Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          nuFF1sowtgV658K84QKtLpufQJ1yzCK0TeV4A8IWEwI=
Subject key identifier:   BC:55:95:B5:00:3B:49:AD:2D:05:CA:CC:A7:D0:0E:4F:49:B9:87:3C
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       019769978B6CADBB8C5FD4A6CBDCBBF63F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0D4B
Signing time:             Fri 13 Jun 2025 14:00:28 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:28 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:28 +0000
Files and hashes:         1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
                          2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: Oje6ds4hUl5OMj5h05mk1N55asze/lOkG4niAscpPNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:8b:6c:ad:bb:8c:5f:d4:a6:cb:dc:bb:f6:3f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Jun 13 14:00:28 2025 GMT
            Not After : Jun 14 14:00:28 2025 GMT
        Subject: CN=bc5595b5003b49ad2d05cacca7d00e4f49b9873c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:10:55:96:e1:b3:40:0b:ed:37:17:87:37:
                    e0:2e:00:de:ae:fd:bb:28:50:90:fe:d1:52:98:39:
                    28:96:b1:bb:29:67:f6:5e:ee:6d:f6:58:39:32:02:
                    ab:3c:eb:b4:d3:b6:62:09:ac:42:db:71:4c:58:e0:
                    2c:7b:df:88:04:29:e0:e5:71:cf:21:8a:5b:9e:87:
                    50:c9:ac:db:f7:8a:7d:80:a4:e3:01:bb:26:98:2e:
                    5d:7e:52:8f:ab:35:ba:e1:22:69:47:cc:0c:60:3a:
                    70:85:22:43:9d:ba:26:98:cf:3b:f2:93:c4:17:35:
                    e6:84:27:0b:35:00:f1:62:e8:8f:43:23:3a:cc:c5:
                    55:a3:9d:a3:53:5a:37:e1:39:d8:5c:ba:8d:5e:56:
                    96:b3:8f:23:a2:e0:3c:20:8d:f8:c5:c4:e3:bd:42:
                    4a:ef:b3:33:ab:95:ca:30:11:62:72:dc:d4:50:a2:
                    e7:e9:b7:30:32:90:07:fc:be:e3:e3:fc:8b:c2:4f:
                    3d:2c:ee:4c:f9:aa:a9:ba:40:88:67:a9:5d:1f:c1:
                    66:62:9f:75:95:2f:70:45:1b:7e:f3:d3:1f:bf:ab:
                    27:f8:15:75:04:c3:dd:56:09:91:1f:cb:4a:2d:b8:
                    45:a5:2d:b5:4b:cf:73:c0:53:bf:23:af:08:f6:3d:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:55:95:B5:00:3B:49:AD:2D:05:CA:CC:A7:D0:0E:4F:49:B9:87:3C
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:b5:3e:29:af:b4:e7:c3:a7:29:78:3a:1c:f6:d3:45:16:
         ba:ee:53:95:35:da:33:51:5b:22:99:ca:ac:fe:65:fe:68:1d:
         a6:b0:51:1c:66:b8:85:44:cc:ae:14:be:c9:d4:1c:0c:35:ac:
         2c:75:4b:b0:01:cc:9c:e9:f5:81:a9:62:5c:d0:72:ce:c5:91:
         bd:d6:d4:ff:71:36:71:c5:91:72:69:f1:1b:d4:54:50:4f:1b:
         c8:3e:e6:87:df:96:d6:5b:f1:45:f0:47:2b:06:50:47:24:42:
         fe:82:d6:dc:b4:a2:cc:0f:2e:01:11:06:51:0f:80:ee:d5:1a:
         a4:d2:67:b7:df:b5:c4:49:19:fd:03:f8:c3:45:e5:8f:ca:79:
         e5:ee:15:ab:01:27:0f:ba:f0:b0:6f:34:46:bc:9f:ed:54:e0:
         f2:b3:7b:a5:40:85:e2:cd:f9:fc:48:1f:b1:39:f0:6f:d3:af:
         c8:0a:0f:47:ac:f4:db:c5:0c:c3:a8:98:9a:f5:5a:9f:3f:59:
         e4:3f:fe:6a:15:ae:2d:c4:32:40:31:ec:16:b4:d8:00:57:43:
         31:c4:5f:57:02:79:d0:ed:73:bb:e2:01:18:34:39:c2:da:3d:
         0f:7d:8b:e3:d8:03:62:90:f1:95:00:e9:86:e6:04:cc:7e:39:
         77:25:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:51:06 2025 by rpki-client