Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier:          zHoH2KUjiXLM9wisKEsnwEvj9FGNJkj1nCV0OXQWhos=
Subject key identifier:   F2:8E:4B:35:3F:56:5C:FB:49:3A:84:0B:39:FB:90:38:0A:52:DA:99
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       01976CCF8648EFFA1C140148B7EDEBB67F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number:          071F
Signing time:             Sat 14 Jun 2025 05:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:28 +0000
Files and hashes:         1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
                          2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: 4BlC1/NgRtcSEJPpVJ+CoKHJAP/snR2DyHKcJTo02fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:86:48:ef:fa:1c:14:01:48:b7:ed:eb:b6:7f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: Jun 14 05:00:28 2025 GMT
            Not After : Jun 15 05:00:28 2025 GMT
        Subject: CN=f28e4b353f565cfb493a840b39fb90380a52da99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:15:50:c1:57:9a:15:8c:1b:69:1c:ee:18:
                    80:1d:61:98:6a:bb:b3:4f:74:38:13:ba:b4:28:75:
                    99:a8:b1:ba:30:57:d7:be:eb:9c:c0:b8:cd:9a:69:
                    50:a0:d8:c0:ae:96:95:ce:93:94:73:38:1e:e3:88:
                    22:2d:66:1b:27:28:26:ac:90:bc:be:61:ac:80:43:
                    ad:4f:cb:c5:15:cf:8f:11:0e:9a:3d:97:3b:d9:76:
                    cf:af:de:a3:b1:d8:a9:10:8b:11:91:6a:a2:a1:11:
                    f6:5c:1b:e7:d7:46:9b:29:e2:0b:4f:45:c4:24:ac:
                    21:0b:63:6d:b3:0c:77:2a:31:24:f5:fd:5f:48:83:
                    ff:a6:c9:8b:31:f3:a0:db:14:7a:70:9a:c9:c7:df:
                    df:7f:68:4d:30:75:32:09:c5:86:5d:60:fa:22:3a:
                    f7:f5:21:99:bb:c2:83:31:0a:72:a8:fb:60:d6:0e:
                    f2:26:fd:fc:d1:6a:a0:e9:ef:c7:fe:77:c7:11:1a:
                    f7:4e:8b:0e:de:85:7b:57:66:51:a9:4f:17:3a:e1:
                    02:a4:8e:19:68:a1:3d:15:f3:0f:46:8f:37:2c:1c:
                    09:8c:a4:58:27:58:6f:48:14:f7:48:34:a7:cc:2f:
                    ba:2a:cc:0a:a9:98:e7:c8:87:b9:89:ac:f4:f2:c7:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:4B:35:3F:56:5C:FB:49:3A:84:0B:39:FB:90:38:0A:52:DA:99
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:e0:a0:d5:4b:4e:68:07:be:4a:38:77:5a:56:20:02:fd:
         e7:16:46:1e:86:9d:60:54:4e:1c:73:34:c5:35:63:9c:93:33:
         71:08:9f:af:ab:4d:be:5f:22:3b:7f:2a:df:1f:74:eb:e9:d2:
         ce:ca:4f:7a:9b:b7:a5:1a:27:f9:13:d1:82:60:f6:03:e8:03:
         b0:04:62:35:3f:56:7f:36:0f:20:55:f7:c0:4a:f7:15:81:90:
         14:d1:9d:e8:85:1b:39:35:5c:7a:37:7b:98:4d:03:19:04:3a:
         10:17:fe:82:f5:8b:5f:2f:40:e3:ec:00:3a:d7:33:fb:8c:e5:
         88:ee:ad:7e:05:30:6f:91:61:66:ef:b5:cf:7e:8b:43:69:57:
         06:34:33:13:d0:b6:05:e4:15:cd:ef:57:f9:b3:a8:5b:1d:8b:
         e1:a4:56:f4:3f:4a:f8:a2:16:b1:92:6b:3c:1a:59:e7:35:2d:
         c2:a2:68:a1:b9:61:2a:65:69:0c:7c:86:f3:ee:1a:70:27:67:
         51:fb:cf:c1:8d:4e:1a:b6:5b:db:2b:3b:34:bc:e9:a3:ce:f0:
         ef:51:10:e8:52:c1:8f:90:24:86:0c:a0:da:21:3c:e2:80:e4:
         ec:bc:21:25:1a:2a:f0:5e:d5:fe:0f:c4:28:4a:28:da:9d:bc:
         21:33:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:42 2025 by rpki-client