    15:41:25:f6:cf:f8:00:ea:2c:ac:4c:c9:b4:c1:ac:
                    68:f5:be:cb:18:ee:71:54:c1:d0:11:97:a4:5a:7f:
                    53:d0:a8:44:a8:a6:3a:a1:ca:b6:3b:75:1f:e5:4b:
                    a5:b2:3a:c4:97:e4:99:e6:5e:96:85:d3:27:86:be:
                    ab:29:3d:c5:d0:74:c8:e7:c2:d2:ec:53:df:da:a2:
                    26:83:25:26:d6:3f:de:d8:fb:c4:6a:24:32:f7:dd:
                    1c:9c:04:9f:ab:79:6a:40:3b:71:21:b6:01:d0:56:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:0A:BC:78:0F:6D:2C:C8:44:83:AF:D1:3B:C0:CC:B0:A0:B1:C3
            X509v3 Authority Key Identifier:
                keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:91:eb:e1:33:11:47:38:aa:d4:e5:31:17:d4:1b:0d:76:33:
         e6:35:e4:1c:6f:49:64:72:b9:f6:f9:19:94:a4:e6:cb:a1:46:
         f7:5f:e9:77:11:54:ec:6c:1c:fa:35:64:b1:da:ff:d4:74:fd:
         07:ba:a8:ea:83:a1:82:46:30:d8:c8:e7:cc:d7:5a:a1:fe:a3:
         4e:c0:c7:5a:c9:ee:30:19:8b:8f:a3:4f:28:93:f9:e2:ac:7d:
         77:c6:d3:b2:6f:4e:62:cc:07:62:2a:cf:8f:8d:b6:b5:75:43:
         e0:ca:05:03:93:79:2e:87:38:6f:ca:1e:25:14:0f:63:28:4e:
         ac:ed:45:95:a2:15:f1:bc:3e:93:77:3d:c8:34:f7:39:0f:38:
         c8:ee:8c:91:b2:c3:1f:60:55:39:82:5c:22:28:a3:19:fc:b6:
         57:ca:bb:45:e2:c4:7a:aa:66:00:05:e6:89:24:25:36:da:4c:
         43:77:6b:31:36:b3:a2:7b:8a:9d:0b:6c:1f:4c:0e:0c:b8:08:
         7e:48:25:e5:b2:4c:7e:e2:ce:1d:20:5f:79:c7:0f:59:20:8b:
         7a:84:22:a3:d4:63:8d:5c:06:c3:1f:97:6c:7d:f7:17:89:cb:
         bd:60:29:f6:25:28:e1:5d:23:a9:72:21:fd:fd:84:83:08:e9:
         58:ab:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:49 2025 by rpki-client