Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          E412K+GdR31vt2N0FnKfObgT6debo0976FYGXPycJl4=
Subject key identifier:   65:33:AB:27:1F:C5:1E:22:D6:AC:26:1F:C2:7E:92:28:A5:ED:DC:DE
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019769CEFB4EFAB81D17A7A8B7DA66260D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          0668
Signing time:             Fri 13 Jun 2025 15:01:01 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:01 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:01 +0000
Files and hashes:         1: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: p9e6uX26fK9PcmvQJZImpO/M2sfbXQy64Bo0Kk7UTyY=)
                          3: rDlkyigziSazpq7KkBehs1Ktw-g.roa (hash: 0blcMDi8SQKGoP7zdqimF2o0peaDeYPg+Ie2kFh43K4=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:fb:4e:fa:b8:1d:17:a7:a8:b7:da:66:26:0d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Jun 13 15:01:01 2025 GMT
            Not After : Jun 14 15:01:01 2025 GMT
        Subject: CN=6533ab271fc51e22d6ac261fc27e9228a5eddcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:58:89:24:35:eb:28:5b:06:d5:5e:94:d3:
                    b3:2b:1b:d5:bf:17:53:8d:9e:49:94:99:c9:b9:89:
                    8d:af:2f:a4:e3:b1:c7:d7:77:df:9f:a7:b6:72:d5:
                    cb:6a:af:63:d2:9f:7c:e6:13:70:b4:8f:e5:cd:e9:
                    db:40:34:6c:23:94:89:59:6d:0b:67:fc:86:7e:8b:
                    a9:79:a4:8c:26:94:77:b8:d3:e4:40:05:cd:c9:c9:
                    b4:a9:d4:7c:d7:15:59:69:2d:4e:64:d0:74:3a:59:
                    18:e0:98:c8:f6:f9:8d:42:67:b9:14:55:78:34:95:
                    69:55:19:28:43:d7:4c:8a:42:04:96:94:25:a7:52:
                    34:54:bd:d6:af:ac:1c:e9:1c:a8:67:fb:39:98:c8:
                    bb:95:4d:5c:b8:8d:b4:77:95:7e:95:b7:4b:43:5d:
                    8f:3e:1e:ca:5a:4b:12:4c:ec:d1:e0:ca:58:75:83:
                    5a:db:09:d6:75:29:b1:41:66:f2:bf:5b:22:fa:c9:
                    ff:5b:95:40:41:eb:cd:56:fe:70:78:4a:ac:ce:f6:
                    1c:d0:0f:81:34:4a:b6:eb:da:8d:02:38:c1:4f:69:
                    a8:85:c8:2a:3b:78:2a:e4:c1:58:8f:75:d7:f7:4f:
                    b5:00:d2:56:61:ed:a2:96:42:86:c1:4d:7b:b9:76:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:AB:27:1F:C5:1E:22:D6:AC:26:1F:C2:7E:92:28:A5:ED:DC:DE
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5e:86:8a:f4:ff:d6:7d:b8:2f:b0:00:b3:85:31:22:b2:35:
         69:7e:f5:64:35:db:e1:8a:e8:5a:60:6d:56:73:43:b4:49:e9:
         f4:c9:02:f6:90:15:4c:56:8a:a6:c2:b1:ce:8c:9e:02:c6:da:
         ad:6e:55:52:d4:ef:45:b3:0d:02:be:fb:3e:bc:5b:a9:70:10:
         ad:9f:98:95:f2:85:a3:7a:27:45:8d:6c:51:c3:ff:4d:e5:f5:
         9e:e5:8a:73:b7:58:f7:66:c8:18:fe:4c:57:b9:9a:78:ba:a9:
         ee:3a:1e:43:8a:6c:93:e2:63:63:cb:ef:7d:fa:8e:39:fa:12:
         0c:be:e6:bf:58:ac:d0:82:44:3b:f7:a8:c8:44:e0:a8:d3:0e:
         49:d4:c8:09:8a:de:7e:61:7d:e2:98:da:c1:ce:8b:58:c9:30:
         01:dc:19:7f:91:9f:fc:d6:0a:16:58:8d:5b:a9:ef:d9:87:d6:
         cb:d9:08:97:1b:bf:cc:19:5b:58:db:36:26:d4:58:65:bd:c8:
         7c:00:15:6c:fa:3c:60:cf:36:a0:2c:e3:22:68:5d:b6:61:16:
         9e:46:74:96:71:7d:a7:73:e6:93:3f:a8:bb:1d:72:79:81:76:
         e7:92:18:9c:03:65:ee:1e:d6:ff:52:67:f6:dc:4e:3d:cf:13:
         a5:28:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:50 2025 by rpki-client