Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          d+tTEHb3LpkxTxh91mTHNQCLX/TZDZrg0YeAAE8qXGY=
Subject key identifier:   36:7B:26:5E:02:BD:F2:9A:1F:3B:D9:D1:97:D4:29:76:6F:F4:90:6D
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       019787D89E150E79C931C32F098F8023C498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          12
Signing time:             Thu 19 Jun 2025 11:00:09 +0000
Manifest this update:     Thu 19 Jun 2025 11:00:09 +0000
Manifest next update:     Fri 20 Jun 2025 11:00:09 +0000
Files and hashes:         1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: MYuCnp6D74Ida1mQf48hF1Iy710ILscf729eWA9arQE=)
                          2: Z56wz9s-yA71TOQ3V7HmB0iZlE0.roa (hash: DwyslAfs3QgOyERfkmn0OYGStc2kCKpsEIT1p+3pYB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:d8:9e:15:0e:79:c9:31:c3:2f:09:8f:80:23:c4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Jun 19 11:00:09 2025 GMT
            Not After : Jun 20 11:00:09 2025 GMT
        Subject: CN=367b265e02bdf29a1f3bd9d197d429766ff4906d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:13:61:0b:f2:9e:dd:49:7a:1a:7d:e7:79:
                    e6:b0:72:d3:73:b6:29:92:47:e8:c4:d5:5d:49:94:
                    95:b1:41:92:c4:a2:a2:49:2e:d3:46:31:ca:67:b4:
                    e3:a1:ba:8e:4c:05:7e:cb:16:e0:42:27:65:44:cb:
                    d6:57:7b:fe:22:3d:ff:55:11:e9:e5:1a:f4:ea:ff:
                    bc:a4:cb:96:5d:a5:d2:cf:17:ef:41:72:e9:24:95:
                    f0:67:93:33:6c:21:0a:e7:14:c4:f3:fb:78:26:b6:
                    61:83:54:c2:e6:32:92:e2:aa:f5:56:97:25:ab:c8:
                    b6:08:ef:63:3b:44:16:55:d6:d6:e3:e6:14:b7:34:
                    3d:5b:cc:b4:23:8a:57:8a:ba:75:fc:24:8c:d9:29:
                    ab:e6:a3:66:a1:0c:1f:a1:bb:e7:79:a5:c9:e9:1e:
                    fb:f9:e2:76:2e:ce:ea:a8:48:4c:f1:26:d5:a4:45:
                    3f:f4:54:ba:c5:1f:3d:e1:59:da:98:f6:a8:08:be:
                    5a:d3:98:78:17:72:65:97:5a:1e:97:a9:ff:e3:43:
                    5c:28:6c:ca:14:49:1f:ef:f3:49:67:14:78:61:15:
                    ef:76:78:e1:c5:93:7f:c6:1b:15:c7:70:40:99:b6:
                    83:d4:2e:05:2b:9a:ce:83:b5:93:31:38:50:98:f5:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7B:26:5E:02:BD:F2:9A:1F:3B:D9:D1:97:D4:29:76:6F:F4:90:6D
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:23:04:97:93:da:b7:9c:73:8c:2a:85:4e:3f:88:00:07:
         f9:20:bb:01:6c:2e:3f:de:e9:42:db:1e:76:21:69:d7:2b:a3:
         5d:25:3f:e8:93:55:bc:99:27:cf:d2:8a:6d:d5:9f:c5:fb:f1:
         f4:8d:0d:c4:a8:f9:3c:1b:46:08:36:14:fe:4f:95:e9:64:c1:
         7c:13:38:34:60:bc:4c:cb:a2:82:c2:f6:cc:48:20:f9:7a:79:
         68:d8:1a:af:50:7e:22:be:57:6a:fd:7c:59:96:8c:6a:c5:2b:
         2e:e2:1f:52:70:a0:d4:b3:fa:8f:52:10:de:fb:59:7e:fc:c4:
         86:42:25:44:23:4d:fc:7b:06:6a:74:5b:a6:49:70:c6:7a:95:
         29:2d:9c:f7:52:84:b7:e5:87:da:d4:18:30:d3:a5:9c:dd:eb:
         fd:81:04:e6:8d:83:25:28:a4:c9:9f:d2:89:a2:d5:d6:7b:03:
         fa:61:34:3a:a1:f4:9f:ad:bc:c3:9d:3f:b5:ea:55:55:94:b3:
         e0:ac:66:9b:b4:be:f6:f3:38:3f:98:04:cc:e0:6b:d9:94:d6:
         ec:5f:5a:3b:d6:65:a0:7a:dd:49:c0:5d:1b:3c:fa:db:00:32:
         43:84:1f:d7:45:23:8e:26:29:28:e5:b0:50:8e:e6:b0:b7:3b:
         93:c1:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:20:10 2025 by rpki-client