Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File:                     jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier:          lpCmmXJGL7hKk6tNaI+iIKxNmDeV4m0UgiQqNbk4o8A=
Subject key identifier:   6F:4A:06:84:66:D6:C3:26:FD:5D:20:03:C0:66:62:56:22:81:2E:F6
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer:       /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial:       0197507C657ABAAA189600CF77B86C052FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 17:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:18 +0000
Files and hashes:         1: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (hash: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=)
                          2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: TMnokEYLwIDGWUWtynYkHHWwD1lQMZcDRpWEXuMZUz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:65:7a:ba:aa:18:96:00:cf:77:b8:6c:05:2f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
        Validity
            Not Before: Jun  8 17:00:18 2025 GMT
            Not After : Jun  9 17:00:18 2025 GMT
        Subject: CN=6f4a068466d6c326fd5d2003c066625622812ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:6e:48:34:f5:85:cb:f2:a2:e7:7e:c4:5a:
                    5d:1c:65:37:90:39:8c:e8:c2:3a:cd:f9:b1:0c:8d:
                    d7:e9:e3:45:4b:a0:74:98:cf:85:38:f5:6f:de:60:
                    80:34:08:d0:21:a3:58:0c:d9:f9:bb:37:a3:2c:76:
                    bc:96:03:5b:01:53:49:81:d8:be:7b:92:9f:be:77:
                    37:19:d1:18:3c:03:e6:e4:44:4e:30:0d:4d:63:f4:
                    fc:8d:5d:5f:6f:6c:3d:8c:aa:3c:16:74:05:56:b6:
                    ee:f7:ce:8c:ea:7d:af:d0:f5:64:3f:8e:52:fa:ad:
                    cd:e0:e0:4a:f6:36:7e:d5:8e:92:31:3d:ba:54:5a:
                    58:ed:a2:73:d4:48:91:8f:db:be:db:85:65:58:ac:
                    e7:32:c9:d9:8c:d8:93:d3:d3:89:71:fa:8c:05:45:
                    e5:5f:e1:27:4c:d0:7c:0c:6c:3a:48:a6:6a:7c:a2:
                    f5:4f:7b:01:aa:02:db:98:bc:7f:70:f6:0e:fb:a6:
                    bd:e8:a6:7a:09:bf:8e:0e:7b:1a:54:21:d3:df:e3:
                    fd:1e:7c:bc:a9:fc:07:84:4d:6d:88:84:51:17:4c:
                    cf:ca:90:af:fa:12:23:95:07:c5:77:cb:a5:8e:33:
                    05:75:27:7d:49:4d:d4:98:54:55:e3:be:f3:14:c1:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:06:84:66:D6:C3:26:FD:5D:20:03:C0:66:62:56:22:81:2E:F6
            X509v3 Authority Key Identifier:
                keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:97:64:b3:fd:d7:7f:01:d9:c2:c1:bb:85:b8:43:94:24:
         cd:d7:5b:1f:48:95:29:87:15:f5:92:d9:a8:bd:7b:ef:3c:6a:
         b6:a9:98:a7:ae:0b:f9:1d:d0:e3:93:bf:d4:6c:5f:d1:6e:f8:
         94:5c:90:be:62:b2:01:60:3a:75:26:18:eb:f6:66:7c:05:5d:
         97:28:1f:12:6d:2c:51:d0:f9:f1:e6:f3:98:48:ba:8c:45:0e:
         e8:85:8b:42:f2:b8:4e:1c:b9:54:83:b1:3d:fb:c1:84:86:e0:
         b1:3d:77:ef:b8:42:7d:4b:84:61:e2:7b:70:04:d6:66:55:09:
         5a:85:a1:45:2f:14:91:34:68:9c:3e:88:ec:30:bd:ce:2e:46:
         29:d0:8b:95:e9:8a:5b:2b:f9:10:12:89:2e:6a:29:a0:f9:f0:
         b6:34:fd:41:ba:47:ad:4d:d2:32:be:d2:a4:2d:d7:ac:55:e2:
         61:28:bd:21:72:03:d2:6c:c6:ab:16:48:ff:b1:f2:ab:ed:4c:
         cf:ec:d6:1a:9b:67:d1:b8:91:9d:27:81:6d:f5:39:e9:27:80:
         ab:39:31:a7:64:4f:1e:de:60:d8:86:48:16:df:a0:ee:c9:26:
         1d:dd:f3:de:42:61:d7:e3:46:a9:da:2d:c6:56:2e:69:0f:ab:
         d0:a0:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:27 2025 by rpki-client