Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft
File:                     JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft (raw, json)
Hash identifier:          dCwbb/dTYk78lUvkGNmReBLyuqoHcyiVIpkYypsxu+I=
Subject key identifier:   41:7A:D5:32:11:F7:20:67:FC:8D:F0:02:BC:A3:84:7F:50:18:48:F6
Authority key identifier: 26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1
Certificate issuer:       /CN=269580771c1f1b22292d771cd12fcfbbf621baf1
Certificate serial:       01976DABEA6FEC7491AE2E1416E763773B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft
Manifest number:          1412
Signing time:             Sat 14 Jun 2025 09:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:12 +0000
Files and hashes:         1: JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl (hash: 6O4tyqShonBKsHtn1SWi77EcjkANdqHTuzVyg6JoV54=)
                          2: kq5SAmqmeMe2Ig4Z9dIqFH8w6Z8.roa (hash: /yqMmM+b3VZsmMvFSwqkiYcIhW0KAVXfHmCiSWci3G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:ea:6f:ec:74:91:ae:2e:14:16:e7:63:77:3b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269580771c1f1b22292d771cd12fcfbbf621baf1
        Validity
            Not Before: Jun 14 09:01:12 2025 GMT
            Not After : Jun 15 09:01:12 2025 GMT
        Subject: CN=417ad53211f72067fc8df002bca3847f501848f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:ef:2e:13:b4:ef:43:5c:c0:ab:70:13:0a:
                    ec:d1:45:86:fc:e5:4e:d3:4c:19:e7:02:75:18:9f:
                    2c:d7:83:49:c7:1e:c1:51:ef:85:a1:7d:5c:7e:77:
                    2b:42:a2:c6:26:96:75:51:69:ca:b3:fc:6c:61:b9:
                    2a:48:91:c1:6c:d8:55:ed:dd:1c:35:a5:4b:1f:17:
                    ff:1e:f9:4a:2f:bd:4b:b8:f3:11:e2:1f:20:bf:9b:
                    2b:fd:6f:51:84:3f:2b:dd:9b:65:89:62:95:1f:64:
                    a4:04:c3:86:63:1f:3e:2c:75:b0:34:4d:45:b9:fc:
                    7f:26:96:27:2c:68:1c:bf:54:c9:ea:01:ec:cd:e1:
                    32:d0:e6:5b:cf:d6:1e:8b:73:76:c6:bd:bb:d2:87:
                    72:88:4f:e6:c4:0f:f7:49:ce:67:a6:2f:7e:44:7e:
                    ae:58:c3:91:2b:0b:2e:52:a4:b3:31:81:0b:c2:75:
                    53:8a:7f:a3:99:c1:f3:bf:2a:c8:10:fd:24:1b:ba:
                    1b:e8:62:3c:09:97:bb:4b:cf:15:57:40:16:7b:e7:
                    09:00:05:9e:f9:11:45:ff:86:ee:3b:3a:dc:de:87:
                    be:13:b3:45:ad:eb:6d:fe:59:fd:48:77:5b:f7:7a:
                    2a:35:59:44:54:2a:f3:74:7a:99:47:bb:c9:ad:8f:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7A:D5:32:11:F7:20:67:FC:8D:F0:02:BC:A3:84:7F:50:18:48:F6
            X509v3 Authority Key Identifier:
                keyid:26:95:80:77:1C:1F:1B:22:29:2D:77:1C:D1:2F:CF:BB:F6:21:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1cfce6-35f5-4c6e-882a-6eb14e5d0f85/1/JpWAdxwfGyIpLXcc0S_Pu_YhuvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b6:61:03:92:78:65:a8:28:bd:ba:31:60:fb:3a:c7:e4:fb:
         9c:4d:4d:4d:df:40:cb:f8:c9:ad:06:4c:1c:de:a0:57:e1:43:
         60:8b:52:b8:10:3a:bc:80:14:a0:cf:73:91:88:4d:5a:3d:df:
         57:4e:fe:86:20:e7:eb:3e:fa:92:cc:bd:1d:c9:a0:79:ba:19:
         be:8b:8a:11:dd:a1:e3:49:c3:00:07:e1:8a:51:1e:d5:09:b0:
         0d:66:05:a4:ec:8d:d5:8e:c4:3b:db:14:57:51:80:2b:fc:8e:
         f2:77:0e:8b:aa:47:cb:00:3e:54:be:57:65:f6:0d:35:5c:cb:
         c0:77:a7:be:3f:7b:19:1c:cf:fa:70:c9:d2:70:4d:27:2b:32:
         40:16:a6:63:c3:93:59:ac:53:c8:8e:75:cd:4f:0a:8a:e8:8e:
         91:9a:a8:c1:34:c2:2e:56:ce:86:0f:0f:7d:f5:da:3d:aa:75:
         86:13:4d:e8:24:2b:32:9f:2f:89:3e:96:68:01:7a:dc:89:61:
         5e:49:82:79:e0:b3:9c:c9:3a:8e:62:ed:df:70:a4:57:c2:c8:
         5f:bb:8c:76:a1:ba:a5:f2:79:05:ac:1f:f2:c3:2d:7b:1f:86:
         33:0b:f7:0c:f1:aa:aa:0b:53:d0:2e:14:a5:1c:fc:42:10:b6:
         97:6f:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:03 2025 by rpki-client