Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File:                     JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier:          4sErN+DgsTXINVWJbXZyzHSJBRpvU9KJjjbVrp15P9A=
Subject key identifier:   50:0F:CD:92:BB:DF:10:17:5D:BA:0F:06:A9:62:DA:09:8B:1B:A7:A1
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer:       /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial:       01976A7388026CBA9CC0E05DEE654F12642C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number:          038C
Signing time:             Fri 13 Jun 2025 18:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 18:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 18:00:45 +0000
Files and hashes:         1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: u1yGwG2Vta2IYOOUUqms4HLI7uTHV5mw5oLkY5lqpzY=)
                          2: Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (hash: WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:73:88:02:6c:ba:9c:c0:e0:5d:ee:65:4f:12:64:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
        Validity
            Not Before: Jun 13 18:00:45 2025 GMT
            Not After : Jun 14 18:00:45 2025 GMT
        Subject: CN=500fcd92bbdf10175dba0f06a962da098b1ba7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:7c:9c:a6:d7:ab:80:07:a5:a8:ef:3f:33:
                    13:a8:02:4f:c8:f1:f8:5f:d8:8a:b1:a9:04:6e:78:
                    3c:d1:71:0c:f0:fb:9c:82:42:2f:37:d6:69:8c:c7:
                    31:13:eb:60:1f:28:d4:5c:d8:ba:b2:c6:f3:f6:c1:
                    2b:29:01:5b:41:ea:03:77:52:e1:f8:67:3f:01:2b:
                    a7:a8:1c:c7:52:35:76:ec:60:a8:c9:2f:40:bf:e5:
                    1f:e9:6c:5f:ab:9e:7f:ea:35:c7:36:a2:67:c4:5f:
                    c3:b2:32:0a:28:51:45:7b:3b:0d:02:fc:3f:02:98:
                    49:f5:2e:b8:50:6a:43:d7:13:75:e8:36:dc:9b:3f:
                    34:5f:52:20:ed:69:1e:0d:ec:60:7a:01:29:89:86:
                    8e:59:aa:bc:e7:82:ae:10:80:e6:f9:2d:61:d0:c9:
                    9a:d9:9a:e9:04:eb:3e:95:82:dc:05:75:6e:0c:fe:
                    2b:f2:54:34:7b:18:38:95:63:41:2f:6c:86:c1:63:
                    ea:69:83:44:9b:29:b1:56:55:5c:10:46:a9:8b:a3:
                    1a:ba:c8:c0:ef:f3:fd:9f:af:7d:81:cc:b3:ff:9e:
                    a2:d9:1d:c2:25:f5:69:f9:b5:d3:1e:2f:14:3b:d3:
                    5d:a6:14:9c:de:d7:d4:ae:14:07:dd:0f:0f:c3:81:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:CD:92:BB:DF:10:17:5D:BA:0F:06:A9:62:DA:09:8B:1B:A7:A1
            X509v3 Authority Key Identifier:
                keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6c:64:98:33:0a:b3:03:a2:bd:dd:45:f6:d9:74:c4:84:36:
         83:64:a3:0f:5b:0d:32:d1:9d:7f:58:50:99:e2:d3:d7:3e:39:
         fa:40:31:27:73:0e:7a:fe:2a:98:ae:9b:42:0a:5f:8f:8d:6f:
         47:e0:5d:ce:7b:5a:a6:e2:be:5e:16:f8:5b:88:a7:9b:28:0f:
         87:f7:6c:fa:66:a3:59:eb:ef:e1:df:de:5e:32:25:78:d6:9f:
         4d:8f:48:7a:96:d1:3b:31:52:a5:93:bf:ce:b7:ed:4c:11:83:
         b7:c9:db:3a:6d:1d:b5:3e:15:33:31:2c:56:73:48:0e:c5:97:
         08:da:38:8c:6c:a3:72:0f:9d:0b:c5:a4:ed:fb:8d:70:55:47:
         e2:88:fc:20:e0:12:f3:57:5f:5a:1f:ac:c8:87:05:50:85:b6:
         ed:0a:f4:97:ee:f7:c9:cb:5a:c1:92:ea:a9:f5:e3:eb:ee:4d:
         d4:a4:88:90:20:5d:44:d7:eb:19:f4:dd:4b:20:77:e1:8a:6b:
         69:41:e7:5d:8c:80:a4:2b:35:64:89:e1:a1:36:67:13:f9:e5:
         b8:e8:59:c7:81:f0:f8:03:6d:0f:57:1b:98:d8:96:03:c2:b4:
         75:29:76:d8:93:4f:09:65:61:6a:71:0e:44:05:56:f0:bc:1f:
         0d:37:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:32 2025 by rpki-client