Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
File:                     Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft (raw, json)
Hash identifier:          B5MkTkdGPJCUUg2cqGS3kdRn3k8xkBf1DQo+8Ln6LR4=
Subject key identifier:   BE:1E:AA:CC:BF:72:DF:E5:35:D1:74:8D:CB:51:1B:9C:82:D1:20:0C
Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
Certificate issuer:       /CN=265e85f8262888b54a849bdcf4cec50316911a08
Certificate serial:       019774C06A8F0C35C7DCEB47F41CA45FDC48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
Manifest number:          0425
Signing time:             Sun 15 Jun 2025 18:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:56 +0000
Files and hashes:         1: JLn2-fTGyC2xpSevRCFHgEEXDMM.roa (hash: FRV3MQqTud+Qm1Qqb2d3CxKErVFv6q4kbbzR6kYGMOc=)
                          2: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl (hash: VDnP9muJkjyvTJf8lcvCvdrKB3j7p8eFxo3NUbGn0v4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:c0:6a:8f:0c:35:c7:dc:eb:47:f4:1c:a4:5f:dc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08
        Validity
            Not Before: Jun 15 18:00:56 2025 GMT
            Not After : Jun 16 18:00:56 2025 GMT
        Subject: CN=be1eaaccbf72dfe535d1748dcb511b9c82d1200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:f3:88:38:ec:0e:2e:64:33:c6:17:19:d9:
                    c2:0f:20:fb:a0:d7:40:89:cc:6a:55:cd:b6:d5:bc:
                    5f:19:08:4f:d2:50:07:6c:ae:98:4d:fe:e0:9d:17:
                    22:00:ab:5a:9e:ec:92:f7:5e:2c:63:9a:55:dc:5c:
                    21:c7:12:1d:5c:ff:05:c6:c4:98:f2:e6:87:26:6c:
                    57:7d:ec:25:2b:d2:e5:f2:b4:95:bc:aa:70:e9:d6:
                    4e:2f:70:57:ed:08:f3:99:c0:6f:e2:b1:02:23:98:
                    2e:4a:ac:2d:c0:d0:1d:05:80:ec:65:93:e0:56:43:
                    6f:7d:1b:21:78:0d:e7:43:b7:f1:74:56:70:43:77:
                    66:3e:55:90:1d:ae:ff:31:c3:d1:5d:e6:b6:66:71:
                    1b:37:37:a0:8a:ae:32:14:62:81:35:ff:81:f0:1e:
                    f6:fe:50:89:a3:10:89:2b:ad:3b:c3:fe:71:8d:40:
                    59:81:57:67:0c:8b:88:6b:fa:5a:f3:6a:f4:80:bf:
                    1e:80:ce:48:5a:38:ac:9a:02:7f:81:68:32:f3:8c:
                    b4:c8:48:e9:d3:df:00:a1:bf:24:8b:69:cd:68:68:
                    97:d5:57:72:e6:18:36:6a:26:3b:23:cd:3b:47:5a:
                    73:09:ee:86:b5:dc:e5:d6:e1:7e:cb:23:6b:33:2d:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:AA:CC:BF:72:DF:E5:35:D1:74:8D:CB:51:1B:9C:82:D1:20:0C
            X509v3 Authority Key Identifier:
                keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:dd:55:1b:3c:dc:ab:ef:62:56:c2:52:71:8b:75:70:97:5d:
         63:7d:15:10:b9:37:1b:8d:1d:f0:9a:6e:41:af:5d:5a:40:fe:
         3c:8e:b4:95:c6:e8:7d:ec:cb:1e:13:74:f4:6d:ef:55:23:c7:
         1a:cb:88:4c:ee:04:dc:8a:5d:c0:9f:94:d8:19:c1:43:62:1a:
         5b:85:2f:4b:47:c9:1e:f7:89:66:5e:73:32:59:49:c7:ac:4e:
         1a:73:a5:35:98:03:b7:38:71:57:ef:67:92:9c:fa:01:f2:a2:
         9a:be:76:61:89:46:5f:92:7e:b3:9d:62:1f:b1:c2:79:fc:a8:
         41:9a:8b:d3:0b:12:8d:1f:29:0c:c4:fe:33:d6:fc:b2:55:22:
         6f:c0:fb:7c:eb:1c:25:f4:e5:0c:ca:4b:2c:a8:82:cb:0e:5a:
         ca:42:20:b0:bd:c7:15:bf:9d:aa:13:fb:34:c9:68:1a:49:96:
         66:8c:1a:35:ea:5a:a8:e9:a9:52:b6:68:91:37:2a:f0:cd:c9:
         80:9d:7c:50:ba:d1:92:53:93:91:41:da:2a:93:18:e7:77:6d:
         32:1a:18:f8:1d:f3:69:e0:78:21:99:74:98:90:f2:72:94:89:
         39:07:f5:d0:71:db:02:8b:cb:7f:4d:41:9e:5d:83:09:2f:7d:
         85:6e:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:20 2025 by rpki-client