Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File:                     JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier:          mwp12gpZP706ei2Q6akCC64w52O7yuKAIbjWD/0e8gw=
Subject key identifier:   50:9A:1E:C3:8D:B6:D5:0F:A1:CE:E1:F5:3A:DB:1B:87:BA:B4:00:30
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer:       /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial:       01976E87854A82090C774CE3006708865133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number:          1566
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 13:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 13:01:04 +0000
Files and hashes:         1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: S6oGZ3LBXVZBBC1r1Sr6cHQrv3X8WG+mMn/UnZlXyRE=)
                          2: vyg3yZoDE3lDITkNoY-QCGp_Waw.roa (hash: xu1/KMb58m5rKylUKx2EbNMwZx0eL+J1SwYTzOBoPlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:85:4a:82:09:0c:77:4c:e3:00:67:08:86:51:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Jun 15 13:01:04 2025 GMT
        Subject: CN=509a1ec38db6d50fa1cee1f53adb1b87bab40030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:aa:74:a2:c9:d0:a2:84:b8:0c:76:f2:ac:
                    17:ab:79:77:02:d1:96:18:75:d5:f2:9f:79:bd:19:
                    45:a7:e0:68:0d:bc:b4:cc:83:e4:fe:fa:e5:e6:79:
                    70:04:62:ee:4e:c2:05:37:c4:43:e8:b5:58:bc:63:
                    28:54:79:ac:44:41:e4:5d:d9:fa:51:47:25:50:84:
                    80:b2:f7:f4:e6:aa:58:35:dd:ee:59:1f:9a:ba:22:
                    86:7f:80:ef:ed:35:8c:67:79:71:b7:56:c0:a1:b6:
                    28:8e:ea:3d:ec:ac:28:80:d3:f9:3d:fe:bd:76:11:
                    6d:0b:0b:81:91:3b:db:63:f7:ba:6b:b2:a2:76:bb:
                    f9:a9:b9:29:d4:83:05:5f:f7:bd:35:35:2c:dc:d5:
                    eb:f9:0b:7a:6b:6b:cc:dd:d9:ed:cf:10:d3:d5:7e:
                    10:8a:aa:d2:30:f6:15:44:7b:d1:aa:21:8f:9e:c9:
                    00:b9:86:cf:62:da:b6:7c:03:18:2c:d6:d8:5e:5e:
                    f3:09:59:c3:11:7d:93:4e:93:38:13:a5:ca:21:2b:
                    8a:aa:98:db:85:e0:81:58:33:f2:4f:81:83:62:15:
                    7a:6e:09:63:47:96:cb:93:bf:a2:a7:fd:96:54:15:
                    6f:0d:a8:40:dd:e3:5f:6c:74:b3:90:53:24:57:38:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9A:1E:C3:8D:B6:D5:0F:A1:CE:E1:F5:3A:DB:1B:87:BA:B4:00:30
            X509v3 Authority Key Identifier:
                keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:38:32:7e:1f:ca:da:fa:78:27:80:5d:5f:f6:31:83:80:64:
         71:78:35:2d:9a:a9:55:47:39:d2:0e:2b:94:08:3d:8b:48:b8:
         97:1d:2d:1a:22:b9:35:d5:31:ca:fb:6d:65:79:fa:78:f6:83:
         b9:e7:94:c1:98:fa:d3:01:d0:b8:ae:c0:da:f3:ef:5b:78:68:
         78:c0:78:13:4f:0e:a5:59:23:95:1d:9f:38:f5:f1:c8:d3:22:
         14:59:ed:67:9e:c7:57:5d:97:21:f0:9d:b1:29:86:ae:2d:52:
         c2:be:a5:b4:3a:37:08:64:1e:f0:0b:dd:3a:4d:f0:4b:94:8c:
         20:30:61:9e:4a:dd:b7:d0:3a:26:66:72:d1:70:95:1f:ca:24:
         ae:64:21:ad:4c:dd:96:04:32:87:91:95:e2:65:5d:77:6a:2f:
         52:e3:d3:1a:94:e9:96:cd:62:c1:c6:24:93:44:16:11:39:2e:
         21:b7:93:ba:14:98:09:e2:86:68:55:84:60:99:be:28:08:f4:
         eb:ab:78:86:4f:4c:64:c5:a0:d7:76:6e:8e:d2:8b:26:39:dc:
         dc:ce:87:78:a5:96:28:a0:f8:e0:94:75:ef:09:95:d9:2b:ed:
         6d:72:a3:69:a7:53:fd:71:71:26:28:bb:55:90:f3:0e:6b:76:
         ab:7d:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:05:33 2025 by rpki-client