Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File:                     J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier:          w2j30lfkOipLMYbe2tCji+9H3XAkGAurq4ZOBzQiir8=
Subject key identifier:   44:01:EB:2A:B4:36:34:45:82:BF:92:46:AC:88:B8:E8:E0:07:7B:06
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer:       /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial:       0197789D150022D0AFC650B280B2FD7D443B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number:          0C8B
Signing time:             Mon 16 Jun 2025 12:00:49 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:49 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:49 +0000
Files and hashes:         1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: yH1HxGprEwp+K1CMmAICt/WWgcVnfkvQA1Y2g/lOo+g=)
                          2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9d:15:00:22:d0:af:c6:50:b2:80:b2:fd:7d:44:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
        Validity
            Not Before: Jun 16 12:00:49 2025 GMT
            Not After : Jun 17 12:00:49 2025 GMT
        Subject: CN=4401eb2ab436344582bf9246ac88b8e8e0077b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:41:fb:c6:b4:71:dc:ff:85:24:17:9a:ce:
                    90:ad:0d:a6:9f:d7:e9:8e:a9:da:d8:f8:79:d1:24:
                    40:06:d1:41:b6:32:9d:94:1a:18:6b:cc:39:ea:92:
                    19:c7:36:5c:08:c5:eb:2d:b0:ca:71:42:43:1c:30:
                    e4:96:47:68:bd:86:5a:56:cd:d3:a3:1e:77:e2:04:
                    09:3c:0a:63:49:a5:15:f2:e4:0b:cd:5b:7e:96:00:
                    6e:57:05:55:4a:c4:80:29:c6:d6:11:ec:fd:0f:97:
                    be:66:4a:fc:0f:93:00:01:98:69:ad:03:2d:6b:a2:
                    a1:f5:bb:0c:9f:62:16:15:68:dc:b6:86:ed:0d:7b:
                    ab:b9:89:2a:07:20:6c:55:d7:cd:3a:7f:5c:86:de:
                    99:95:ce:29:ef:1c:ea:12:e1:8a:8d:5a:1b:a0:1b:
                    93:52:8d:c1:c7:2d:49:10:1d:f2:63:ab:c1:2c:8e:
                    4f:f6:be:fa:c6:9b:64:03:86:8c:17:28:3f:8e:3a:
                    cb:f9:0c:5a:1d:63:08:21:eb:22:e1:4f:c6:8d:aa:
                    82:ec:29:f9:03:1c:e3:cf:88:06:22:60:2c:e3:e4:
                    67:23:5e:30:45:a4:0c:a8:1b:a0:c4:fb:ae:ec:50:
                    fd:7e:5e:cc:6d:2f:64:5c:5d:10:7a:65:4a:32:23:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:01:EB:2A:B4:36:34:45:82:BF:92:46:AC:88:B8:E8:E0:07:7B:06
            X509v3 Authority Key Identifier:
                keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2a:5a:dc:00:d8:17:69:9a:e8:c6:1f:9a:6f:f2:43:d0:74:
         0b:c5:9b:e9:a0:28:23:83:02:0b:59:02:56:cd:a4:29:c5:dd:
         02:a1:34:40:82:73:92:4d:06:8a:26:0b:ec:ad:0d:ea:30:d9:
         cf:70:13:94:6b:b5:eb:63:01:86:4b:b1:69:14:b1:aa:15:36:
         63:95:96:00:22:f7:e2:18:cd:1a:82:d9:69:03:65:c7:86:51:
         28:6e:bd:34:6c:05:98:80:6b:83:48:66:7d:9a:7a:4b:9e:d1:
         f1:80:a5:f9:19:bf:ac:72:48:8f:cf:b0:b8:c1:96:df:e1:d1:
         19:a5:91:d6:b2:01:b6:b4:28:39:df:1f:0c:46:23:04:8a:c4:
         7f:73:6f:c8:00:c1:05:2f:0a:5e:09:f9:fe:39:3c:f3:c6:7e:
         25:45:e8:78:b3:93:e9:34:d3:f2:18:0d:d1:6d:b0:96:23:fb:
         5c:45:b9:8d:05:dc:f8:93:c8:af:ab:f5:ee:8b:dc:b1:64:10:
         dc:34:a5:24:36:c8:ce:bc:a7:8e:95:38:bc:ee:bd:ae:18:92:
         b4:d0:c1:d5:f3:22:cd:ca:7c:6f:f6:b8:2b:e5:a6:81:fd:ea:
         b0:b2:f8:14:d4:1f:86:06:1a:02:03:6a:49:97:43:94:f7:63:
         4d:b3:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:51 2025 by rpki-client