Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          4jlSTG8wW0U9Qc7SqyE+lht2Rer+Fh0q5DftvcM85GA=
Subject key identifier:   3E:C4:E3:1D:EB:7E:C7:FA:D1:61:CE:6B:3A:56:17:19:EE:BE:0A:1A
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       019769CF1BD5F9755688EF46F8C8A63B7C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          02BC
Signing time:             Fri 13 Jun 2025 15:01:10 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:10 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:10 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: 0BXOizEiV3JnFGKwmIAx8ea4FbEU5z8j2wknDjQ1Bs8=)
                          2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:1b:d5:f9:75:56:88:ef:46:f8:c8:a6:3b:7c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: Jun 13 15:01:10 2025 GMT
            Not After : Jun 14 15:01:10 2025 GMT
        Subject: CN=3ec4e31deb7ec7fad161ce6b3a561719eebe0a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:52:c0:c9:fd:76:e7:86:c5:4d:da:bd:27:
                    31:5a:49:4a:40:4e:cb:d5:f4:ea:63:e6:39:61:15:
                    d8:d7:ea:26:39:92:13:10:e1:a4:d4:2d:d3:9f:2e:
                    0b:64:7c:3f:29:0e:b6:04:9f:6f:ef:b4:1c:c5:3e:
                    6b:ee:d5:06:1b:c2:bb:89:26:00:87:59:7e:e6:9f:
                    d5:f6:b5:90:18:13:2e:9f:94:9d:f2:e7:2d:e8:f4:
                    4b:86:24:c5:b4:50:cf:b1:06:51:07:43:3b:71:76:
                    31:59:43:5b:3c:8c:83:57:49:a2:b6:82:b6:00:b7:
                    15:84:08:10:69:09:11:3b:76:84:29:2d:2e:61:38:
                    71:ef:72:0c:83:c2:9f:fc:85:9d:53:a2:97:c9:26:
                    7a:3e:de:95:7e:c0:4c:55:97:33:a0:69:29:24:2b:
                    8c:2f:6e:be:66:e1:c5:9a:85:49:53:cf:6a:34:cd:
                    f9:ac:2a:92:5b:2f:88:36:f2:99:da:e7:ff:d9:7b:
                    31:ae:49:f6:1a:f9:11:04:e5:dd:4d:56:7e:22:00:
                    b5:93:3b:b4:66:5a:2b:1b:a1:39:18:6c:d0:a5:35:
                    f9:69:65:b8:2a:a4:5c:d0:8a:ac:02:f1:e2:fb:35:
                    6b:91:b0:8d:a2:45:d7:e3:b6:4b:cb:a7:ee:43:dd:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:E3:1D:EB:7E:C7:FA:D1:61:CE:6B:3A:56:17:19:EE:BE:0A:1A
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:ac:99:a0:e9:9f:0d:06:01:d4:4b:05:ce:36:fc:f2:79:
         13:c4:0b:cb:69:c2:98:f6:82:e6:44:76:8c:cd:2c:20:de:41:
         75:c6:8a:05:69:32:ee:c1:22:28:d0:5d:c1:dd:02:eb:cb:5a:
         cd:e0:5b:0a:b9:37:52:9d:94:3f:b3:b2:cd:3e:1f:71:6b:b6:
         d9:f9:55:5e:47:ee:e0:99:30:a2:a0:f9:e8:af:74:47:51:aa:
         4b:3b:c0:76:eb:30:87:75:84:49:eb:65:4d:34:fd:89:ce:b1:
         47:4b:38:8e:ed:0c:96:33:71:1c:6e:b5:63:00:e1:ed:62:4b:
         4f:62:e2:e4:97:da:14:df:cd:47:fd:00:bb:5f:ad:84:09:d1:
         88:8e:6b:f9:24:ef:ba:ad:f3:c9:fb:14:a0:3f:7a:a5:5c:0a:
         e7:a5:07:41:64:2a:9c:ee:69:d2:dc:98:9f:ad:bd:a7:ab:23:
         01:ba:a6:81:fd:16:26:d8:1b:6a:98:3f:fc:e0:ed:ad:be:52:
         a2:22:00:64:40:16:c6:e1:17:95:b4:a7:93:b8:fd:f2:70:44:
         8d:be:1f:9a:14:b7:99:92:0e:54:67:bf:20:31:c7:6f:96:e9:
         83:84:d3:e9:66:9a:56:40:b2:30:f6:55:8f:fa:ce:8e:2b:94:
         b0:bc:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:33 2025 by rpki-client