Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File:                     j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier:          tbh8Y/gTUHn2eAPrk+yX7l4IYZmIZlPDBSPFCB262mg=
Subject key identifier:   AD:45:FA:3B:3F:DA:43:DF:C9:9B:E6:28:EB:4C:A8:4E:2B:28:97:06
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer:       /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial:       01976C2A9B5AD10572238574422839840BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number:          158B
Signing time:             Sat 14 Jun 2025 02:00:20 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:20 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:20 +0000
Files and hashes:         1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
                          2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: cKUQp6j3V03pc3x3tcDZHG1jG5DQ7TfmGl47dAwu/P4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:9b:5a:d1:05:72:23:85:74:42:28:39:84:0b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
        Validity
            Not Before: Jun 14 02:00:20 2025 GMT
            Not After : Jun 15 02:00:20 2025 GMT
        Subject: CN=ad45fa3b3fda43dfc99be628eb4ca84e2b289706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:df:83:76:6c:61:74:78:c3:4d:f5:c6:d4:
                    87:23:6b:b4:13:af:23:73:66:bc:1b:05:fe:4c:58:
                    d7:88:52:a2:5d:72:26:a5:8c:7a:c2:d5:f0:49:fd:
                    60:1e:31:be:90:20:94:85:25:f1:e2:2e:ef:91:0d:
                    24:06:cc:eb:fe:e6:58:d7:48:06:d1:c5:35:6b:bd:
                    15:19:a0:05:7d:f4:7e:ff:80:af:94:2d:d1:43:ef:
                    77:fd:a8:5c:00:32:41:e0:7b:32:56:0d:fb:e1:fe:
                    80:2d:84:c2:a7:d0:2b:21:6c:70:c8:59:7c:82:cc:
                    6d:09:3c:91:5b:29:87:9d:96:f9:79:b7:d5:f5:e3:
                    b6:a0:f2:e7:70:5a:f9:19:2c:00:b1:14:0f:54:2a:
                    60:e1:fa:fa:1a:e2:cf:31:62:11:d0:d3:c4:96:e3:
                    0e:e2:41:58:89:f4:84:9c:41:22:4d:0a:a1:e0:34:
                    cf:b5:93:77:4d:f3:be:73:ab:4b:41:bc:97:4f:e6:
                    ae:2c:23:35:14:9b:2e:21:87:09:69:38:bc:e9:5a:
                    ae:4c:7f:50:84:02:ae:f2:9b:95:a8:5f:10:89:9d:
                    03:84:86:3e:a4:52:15:d5:23:b6:63:b4:87:3b:61:
                    bd:54:06:58:a9:25:45:a8:b6:54:b2:09:bf:a5:50:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:45:FA:3B:3F:DA:43:DF:C9:9B:E6:28:EB:4C:A8:4E:2B:28:97:06
            X509v3 Authority Key Identifier:
                keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:e9:da:86:96:d3:c8:98:ee:86:bb:e4:b7:49:ed:3c:64:
         c8:da:e2:07:7e:ec:97:1e:1e:17:fa:67:a9:44:09:41:f4:f2:
         f3:cb:88:98:bf:b5:eb:51:ff:10:aa:a5:ce:cb:10:bd:5f:d3:
         31:6c:18:c8:cb:bb:5c:ce:ce:f9:4e:fb:4d:d3:44:c5:1b:01:
         ea:bc:b6:e2:8e:cf:94:5d:32:b2:ed:55:4b:91:ab:1c:e9:bb:
         fb:1d:c8:a0:7a:f5:2d:f1:55:53:45:9b:02:04:d6:ab:14:50:
         49:f7:f0:53:bf:23:28:fe:5c:df:27:8b:f0:7e:6a:6e:60:63:
         36:24:62:04:4a:7b:75:f1:e1:9f:b1:e0:34:ec:a6:4c:15:37:
         4d:79:ef:c9:9b:78:16:43:5c:bf:fe:00:6f:fc:bd:d0:be:42:
         6d:a0:90:d4:45:09:25:4d:da:74:54:ad:0c:53:da:aa:56:df:
         35:49:5f:b8:12:da:43:7c:60:33:37:e7:b9:d6:21:9b:62:e1:
         45:24:78:c6:16:17:a0:19:34:6b:14:0d:91:bc:54:af:4e:9c:
         fd:46:67:b2:61:f1:cc:34:0d:05:3b:ef:34:61:c4:8e:c9:43:
         35:39:69:85:1e:04:25:50:21:77:4f:dc:9b:28:99:be:2d:76:
         fb:33:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:48 2025 by rpki-client