Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
File:                     JTncEcLyIukQROG-eygeV23u5Fs.mft (raw, json)
Hash identifier:          C9lRpFKUtgH6iiafl3zShJlkhC0HhwVGO4tVBdKg3Oo=
Subject key identifier:   BE:C7:1E:7C:0C:3B:B5:E6:81:FE:B0:62:3A:04:7A:56:B7:70:47:49
Authority key identifier: 25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
Certificate issuer:       /CN=2539dc11c2f222e91044e1be7b281e576deee45b
Certificate serial:       01976997B3D604EBCC296B35412C74AA3C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
Manifest number:          63
Signing time:             Fri 13 Jun 2025 14:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:39 +0000
Files and hashes:         1: JTncEcLyIukQROG-eygeV23u5Fs.crl (hash: a/07DssRVeWVw+cERHTkcTmUJUi44sX3iYw2Q0VLhlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:b3:d6:04:eb:cc:29:6b:35:41:2c:74:aa:3c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2539dc11c2f222e91044e1be7b281e576deee45b
        Validity
            Not Before: Jun 13 14:00:39 2025 GMT
            Not After : Jun 14 14:00:39 2025 GMT
        Subject: CN=bec71e7c0c3bb5e681feb0623a047a56b7704749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:3b:0e:6c:15:62:41:d1:fc:e6:c0:ab:35:
                    44:35:ce:40:f2:ae:93:4e:55:b5:ab:dc:3d:c0:21:
                    66:6f:97:77:a1:65:f1:8a:17:ee:ed:39:81:ac:a5:
                    6e:a6:3f:1f:98:7e:06:f6:e0:c1:c1:f1:79:eb:91:
                    b3:1e:4d:b1:ec:a6:c1:30:85:9c:7d:95:88:8e:01:
                    b5:c8:42:35:29:c1:77:f9:fe:a1:c0:1d:00:46:18:
                    51:32:2c:4b:ed:71:56:38:5b:c2:af:67:a4:93:24:
                    bb:4d:f9:29:48:4a:fa:70:38:ef:49:e0:58:a0:8f:
                    9c:cd:c4:f0:e9:57:25:02:ed:bf:fe:b7:80:f0:72:
                    3d:58:93:e6:c1:19:1e:21:6f:9e:2e:83:81:16:d7:
                    be:49:3c:e8:fe:42:95:d1:0d:6e:6d:b8:41:44:f2:
                    e5:fa:bd:d9:26:7f:94:43:d8:30:a7:96:ff:43:24:
                    5a:16:fb:53:0b:9a:78:c5:6d:3e:6b:b3:bb:0f:f7:
                    a7:a2:e8:7e:42:42:57:65:63:7d:83:8e:e3:87:5f:
                    3a:12:2c:70:22:89:7f:1a:90:0d:5a:01:e4:ce:aa:
                    60:83:1d:24:dc:18:18:14:7f:82:13:ab:41:9f:f0:
                    29:a0:63:39:87:29:d6:d7:07:90:48:2f:d5:46:1f:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:1E:7C:0C:3B:B5:E6:81:FE:B0:62:3A:04:7A:56:B7:70:47:49
            X509v3 Authority Key Identifier:
                keyid:25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:6d:52:ee:99:f8:7b:f8:e3:14:b7:6e:f4:0a:ff:92:77:4b:
         2c:61:01:1a:a9:f7:8d:77:d8:5c:f7:ca:a9:80:24:f2:c4:b9:
         4c:f2:4a:97:c4:d3:1e:7d:36:b5:20:46:16:58:b0:56:66:12:
         23:c0:7a:ed:fc:bf:0e:b5:73:9b:48:73:bd:eb:d5:ba:2f:76:
         9a:ad:01:7f:ab:74:05:29:16:8f:4d:cd:ec:9a:e2:21:1f:e6:
         f4:b5:53:68:58:77:59:60:f1:39:fe:16:dd:69:09:aa:16:e2:
         c0:dc:e5:8d:60:9a:38:16:ce:2f:60:8d:7e:79:e6:53:d5:c5:
         ab:49:36:e4:84:55:77:27:ac:fa:73:96:d0:07:d1:6e:66:a3:
         7f:8a:09:65:68:54:28:fe:ce:dc:bc:f2:46:44:8f:2c:dc:39:
         67:9f:16:8c:e2:93:55:7c:73:ab:d1:3c:2a:b7:4f:06:dd:7b:
         27:5b:01:5b:cd:34:7e:a7:83:df:3a:cf:61:60:8d:5d:e9:84:
         99:b6:3f:4e:c2:80:bc:83:97:07:4b:cf:c4:34:af:cf:18:9c:
         45:31:53:ab:08:79:20:7e:05:ca:25:11:48:30:bb:12:21:e9:
         ad:b0:39:ae:95:13:ec:ed:5d:b8:3e:bc:42:33:60:08:b4:4e:
         4e:af:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:33 2025 by rpki-client