Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File:                     JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier:          0KKq/QEy/yq0s1xIV8ZJo2Qmf9y9WwsjbGk8zLhyAFY=
Subject key identifier:   64:87:25:41:32:6A:79:A3:DD:C2:1F:3B:46:29:28:29:4E:4A:BA:96
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer:       /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial:       01976A05D3740CFA40269A70A34452AAA743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number:          0FAA
Signing time:             Fri 13 Jun 2025 16:00:55 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:55 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:55 +0000
Files and hashes:         1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: dQBhZ393h/OiR+WjIp+nVIWp9FzCR3ZLp1vlfa60hic=)
                          2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:d3:74:0c:fa:40:26:9a:70:a3:44:52:aa:a7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
        Validity
            Not Before: Jun 13 16:00:55 2025 GMT
            Not After : Jun 14 16:00:55 2025 GMT
        Subject: CN=64872541326a79a3ddc21f3b462928294e4aba96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:95:66:49:15:1d:2e:14:4a:65:87:66:e3:
                    5a:c4:2f:8e:c8:26:53:bc:b8:41:94:ad:f3:d1:83:
                    6a:4e:c5:51:54:4d:62:77:bd:1c:a6:22:74:ca:4d:
                    e6:55:2e:af:5c:b0:20:34:da:e6:de:bf:d6:3a:24:
                    ed:67:f2:e0:88:48:c4:4f:7a:3c:0f:27:c8:98:ab:
                    3b:4b:81:f4:d9:be:ac:f9:3b:46:8c:29:59:e1:23:
                    be:f5:e7:49:f4:14:55:7b:fa:04:52:a9:69:20:7e:
                    37:91:fa:fd:4e:1b:c5:46:19:1b:b5:89:e7:2c:83:
                    92:c0:a3:8d:3b:fc:af:2e:02:37:a9:8e:fd:eb:67:
                    74:27:62:15:bc:bf:8c:8f:79:da:1c:ae:1f:98:b1:
                    71:4d:bf:f4:91:8e:6d:94:35:90:d0:91:8d:f1:be:
                    38:74:8c:40:ae:6c:8d:6a:2c:92:fb:84:95:af:cb:
                    08:84:7c:4a:25:b2:1a:8a:8d:e7:c3:9d:0d:0a:b4:
                    be:13:27:d3:8e:48:12:36:3e:2d:d8:84:18:bf:fa:
                    c8:1d:b1:b1:b2:1e:7e:36:8f:76:68:b4:ae:55:6d:
                    89:39:34:e7:44:21:aa:62:48:7d:0c:2f:06:9d:4b:
                    15:b3:a0:62:c3:1d:e9:d8:c7:a8:3f:51:b3:35:b2:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:25:41:32:6A:79:A3:DD:C2:1F:3B:46:29:28:29:4E:4A:BA:96
            X509v3 Authority Key Identifier:
                keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:43:75:89:ea:9d:ce:56:03:53:7b:74:7e:17:3e:b3:37:a4:
         aa:e9:a8:f7:53:e8:a4:53:0c:93:95:54:c6:e5:25:93:b7:22:
         07:65:24:b8:af:c1:8b:f4:8c:59:6e:6f:22:bb:48:4d:69:bd:
         a8:7c:27:03:6e:ca:f8:f1:81:d0:d6:24:51:12:b5:77:58:13:
         a8:f6:e3:88:9b:0f:42:7e:bd:be:a7:c3:86:f0:da:5b:29:c2:
         da:43:df:17:b6:8b:98:75:21:7d:21:4b:79:86:5f:73:ef:f1:
         88:ae:e6:48:45:39:f0:b4:5a:98:20:c4:a2:f0:6e:b6:3f:2b:
         02:24:ff:ad:4b:a6:2e:cb:98:a5:48:15:50:96:46:37:36:f8:
         c8:ed:6e:50:65:4d:49:74:09:bf:04:15:f8:75:f0:2c:9f:27:
         46:cb:6b:5b:29:ee:24:9e:5c:61:dd:b6:17:59:29:3e:bc:23:
         99:68:94:94:c0:e3:42:ea:07:66:66:5b:69:c5:bd:f8:08:da:
         7a:2a:03:a2:80:ec:e0:c1:22:f8:e1:c1:13:11:82:96:f5:81:
         67:77:f5:d5:29:e4:a6:24:f2:32:18:6f:46:1e:ff:e5:66:0c:
         fe:c9:db:4d:4a:11:92:8d:da:96:8b:ea:e1:56:24:e5:b0:e0:
         18:b3:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:00 2025 by rpki-client