Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          yNohwrsnAvQP9mokq/IlDoDMs+OArgE3CfIVGB31bOI=
Subject key identifier:   48:02:79:26:8E:78:B4:50:D8:5D:23:B3:AC:EA:CF:7E:56:04:A6:BD
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       019787A1DE0863EFD96C824A8F9AD7DD5C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          15A0
Signing time:             Thu 19 Jun 2025 10:00:21 +0000
Manifest this update:     Thu 19 Jun 2025 10:00:21 +0000
Manifest next update:     Fri 20 Jun 2025 10:00:21 +0000
Files and hashes:         1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: XPF1sIFSXd4o8njYb/9AE4SAslIXvD/rkmxf1h9mIG8=)
                          2: vQVKTwJT4leI6HjT4PX8aITkP18.roa (hash: SnTX0BqmORDuYska7e4pXGhwX58LZGJ25QrHzIMD1lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:a1:de:08:63:ef:d9:6c:82:4a:8f:9a:d7:dd:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: Jun 19 10:00:21 2025 GMT
            Not After : Jun 20 10:00:21 2025 GMT
        Subject: CN=480279268e78b450d85d23b3aceacf7e5604a6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:51:1f:c5:62:c2:31:23:14:42:36:b1:cc:
                    d4:e6:3a:10:42:17:42:d6:18:61:df:6d:bc:eb:16:
                    74:91:cb:4c:ac:68:b4:c9:dc:bf:d5:16:2e:b2:a5:
                    09:97:43:e5:8e:fb:39:dc:ea:d2:89:79:ac:85:f0:
                    ee:d9:88:ad:be:39:23:67:da:09:23:a4:a5:b2:85:
                    f2:9d:c9:13:80:b2:95:85:e6:ea:45:45:34:56:d0:
                    98:a9:8e:40:60:bc:54:5d:c9:3a:18:4f:4c:00:77:
                    93:bb:82:ac:57:bc:95:40:44:f7:7a:95:46:a5:08:
                    54:0f:72:42:12:0e:b0:e9:b8:d9:94:c9:44:42:c2:
                    16:04:25:b6:6a:b4:1d:fd:65:10:a9:21:dd:92:e9:
                    fa:0d:92:19:d2:d5:b7:12:55:16:81:ba:6b:79:1e:
                    23:1a:f3:b9:90:39:b2:05:62:ff:f5:96:cb:b3:64:
                    7a:2e:7e:f3:40:08:f2:81:3a:4e:87:b5:d3:75:1c:
                    e4:dd:37:86:b5:d6:fb:1a:5e:23:c6:07:6f:5a:2c:
                    d3:bb:f1:4d:78:d7:53:c3:77:74:8f:26:16:f7:36:
                    37:d1:e6:48:2e:37:a8:7d:f7:07:97:88:49:8f:c5:
                    6e:ca:98:3c:a6:57:64:a0:6a:18:52:e0:57:b0:56:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:79:26:8E:78:B4:50:D8:5D:23:B3:AC:EA:CF:7E:56:04:A6:BD
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:4f:98:df:fd:36:c9:8e:18:de:72:af:9a:5f:ff:09:40:f3:
         34:56:53:8b:34:c0:41:b6:55:7d:be:81:89:ac:a4:34:6e:a7:
         a0:be:e8:f1:e5:af:db:1c:d6:7a:b5:1f:9a:fb:b2:11:af:21:
         31:04:f7:14:28:b0:36:ce:d2:4b:d9:8f:44:36:74:97:67:c5:
         3d:d1:5c:c0:24:18:29:79:63:53:35:a1:61:b6:80:5c:c7:6b:
         28:29:c5:2d:c0:83:a2:0e:85:67:e7:fe:bf:de:fa:c1:f2:8c:
         16:a0:17:9f:15:5c:fc:7b:ef:59:db:7a:0e:cf:05:70:41:aa:
         6f:ca:d6:e6:85:71:1b:a5:1b:76:a3:83:6d:1c:a5:01:d9:24:
         1f:ba:8f:ca:15:4d:e7:77:de:3d:7e:70:50:78:5f:1e:92:76:
         85:fd:49:2c:51:50:db:61:03:45:a9:58:8a:61:c4:41:19:f6:
         1f:ec:d5:66:1a:8e:05:b5:03:b7:61:5c:26:08:a9:5e:68:b7:
         73:b9:57:c0:6d:9e:e7:ee:eb:59:2e:cb:f5:48:a3:8d:b3:de:
         c7:37:58:97:3a:83:ad:df:3a:95:78:86:d3:bc:9f:01:92:c3:
         ea:07:f6:30:ba:27:ac:ab:d3:43:51:85:0c:75:8d:2f:ab:c0:
         46:e2:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:55:38 2025 by rpki-client