Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          WmWp2wZT2h3IRkY5t+ZoTOs6YXewxpZXzG/6RHVz4Ts=
Subject key identifier:   82:82:76:FD:56:1D:70:D8:4F:15:2D:73:08:AB:82:55:3F:ED:26:1C
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       01976D3E903C3F25C53401983921E257BC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 07:01:45 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:45 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:45 +0000
Files and hashes:         1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
                          2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
                          3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: 2fC16k9H1g6asd5TwFjcITFzLXbblPNAfsqAop68o5M=)
                          4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:90:3c:3f:25:c5:34:01:98:39:21:e2:57:bc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Jun 14 07:01:45 2025 GMT
            Not After : Jun 15 07:01:45 2025 GMT
        Subject: CN=828276fd561d70d84f152d7308ab82553fed261c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:53:55:55:62:79:7b:c5:1f:82:14:c9:03:
                    2e:04:d3:aa:fd:c5:cc:07:3a:5a:1f:a3:80:e2:60:
                    07:8c:bb:7c:aa:c8:5d:20:e9:49:6f:f5:6c:8c:ea:
                    f5:c2:91:cd:9c:10:c2:19:68:11:63:c5:ca:09:3a:
                    47:dc:b6:ef:4c:8b:c6:d9:45:2b:30:e8:87:88:e8:
                    96:e1:e2:cb:9a:4e:9a:b1:62:46:57:4d:5c:a0:4c:
                    ff:9c:e3:6c:7b:77:11:22:5f:56:ed:6c:1e:d0:dd:
                    9b:53:25:20:74:e7:ba:7f:13:ab:aa:38:df:b7:b0:
                    6f:18:92:fb:a5:5f:26:61:0f:24:8d:36:13:44:7a:
                    b6:d5:ee:40:83:c8:91:32:6a:2a:94:cd:e6:99:40:
                    5f:d2:72:fb:2c:3a:bf:95:20:e9:89:f7:bc:96:5a:
                    76:1f:3c:7d:0b:ab:85:4a:c8:3f:f4:7c:f7:24:8c:
                    a5:33:28:a0:23:b5:93:e2:cd:6c:9e:ad:c3:c0:7a:
                    cc:1a:e6:14:67:8a:0f:42:96:60:0c:3a:8c:08:f9:
                    cd:46:1e:bb:e8:c2:5b:4c:1f:62:0f:57:b4:d7:46:
                    3a:fa:17:b8:3f:c8:a9:e7:a8:62:8b:59:0d:c8:aa:
                    db:99:35:b8:73:5a:12:4c:d1:ac:e8:ea:f0:99:1b:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:82:76:FD:56:1D:70:D8:4F:15:2D:73:08:AB:82:55:3F:ED:26:1C
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a7:63:2a:33:29:dd:54:b9:2d:7a:56:e6:2a:c5:25:de:c1:
         16:f8:51:bc:16:5f:8e:bb:05:42:29:f8:cd:ab:67:af:85:5f:
         b4:cf:e0:45:b3:1f:ef:e7:1a:15:43:18:74:d0:e5:ad:a4:a2:
         d9:a6:ad:c5:98:f2:43:1d:a4:30:b7:b9:b9:92:6d:93:ec:00:
         b6:40:57:e0:3f:d4:a2:95:b8:f0:7d:52:3f:f7:51:ab:66:b8:
         47:aa:88:3e:85:1f:1a:c1:34:c2:50:8d:ab:1d:36:c2:cc:c2:
         c4:e3:e9:44:d6:6f:55:ce:2c:4c:f5:13:02:97:87:9d:14:72:
         fd:7c:06:b0:fc:38:da:9f:24:ed:10:f9:18:eb:00:ef:eb:eb:
         bd:8b:a9:42:36:18:38:a5:81:5e:f3:cd:57:94:93:aa:14:5f:
         41:3a:78:90:9d:68:21:ed:fe:b7:4f:52:4f:53:ef:42:78:89:
         5a:7a:09:8c:b4:2c:a4:52:7f:14:d8:b1:3a:ed:3b:06:ac:0e:
         d5:dd:d0:26:4e:42:ae:7e:cd:42:99:b6:da:ed:1c:f1:e3:86:
         31:bb:ff:cf:65:65:6a:21:2d:3a:f4:bc:01:28:30:b7:51:d2:
         44:cf:bb:73:37:f7:ee:ec:4b:14:00:2e:dd:22:86:b7:ba:fd:
         09:d7:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:26:33 2025 by rpki-client