Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File:                     j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier:          +V8d1Jlob9rrSCr3PG8n9rlZMTERaWaLFY47cSfidg4=
Subject key identifier:   F7:40:13:ED:16:35:0F:8F:C8:BD:A4:56:E5:3F:D9:C5:47:9A:F4:7E
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer:       /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial:       019771518C30916348C8EB6EDFE7E1F93745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number:          15A4
Signing time:             Sun 15 Jun 2025 02:00:59 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:59 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:59 +0000
Files and hashes:         1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
                          2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
                          3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
                          4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
                          5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: JyuhWa1HOeCRUfZbVSWm8Fw0Da5G/j+GMXM9x5zRMA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:8c:30:91:63:48:c8:eb:6e:df:e7:e1:f9:37:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
        Validity
            Not Before: Jun 15 02:00:59 2025 GMT
            Not After : Jun 16 02:00:59 2025 GMT
        Subject: CN=f74013ed16350f8fc8bda456e53fd9c5479af47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:ea:d3:2a:bc:2e:a2:80:80:8c:e0:4e:e2:
                    da:e0:7f:c8:17:96:3d:ff:15:02:a4:91:93:0b:14:
                    e5:0a:b7:10:b3:7b:73:2f:7a:8f:fa:87:3b:27:b7:
                    8f:cf:8e:a0:8a:ea:a4:08:27:e1:7d:48:ae:d2:e3:
                    36:4a:ae:02:c7:fb:a4:14:c1:6c:3b:1d:00:cb:63:
                    3f:69:fc:0a:8a:05:72:86:13:82:00:27:46:ee:ed:
                    5f:60:9f:02:ab:30:f6:19:bc:4a:df:ac:3c:f0:fd:
                    82:af:68:cb:7d:ed:30:95:9c:1d:80:c1:63:7d:39:
                    3d:75:dd:e0:18:7f:4f:63:45:32:f5:c0:17:e2:ee:
                    70:80:35:d1:12:ea:b7:29:b0:fd:ed:62:39:b0:1b:
                    6f:b7:d2:34:fd:66:14:29:d4:14:89:28:9e:33:07:
                    b8:1d:a6:bd:dc:73:e2:5b:4c:09:cc:76:1a:dc:f7:
                    db:51:1b:bd:67:9c:31:dc:84:16:18:e4:e7:6e:d8:
                    7a:63:55:38:33:15:a6:3e:b0:af:1c:e8:81:99:ca:
                    7d:d0:bd:fa:69:81:e7:41:ba:17:38:ba:cc:1e:10:
                    6c:2d:47:99:6d:a4:31:e0:53:a1:b1:11:0a:01:76:
                    09:0a:f5:24:9c:45:e5:25:3b:ce:0b:48:6b:7f:38:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:13:ED:16:35:0F:8F:C8:BD:A4:56:E5:3F:D9:C5:47:9A:F4:7E
            X509v3 Authority Key Identifier:
                keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:06:70:53:fb:b0:8c:90:78:da:43:61:f3:dd:cb:47:69:
         a4:be:18:5d:d5:0d:9b:9d:bf:54:1b:90:44:5d:96:d8:17:2d:
         c8:30:4d:8b:1f:72:91:0d:f1:14:7e:44:99:0f:a5:7a:fa:fa:
         97:9d:ff:21:f7:a1:ef:28:66:54:f5:78:1e:3a:2e:4b:fd:e6:
         a8:6b:d2:10:9e:bb:db:df:d9:e7:3f:ae:0c:77:d8:8e:1e:31:
         4a:a6:ef:ca:8a:ee:0a:c4:3e:de:35:ec:9c:a5:37:2a:10:1f:
         fd:12:f8:fe:f7:2b:cc:78:bb:11:87:db:25:00:5d:79:3f:a5:
         a6:8f:5d:6d:6b:ca:12:ff:c2:3d:29:a7:4b:82:e2:7b:e6:d6:
         d3:5a:1d:cc:4d:d2:3f:d4:41:45:7a:63:5a:8b:10:4d:56:ee:
         5b:cd:18:f8:42:30:35:a9:7d:7d:60:32:cd:7d:c0:be:d0:23:
         b1:bf:50:7e:23:7c:0f:83:d6:e1:52:46:40:a7:6a:22:77:cc:
         c6:f5:13:09:d6:f2:ac:6a:2f:65:49:e1:20:92:58:9a:23:52:
         a8:22:42:6e:3e:51:b0:88:c6:85:04:21:98:67:4f:40:25:b3:
         4d:7b:d9:7e:ee:a5:09:5c:7c:21:75:68:88:5a:a2:5e:aa:eb:
         3f:cc:65:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:41:50 2025 by rpki-client