Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File:                     Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier:          hXL6eH9W8fNKG3JDLrn4u/SwdJ87wbB1O+UnxeyIuq8=
Subject key identifier:   12:BB:E1:97:32:2E:4D:83:DD:30:37:2F:B6:3E:CA:35:ED:48:65:30
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer:       /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial:       01976F2CDE134F494B7B9941B7DA6F2CBD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number:          060D
Signing time:             Sat 14 Jun 2025 16:01:40 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:40 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:40 +0000
Files and hashes:         1: 3gd5yhd86K_T7jr5SxEq6WbDoig.roa (hash: ojHL5lyJlzOv7t+xWWNn1JpZWPbuIJXizb57Of8VZwQ=)
                          2: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: /r/Kk4MQGtvyZ3bUoswMKRCkUhdz1robMTTL2xZNTFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:de:13:4f:49:4b:7b:99:41:b7:da:6f:2c:bd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
        Validity
            Not Before: Jun 14 16:01:40 2025 GMT
            Not After : Jun 15 16:01:40 2025 GMT
        Subject: CN=12bbe197322e4d83dd30372fb63eca35ed486530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:ef:7b:3e:22:e1:61:4f:84:9b:90:b7:9e:
                    2f:88:c2:2f:73:3c:6b:d5:5b:4c:40:09:7f:6f:f2:
                    b4:15:45:d1:74:45:50:05:ce:c2:dd:e6:5f:6d:51:
                    57:bb:32:67:e6:e3:4b:21:1c:72:73:9d:be:cc:4a:
                    cd:f4:2b:3b:d6:6a:ae:ac:84:bb:e8:aa:5e:3a:30:
                    33:17:3d:64:a4:be:8d:52:ea:a5:ec:25:c1:71:f1:
                    01:a3:66:07:6f:3d:9b:52:e4:dd:ea:ed:2b:9c:f5:
                    d9:3e:ae:93:13:fd:29:d0:64:5a:bd:d1:a8:cc:f2:
                    c2:74:dc:6d:6f:69:ef:5f:3f:f9:aa:55:0d:e7:1f:
                    de:a5:55:0f:46:ce:d1:f6:21:21:22:ff:92:c9:23:
                    e4:40:9e:a7:10:44:1d:a6:9d:ad:79:c0:51:86:d6:
                    0d:b2:7e:63:93:e3:17:a7:69:f2:c6:5e:f9:31:45:
                    fa:b4:07:7d:aa:6c:d1:8c:2d:50:9a:b0:fc:fd:17:
                    a7:8f:a6:e3:e5:2a:14:93:63:91:da:60:fb:52:93:
                    3e:54:9a:f0:1b:c0:e1:a0:83:b9:69:06:51:4a:91:
                    ba:67:35:ab:9f:d2:ac:71:c4:ed:4f:df:e2:a2:a8:
                    25:c9:9f:3e:3d:54:19:d6:bd:9e:cc:20:9f:77:2c:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BB:E1:97:32:2E:4D:83:DD:30:37:2F:B6:3E:CA:35:ED:48:65:30
            X509v3 Authority Key Identifier:
                keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:81:3e:b1:16:1a:26:c8:77:a4:24:2e:ee:31:cc:4c:f5:
         4b:7d:e6:c2:83:36:26:f1:a2:2c:26:37:f8:3e:6f:7d:f3:c9:
         3a:d7:57:73:23:2d:37:da:98:d1:9a:6d:c0:cb:31:c2:f2:a3:
         c7:cb:f5:71:4d:ab:6d:6c:24:5d:2a:0b:08:40:3c:08:35:dd:
         5d:68:ba:8a:e5:a8:69:26:51:5a:80:bb:b6:47:43:76:29:1d:
         ca:0b:65:72:7c:fe:e4:fa:09:21:44:25:41:8e:50:39:0a:a5:
         f5:5e:d4:85:1b:35:d6:4c:88:15:08:97:80:29:20:f2:6f:0e:
         33:bb:02:f3:a6:21:d9:84:e4:a5:f5:41:92:ee:d6:22:72:eb:
         2a:b7:7f:d3:fc:05:df:54:e2:d7:f0:74:1d:46:f6:7d:cb:a4:
         f1:d0:fc:67:07:7d:39:7c:ad:cb:5b:1f:fa:a3:01:d6:28:09:
         75:c2:12:85:93:7f:fb:bc:20:e0:8a:0b:26:8f:dc:5a:0f:37:
         b7:c6:78:39:f8:93:9c:aa:b4:5b:a8:2e:c4:41:98:f1:fb:c8:
         82:5b:0b:fb:73:1f:22:7d:dc:0b:a0:eb:ed:b0:ff:a0:7b:dd:
         32:c2:45:44:3c:f9:0f:20:e5:82:64:5d:56:50:b9:d8:a4:8a:
         59:c4:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:11:35 2025 by rpki-client