Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File:                     jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier:          KCX1UA3BIG3mbebowBz7lEZXEW1ezc57LT0dKrGp2VE=
Subject key identifier:   39:AD:58:1B:F3:E9:93:26:DF:52:DA:1F:EF:A3:D4:00:7C:A6:F8:10
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer:       /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial:       01976FD149CBDCE89ACF9056F83D7B973F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number:          8E
Signing time:             Sat 14 Jun 2025 19:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:16 +0000
Files and hashes:         1: M-gXFd7N6RQlOS3FU49vKYSovUs.roa (hash: 3OvRn3YgHg1m6lctKtBNgoRt6uS+lTyZBl7EBoP4/D0=)
                          2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: I8Nm+oOGqTRPsuZ6+JiSY0C/FIUsrXQKio1pJvv28Yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:49:cb:dc:e8:9a:cf:90:56:f8:3d:7b:97:3f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
        Validity
            Not Before: Jun 14 19:01:16 2025 GMT
            Not After : Jun 15 19:01:16 2025 GMT
        Subject: CN=39ad581bf3e99326df52da1fefa3d4007ca6f810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:69:25:5a:63:72:05:2a:17:f9:e2:8e:7a:
                    aa:72:78:f0:05:c6:ef:d2:be:4e:8a:b9:bb:a4:65:
                    9c:36:ac:8e:bc:fe:d2:17:c4:4c:0a:48:3c:58:aa:
                    ff:e6:0e:c8:89:82:4d:bd:26:a5:3f:4f:62:57:1d:
                    ab:be:e0:0b:59:69:64:3f:7c:ba:f9:c0:99:5c:11:
                    99:ee:0e:95:1c:ae:82:47:d7:de:11:75:23:d3:80:
                    03:00:91:3d:c7:b0:74:00:7c:b4:09:60:42:9d:92:
                    dc:8d:c1:dd:06:e0:2c:95:1b:c3:0e:fd:7e:27:4e:
                    f1:9e:8f:2c:71:c9:6f:fe:e3:c7:a8:71:e7:e4:73:
                    42:48:0f:f7:7d:11:79:3f:30:00:4d:77:15:ad:bb:
                    1e:2b:50:50:6a:c1:5a:23:4c:1f:d3:9d:e1:57:51:
                    75:dc:43:ee:29:16:0e:34:88:af:34:91:0d:71:01:
                    90:27:35:1a:71:2c:8c:77:85:70:2c:03:7a:16:3e:
                    28:12:c6:1d:7d:19:67:9c:58:bc:0f:48:d7:d8:95:
                    72:c9:c0:a0:8f:15:46:7c:f9:78:25:1d:af:15:1e:
                    bb:b2:af:6b:26:2c:a6:35:74:19:2b:8f:96:c0:9e:
                    ad:2b:2d:28:c0:61:08:bc:55:c2:ee:ad:5f:35:df:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:58:1B:F3:E9:93:26:DF:52:DA:1F:EF:A3:D4:00:7C:A6:F8:10
            X509v3 Authority Key Identifier:
                keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:5e:94:9f:bc:60:34:aa:54:a7:31:f7:7b:30:9e:77:04:
         5f:9c:9c:d7:e8:a2:36:fd:2f:d4:23:a3:58:8d:40:fb:12:ca:
         5f:29:8a:e5:4a:58:82:a8:44:a8:25:21:26:9f:a2:5f:10:2e:
         f8:77:58:5f:a0:3e:60:fd:55:5b:2e:01:24:0f:a3:8a:a1:ef:
         c7:b2:7a:66:f9:d0:22:67:32:a3:c5:f3:8b:7e:2d:98:d6:03:
         ad:3b:f8:e0:26:67:09:86:03:3b:05:80:f3:61:2f:07:2f:25:
         b0:82:32:3f:ea:45:42:f1:4d:8b:99:64:4f:78:14:43:fc:eb:
         06:b9:78:3d:6b:2b:09:e0:77:16:9b:4c:22:bc:a1:2c:20:97:
         16:e3:be:fb:b0:30:fd:5a:f6:c2:12:fd:0f:a3:db:2a:bd:a2:
         c4:c5:2d:62:c6:7e:ce:13:99:ac:bb:f7:e0:3a:61:3f:d4:af:
         e0:d2:e7:12:ce:a9:17:50:03:3b:68:be:a2:23:0f:3e:da:0a:
         2d:e8:4d:1b:e2:82:10:e2:fe:6e:bc:3b:90:65:68:a2:c2:b7:
         81:cb:09:6f:11:44:a0:60:d1:f6:6e:99:b9:3b:85:10:f9:ec:
         97:9b:1c:34:d4:17:ca:75:59:7e:07:e9:70:23:0d:f5:19:cc:
         a4:99:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:16 2025 by rpki-client