Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
File:                     JojvNz-PAOAcJc-SS08ujsaiGdE.mft (raw, json)
Hash identifier:          nJx1HcXLevOok3oqVJEBwQmmBrRxMyGuutVGxQgz/TM=
Subject key identifier:   71:E9:97:9F:A0:60:7B:84:BA:7B:4F:E1:8A:10:05:18:BA:49:FC:7B
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Certificate issuer:       /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial:       01976D3DF6DC3A6E7E17022177A6A8600790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 07:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:06 +0000
Files and hashes:         1: 9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa (hash: wwuZ4oEoEOc/Uq5HjzgRuotY259BWR4HTpXNj9bkQ/g=)
                          2: JojvNz-PAOAcJc-SS08ujsaiGdE.crl (hash: QwMWY0Vqwdy3MllPm1Vpd8sK+YbZJq7ISqfbdOsHgcs=)
                          3: NLlq8DiYVFJMYAJlr9NHDav50Bs.roa (hash: 1feCq5rXN2U803Ez7sUO8zgEL070beNeKBUwCwKwE5Y=)
                          4: V9TCe7mXJBH58d-15AGeUYfc0cM.roa (hash: hoxc5Dur4oAZR+SCmAqnZb+/Hrq6+3AzAIRJJu/YQd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:f6:dc:3a:6e:7e:17:02:21:77:a6:a8:60:07:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
        Validity
            Not Before: Jun 14 07:01:06 2025 GMT
            Not After : Jun 15 07:01:06 2025 GMT
        Subject: CN=71e9979fa0607b84ba7b4fe18a100518ba49fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:36:c3:ec:34:ec:6a:87:85:d8:ed:d2:57:59:
                    ff:18:ce:1d:b2:3a:2f:6d:9c:17:dd:86:c4:b8:d9:
                    43:4a:09:d0:8b:b6:d8:0b:9a:45:ac:72:1f:90:89:
                    ce:5e:0f:e6:e1:fd:d6:30:81:30:2c:3b:7d:c7:87:
                    f5:7b:a3:79:8a:f5:89:80:7f:78:aa:22:2a:01:15:
                    a0:21:ab:ec:12:5e:55:44:87:d1:e5:9d:1a:15:f8:
                    76:31:47:83:a3:07:cf:f6:9f:17:f8:99:6e:56:b2:
                    52:94:b6:35:9d:cc:55:16:14:ec:20:ae:ec:81:be:
                    91:3e:8f:49:31:c9:22:e4:93:d9:00:84:da:f1:54:
                    66:d9:a7:78:e5:96:52:74:7a:d6:09:9f:33:4f:f1:
                    b2:0f:1d:56:87:9b:45:0a:d5:1f:92:56:32:16:47:
                    1c:1b:c1:1f:b2:24:ac:0c:f4:73:ab:ec:36:97:7d:
                    bb:3d:72:50:a4:93:53:83:fe:27:74:79:1d:0c:db:
                    f0:e7:d0:40:18:da:6d:6f:63:ad:22:30:8b:92:54:
                    a4:f1:b7:6f:40:92:a9:56:16:c0:52:04:86:32:92:
                    41:19:1a:9a:0f:80:65:b4:ce:1a:75:e9:87:0b:89:
                    05:6d:b3:9e:9b:ed:f5:78:7e:f6:53:82:64:d3:4a:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E9:97:9F:A0:60:7B:84:BA:7B:4F:E1:8A:10:05:18:BA:49:FC:7B
            X509v3 Authority Key Identifier:
                keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:9e:98:a7:9f:50:1d:57:9d:b2:fc:60:1b:6c:f2:91:5a:
         80:97:ac:43:98:56:cf:e6:10:ec:a1:65:dc:c0:7b:0f:60:10:
         f4:fc:19:bd:58:a7:9d:6f:a4:d7:0f:7d:4f:e5:18:27:bb:13:
         cc:5b:53:d7:a7:69:c0:c8:72:37:04:65:0c:45:a7:24:17:09:
         b9:fb:ba:65:d3:1d:42:40:de:92:26:cb:48:a4:1e:62:03:78:
         b0:e4:5a:25:57:dd:cb:3d:bd:d2:14:2b:d4:d6:bc:66:2f:92:
         4e:94:93:57:4c:91:fb:90:82:90:22:3a:b0:00:21:0b:49:e0:
         66:b6:9c:02:20:bc:86:fb:bb:99:d0:6f:e0:e0:16:53:18:18:
         ba:f3:11:d4:ed:5c:02:33:b3:d4:b1:ad:1d:49:0f:1c:4b:33:
         25:a6:a5:94:7a:30:3c:f1:4a:af:7f:af:30:a9:98:d8:93:fe:
         5b:85:56:5a:52:16:19:f2:4e:12:0b:63:f1:42:2b:09:5a:cf:
         c3:c7:92:05:64:8d:a0:c4:96:ea:34:8b:a3:00:3a:ef:0c:c0:
         a1:92:b8:f7:49:31:a8:38:05:de:25:61:ba:7c:fd:50:54:2f:
         33:77:dd:28:a0:26:98:18:c3:0a:25:4e:58:4f:80:ee:95:dc:
         1b:40:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:45 2025 by rpki-client