Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File:                     J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier:          4xsj5EUa249QeFlsT6J2PuSctsqeZAO4Cc94sS6BV/Y=
Subject key identifier:   FD:52:8E:6F:18:00:CA:0F:FF:33:2F:67:E8:F0:36:43:D2:4E:B0:47
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer:       /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial:       0197684E1E047534ED7684F413E62E48BFA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number:          0248
Signing time:             Fri 13 Jun 2025 08:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:39 +0000
Files and hashes:         1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: nQlhqn3vXgieZD3m4MCS4qt5wSKu58EI82e/6pvmNMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:1e:04:75:34:ed:76:84:f4:13:e6:2e:48:bf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
        Validity
            Not Before: Jun 13 08:00:39 2025 GMT
            Not After : Jun 14 08:00:39 2025 GMT
        Subject: CN=fd528e6f1800ca0fff332f67e8f03643d24eb047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:c0:1e:a3:d6:3e:81:9f:03:33:5b:d8:66:
                    c9:e8:18:d4:c8:f6:d3:86:b7:5e:b6:c5:df:4e:05:
                    6f:4d:a7:b5:44:05:7e:9c:00:e4:d2:65:bb:05:36:
                    68:4f:75:bf:75:a7:35:42:1f:c1:8c:6e:13:78:01:
                    22:8a:7e:da:1a:0e:8d:55:9b:de:e8:87:e8:45:58:
                    60:76:a9:c4:8c:c9:30:ba:74:87:24:dc:ff:ea:21:
                    85:dc:05:77:81:f1:fa:56:c9:4d:16:51:42:70:d2:
                    a0:67:d5:90:91:2b:1b:ee:7f:8e:dc:66:85:1c:11:
                    ae:22:15:2b:57:26:f0:56:88:71:83:97:6b:6e:a5:
                    10:9a:2e:78:95:9a:9d:63:f0:4d:2a:a0:9b:56:9f:
                    ce:d9:9c:46:8b:59:4e:0b:db:57:36:10:f5:ee:26:
                    ac:c9:70:80:31:cc:31:b4:65:bf:e7:a4:16:03:ee:
                    7b:6e:69:09:87:43:54:50:c9:2c:3d:7c:30:9f:de:
                    b0:f5:0e:0f:27:11:af:f0:8b:13:7b:16:33:58:dc:
                    1d:6c:98:58:8c:60:1c:b0:e7:60:1c:fd:ee:05:09:
                    05:b0:ec:f1:a1:88:2f:ba:09:a9:0c:cd:cb:74:52:
                    40:e9:43:54:02:77:8f:7f:5b:88:a3:04:d5:5b:ac:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:52:8E:6F:18:00:CA:0F:FF:33:2F:67:E8:F0:36:43:D2:4E:B0:47
            X509v3 Authority Key Identifier:
                keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:48:c9:e9:7b:3d:fd:8a:4a:5d:93:50:c9:2c:23:61:ae:5c:
         26:ef:8d:5c:4d:c1:38:5b:f6:6d:cb:53:81:e8:70:9d:a8:f4:
         f7:9b:51:6f:06:2f:da:60:b7:3a:74:db:67:ae:7c:fb:6c:2d:
         a4:f4:bf:0c:ec:d9:98:f8:e6:51:1e:4b:fe:c0:cd:cb:14:6c:
         23:bb:5f:cd:72:32:35:8f:dd:c9:28:0b:7c:c5:7f:89:e6:dc:
         ac:23:ec:3c:81:59:46:76:7e:1b:10:3a:5b:c9:ac:aa:7d:0c:
         53:f9:9b:ba:e9:70:23:93:af:39:6c:37:5b:a9:cc:f3:5f:e3:
         6b:d4:25:f5:ad:2e:74:81:78:3d:15:b8:89:29:7d:58:6c:c7:
         28:0e:1f:7d:fd:80:07:b4:93:56:fc:e0:5c:da:c7:47:df:9a:
         00:ab:f3:ee:30:57:c9:cc:5c:2d:c7:31:ad:bd:60:ab:1a:4e:
         23:0f:ff:c4:c5:5e:d8:09:9b:6f:10:5e:1f:0c:4d:a2:21:6c:
         c7:93:dc:80:4a:d6:03:19:88:26:02:ac:09:50:79:01:ce:66:
         a0:d5:a3:6e:37:ad:3a:9d:94:f7:81:0a:80:74:d6:87:3b:91:
         ae:3b:75:fa:89:ce:dd:1f:4d:b3:08:5f:4a:51:ad:9d:35:4f:
         7a:3c:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:51 2025 by rpki-client