Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File:                     iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier:          wCBDsS5p2o5lWq9XugWb9EhPSPkpdFmNwiaT6KrxCJc=
Subject key identifier:   ED:96:80:65:DF:1F:29:37:5B:79:46:A5:1A:DC:C4:30:FD:01:64:F1
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer:       /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial:       01977B9E1597CE71C6204E1241F6726A59EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number:          12B8
Signing time:             Tue 17 Jun 2025 02:00:47 +0000
Manifest this update:     Tue 17 Jun 2025 02:00:47 +0000
Manifest next update:     Wed 18 Jun 2025 02:00:47 +0000
Files and hashes:         1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
                          2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: 10IyYUm6JFXwsek2zAw2xT61QaMdGttNS2JCOWLbo3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:9e:15:97:ce:71:c6:20:4e:12:41:f6:72:6a:59:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
        Validity
            Not Before: Jun 17 02:00:47 2025 GMT
            Not After : Jun 18 02:00:47 2025 GMT
        Subject: CN=ed968065df1f29375b7946a51adcc430fd0164f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:b1:6f:32:16:ac:79:94:a5:88:78:0c:fe:
                    52:ec:0d:15:5b:c4:88:0d:f1:0f:7a:47:d8:83:4b:
                    d6:96:05:d0:46:f1:ed:2e:7c:9d:bd:60:3b:78:c1:
                    b2:69:57:53:82:74:cb:a8:92:9f:ff:1f:40:cb:20:
                    0e:3a:f1:bb:a1:0f:c9:e2:be:44:3c:a1:db:e4:31:
                    f0:f3:80:99:09:63:f5:7e:49:fe:66:49:2e:74:27:
                    86:0d:dd:8f:a4:49:bf:2e:30:47:b1:ab:8c:ac:f3:
                    5b:2d:ce:f1:b2:f9:e8:58:11:94:0f:de:af:48:b3:
                    d2:a3:8b:8e:6c:0d:05:3d:00:db:e1:f9:40:bc:16:
                    58:19:13:be:67:d7:48:13:d9:43:02:77:b1:cc:04:
                    82:32:41:9b:cb:26:a0:49:82:f3:e8:db:e2:44:1f:
                    ad:62:d7:6a:7b:75:2d:54:6b:0d:5e:5f:8e:65:fa:
                    ac:1c:fe:10:d8:14:69:3d:7a:06:14:85:b4:df:8d:
                    c9:f1:2e:91:de:59:a1:8a:4b:39:3f:83:9b:1a:d4:
                    60:6d:6b:40:f1:d9:13:7a:ba:a7:93:57:a0:7c:a8:
                    4e:c5:6a:fc:cf:b4:21:39:a3:ed:79:fe:10:9b:91:
                    26:fe:95:98:49:1b:f5:f7:f1:72:fc:bc:89:63:0f:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:96:80:65:DF:1F:29:37:5B:79:46:A5:1A:DC:C4:30:FD:01:64:F1
            X509v3 Authority Key Identifier:
                keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:ca:93:ec:0c:4f:38:e4:89:18:fc:c0:bb:86:e9:76:ce:
         95:43:37:2f:f2:6b:e5:1e:e3:f3:6d:77:a6:1b:97:d6:0a:f3:
         bf:d8:3c:ce:f4:84:e8:8b:2a:5d:fb:e9:8c:26:f3:7b:04:d2:
         42:34:ca:61:11:79:be:cf:d7:86:9e:1b:e0:c0:25:6e:1f:7b:
         5a:88:4f:dc:60:e4:fe:24:ea:da:eb:4d:47:da:27:51:d9:b0:
         2a:f3:2e:d1:3a:0b:64:72:46:84:94:91:ae:39:22:80:fa:30:
         48:0b:f8:5d:51:d6:d7:b7:c1:8f:7c:70:8f:86:43:7e:e9:0c:
         12:a8:e1:45:9f:1c:af:78:51:85:88:2a:e0:36:45:0f:35:04:
         49:b4:72:5a:07:70:ab:1e:5c:ce:eb:55:96:57:01:6d:3e:38:
         ac:b3:7e:1a:e6:0e:6c:53:27:bb:c9:fe:ac:b5:97:2d:be:81:
         f3:a5:f7:00:74:44:16:69:5f:17:f1:76:9c:41:2b:e2:da:97:
         3a:10:a3:90:23:15:3b:cc:ef:5d:d6:b8:6d:5e:ea:fa:9d:7e:
         c8:d2:6a:cf:ca:80:56:e8:69:d2:87:46:72:84:55:21:53:8e:
         77:6d:d4:3e:db:6d:d9:15:a3:9f:19:f2:e0:45:0b:d6:38:ab:
         8b:7f:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:23:29 2025 by rpki-client