Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
File:                     JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft (raw, json)
Hash identifier:          qkJH+xXGFFzFzrfAKH8SXIQ7qRbcdAaf/uWHNa95Vpg=
Subject key identifier:   04:A0:31:77:0C:D6:66:9A:30:E5:62:FC:55:2D:4C:55:9C:61:0E:42
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Certificate issuer:       /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial:       019779424C199BBD9E88B703E00788800A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 15:01:17 +0000
Manifest this update:     Mon 16 Jun 2025 15:01:17 +0000
Manifest next update:     Tue 17 Jun 2025 15:01:17 +0000
Files and hashes:         1: JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl (hash: Gn8rbqRM06gtdZ9z1sZf8yuugRnuGfGfrG1M2tsefQk=)
                          2: gMRvTZlzAH8OSJTttCNJ8Cyj7p4.roa (hash: p+544aG9xmj27ntfAfl2YzT4JNjkf/4dF3LHwwe9mf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:42:4c:19:9b:bd:9e:88:b7:03:e0:07:88:80:0a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
        Validity
            Not Before: Jun 16 15:01:17 2025 GMT
            Not After : Jun 17 15:01:17 2025 GMT
        Subject: CN=04a031770cd6669a30e562fc552d4c559c610e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:ac:4e:aa:37:fc:dd:12:92:97:73:1d:1e:
                    50:cc:0c:75:19:51:06:00:25:a3:28:80:e8:12:52:
                    dd:e4:96:8e:c8:ea:e5:da:32:58:56:09:4c:b6:cb:
                    32:75:1c:47:ea:ae:5f:1c:4d:68:0b:71:1c:8b:fb:
                    45:3e:85:0e:40:be:8f:b8:ce:95:78:6f:ef:92:a8:
                    61:62:91:4d:5f:c5:be:95:28:ac:92:6d:b4:7f:8f:
                    7d:7e:b8:91:2c:91:35:e3:5f:f0:84:fb:85:c9:52:
                    5b:74:9d:1e:d2:59:dd:9a:e1:64:59:54:47:64:19:
                    21:b8:40:7d:4f:6a:00:cd:3a:f4:ca:bd:a0:77:22:
                    d5:53:ac:a5:d2:72:46:11:c8:dc:e7:91:c2:65:77:
                    a6:8f:be:da:3d:df:41:f8:45:f3:2b:ef:11:39:fc:
                    8e:42:16:dc:d9:0c:47:b8:3e:d6:ed:4a:11:8f:47:
                    7b:2c:15:fe:b4:66:14:39:56:5c:96:82:03:df:1a:
                    25:e3:8f:69:c4:f2:dd:f8:97:87:8d:01:6c:12:2b:
                    45:e6:92:72:35:ef:c4:b3:65:dd:b5:73:34:d9:3f:
                    08:2a:de:89:31:b7:13:f6:22:ea:77:8e:e7:b3:e6:
                    d0:e8:ea:49:04:4b:99:b7:7e:8d:1d:37:18:39:d4:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A0:31:77:0C:D6:66:9A:30:E5:62:FC:55:2D:4C:55:9C:61:0E:42
            X509v3 Authority Key Identifier:
                keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:18:4a:d0:11:9d:79:75:30:5b:cf:66:07:fb:42:8e:72:8e:
         52:51:27:5e:15:9d:ff:cc:07:cd:b3:eb:9f:a0:2c:0f:56:05:
         d0:04:05:f1:42:e1:45:61:80:f7:b2:8b:a1:4e:60:82:e8:04:
         78:7c:6f:56:22:02:fe:b0:1b:46:dd:90:9b:e7:00:76:7b:a0:
         e4:35:79:a9:85:cc:c1:e2:11:5f:c4:7a:e2:74:17:43:ec:67:
         e2:13:1f:c2:8f:41:cd:7a:5c:92:a4:be:f2:29:d7:89:04:9d:
         b0:82:98:96:f7:4b:5d:f8:81:2e:5c:93:4c:95:00:0b:61:7e:
         7d:17:c3:ba:34:a5:3b:ea:5b:76:33:10:2d:b2:2d:e0:80:39:
         32:fa:52:8b:66:a4:0b:d6:9e:a2:57:bf:4f:75:0b:bf:ee:30:
         bb:e0:ab:26:98:93:b9:9f:67:8c:26:9e:ec:5f:2b:45:89:61:
         92:de:49:e8:2e:fd:10:84:98:fc:95:72:1d:86:1e:ff:d0:3b:
         b7:f6:b5:17:f8:b5:f3:a8:0f:c1:91:a8:7c:41:0e:24:82:ed:
         41:7e:b8:7c:4f:e9:b4:4d:4c:e7:b0:0d:af:82:fc:3b:46:19:
         45:17:21:2a:84:93:f9:a1:89:35:aa:38:30:de:d2:65:64:42:
         27:40:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:28:33 2025 by rpki-client