Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File:                     j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier:          xLw2SEWJpY0mdnURcuzJQEN8muwVAfODRlgwbLW09bQ=
Subject key identifier:   6A:4E:71:C1:6F:07:1B:9A:72:B1:23:74:00:6D:AE:3E:14:45:FE:FC
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer:       /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial:       019768F2E48041C62497F4A8B2E8C6449007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number:          0A04
Signing time:             Fri 13 Jun 2025 11:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:38 +0000
Files and hashes:         1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: bkEgZe1ZTrs7fjW5+AmPXutBIn4FMhInIna+V3OVIS8=)
                          2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:e4:80:41:c6:24:97:f4:a8:b2:e8:c6:44:90:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
        Validity
            Not Before: Jun 13 11:00:38 2025 GMT
            Not After : Jun 14 11:00:38 2025 GMT
        Subject: CN=6a4e71c16f071b9a72b12374006dae3e1445fefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:46:d7:43:24:26:2f:db:23:bf:a5:b9:4f:
                    66:6c:aa:5b:dd:12:51:d4:e2:49:43:f6:cd:8e:72:
                    d9:50:81:07:45:28:21:cc:c7:6e:90:d5:6a:89:82:
                    0d:fe:da:f1:56:12:3d:66:02:61:d5:ff:6b:fa:aa:
                    a4:0e:77:11:4c:2f:0a:6d:12:cc:bc:1e:74:8b:57:
                    06:02:c7:46:43:b0:e6:48:ff:ee:a0:7a:83:f9:47:
                    19:0b:8b:f5:8d:31:bc:61:b9:2b:37:98:1e:0c:e5:
                    fe:2f:11:f5:e2:87:1d:7e:34:d7:59:0e:53:87:8c:
                    b5:a3:3f:72:d2:f9:7e:61:73:80:cb:12:b3:6e:67:
                    72:09:e3:63:a8:81:58:b8:e1:25:5f:68:75:cf:5f:
                    a6:01:7f:b6:b3:cc:7f:c5:a2:d5:e6:20:df:a0:a6:
                    34:3a:50:31:d1:4e:78:54:f4:98:24:b1:b8:df:45:
                    97:01:9e:ac:e1:da:7d:3f:da:af:17:7b:fa:dc:2d:
                    e7:91:57:52:c5:b2:2f:ac:a5:c5:31:81:40:fa:39:
                    01:69:25:c7:21:76:25:d4:27:ea:57:6b:95:da:ce:
                    01:ff:96:aa:e5:12:d3:32:6e:4b:b5:6b:1f:81:f5:
                    d8:1c:c2:cb:22:64:1e:30:e4:87:ca:f8:11:37:61:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:71:C1:6F:07:1B:9A:72:B1:23:74:00:6D:AE:3E:14:45:FE:FC
            X509v3 Authority Key Identifier:
                keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:de:d5:45:cf:bd:e4:1d:27:35:2a:e6:34:f8:6d:6d:9c:ae:
         fc:3f:a2:99:2d:ab:5b:95:2b:b8:15:01:92:8a:1f:e9:f0:d1:
         b3:9c:06:15:b0:57:c0:25:93:bd:6d:fa:e8:fc:50:7f:f9:d2:
         4b:fc:ab:af:90:06:6d:2f:1f:9f:da:21:13:13:cf:50:fe:07:
         99:c7:fb:0e:12:13:08:c9:78:0e:90:97:1d:6f:b0:21:1a:28:
         88:2c:ff:17:47:ef:01:04:ce:ed:f5:71:20:08:4e:34:56:24:
         28:72:e4:5d:83:76:7e:17:35:72:5b:dd:eb:7f:4d:a0:c5:54:
         2e:fb:16:41:88:78:5e:26:bc:07:dc:67:3c:f8:5a:74:9f:29:
         fd:8a:ed:27:92:54:9a:9e:c1:73:e8:69:2b:18:2f:d5:d8:c8:
         84:16:92:e5:b9:b9:fc:b4:a5:28:9f:e0:68:91:f0:2e:14:d6:
         2f:11:39:51:f1:97:e5:10:b2:5f:98:96:98:75:69:8c:8b:6e:
         ba:d3:98:31:fd:cb:2e:fb:5b:96:73:9b:88:fe:de:5d:db:8a:
         f0:f9:66:55:d6:e8:c6:a7:61:6a:2b:cb:9f:b8:2f:e0:31:1d:
         c3:aa:82:ee:a9:9e:64:2e:ce:cb:c7:5e:b3:5d:c8:cf:63:8b:
         eb:3e:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:44 2025 by rpki-client