Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          6pzy5txJyN17wuUJzD4Hew6vfFE+Rn6MTdtcxsHZ19c=
Subject key identifier:   2F:11:C2:7D:F0:3B:0F:F8:7C:5E:8A:FE:5C:7D:F4:4C:C0:97:42:59
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       01976BF46E422890E92DD5777AD35B62190B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1516
Signing time:             Sat 14 Jun 2025 01:01:10 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:10 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:10 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=)
                          3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: TT34LCu8Hj4VYqzlta6gnEwq0QTayoUK8mNlMBqiQMY=)
                          4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:6e:42:28:90:e9:2d:d5:77:7a:d3:5b:62:19:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Jun 14 01:01:10 2025 GMT
            Not After : Jun 15 01:01:10 2025 GMT
        Subject: CN=2f11c27df03b0ff87c5e8afe5c7df44cc0974259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:b8:fa:c4:06:d0:ac:29:2f:f7:d1:77:a8:
                    39:6e:19:f7:aa:62:eb:fc:3c:fc:8a:4e:78:ff:53:
                    dc:12:ad:0c:60:ce:cf:ba:a2:92:2d:a6:3f:c5:6e:
                    f7:a9:f0:ab:90:d3:a4:b9:9d:56:04:1a:6e:95:14:
                    16:8f:33:cc:11:2c:fa:5d:97:5a:20:a0:39:9c:f8:
                    4e:af:12:4e:27:81:88:5f:88:d2:fe:d7:d8:04:bf:
                    b3:42:fd:53:0c:0e:c8:f1:32:f9:21:8e:60:ad:21:
                    60:6f:69:b7:56:c7:31:60:c7:b8:fe:a0:f1:8f:79:
                    92:ce:57:2d:1c:c1:b5:40:74:2b:8d:89:a9:c9:7d:
                    1f:85:74:8f:a9:e0:2f:ff:e7:02:6b:67:ab:b3:81:
                    8b:5b:df:2b:99:fb:cc:df:2a:19:19:56:32:c1:90:
                    fb:56:56:12:5d:9a:0a:b6:a0:91:a7:e5:d9:77:5a:
                    b9:85:ae:57:98:aa:10:28:3e:6b:e1:d1:7b:5c:49:
                    af:fb:7a:94:56:94:9b:17:1c:56:dd:5a:26:b8:b9:
                    45:6a:2a:37:1b:92:04:41:f8:19:96:35:3e:d3:fd:
                    e2:c9:50:26:59:12:d4:48:d8:f8:b9:97:cd:c3:f9:
                    e0:63:52:62:6b:21:ee:ab:11:78:42:1b:9e:33:2b:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:11:C2:7D:F0:3B:0F:F8:7C:5E:8A:FE:5C:7D:F4:4C:C0:97:42:59
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:5d:db:5e:d3:72:57:58:10:f5:61:29:60:bc:58:71:22:
         0e:97:d7:4e:ba:b5:e5:09:d1:19:f8:9f:37:1d:8f:0f:66:69:
         e1:e6:bf:f2:d7:82:66:91:70:88:23:63:c6:c4:d6:66:21:35:
         e0:a5:f4:12:23:a3:5a:91:e5:2c:f4:b4:2f:37:84:96:f9:1c:
         2e:40:3c:7b:5d:f7:3a:19:c1:ab:72:72:66:02:f7:00:76:a1:
         06:e8:28:87:dc:fb:82:5f:a2:62:ff:cc:39:4b:9e:00:da:ac:
         82:8d:77:ce:34:0d:2d:e6:52:86:f7:b0:5c:70:0e:a3:22:cd:
         02:b4:85:b5:e5:8b:de:c1:69:d4:5c:6c:6d:fc:77:33:58:68:
         46:97:1a:0a:e5:35:c4:83:3a:75:c9:40:dc:41:d4:1b:ec:e1:
         7f:b0:f4:84:19:10:5f:2a:34:2a:23:ed:e9:ec:36:ed:61:3b:
         8f:90:29:f8:33:36:f7:93:45:c6:17:31:2c:0c:f2:71:31:6b:
         d1:ce:ba:8d:38:94:04:76:df:66:80:19:06:c0:74:45:da:dd:
         44:f1:68:e4:a2:0e:19:4c:77:f3:1c:0f:5d:ba:b1:84:05:e1:
         ca:4b:e7:c4:07:77:58:e7:68:72:98:bb:d5:0c:6b:c0:a0:7b:
         34:20:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:16 2025 by rpki-client