Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File:                     jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier:          +r5CdIoMf5RQ4X2mcd/S7QJctBCTHBOmt7wPjPtsIrc=
Subject key identifier:   96:2C:D2:69:61:1A:06:57:C5:84:5C:AC:43:68:C5:D5:21:A3:F6:35
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer:       /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial:       01976EF52E6819603CA0C01355636663A310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number:          0C62
Signing time:             Sat 14 Jun 2025 15:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:51 +0000
Files and hashes:         1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=)
                          2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: OqBlZgwOGehibMcft/dhQNCopJpYSBMK7Jlza/iGmhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:2e:68:19:60:3c:a0:c0:13:55:63:66:63:a3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
        Validity
            Not Before: Jun 14 15:00:51 2025 GMT
            Not After : Jun 15 15:00:51 2025 GMT
        Subject: CN=962cd269611a0657c5845cac4368c5d521a3f635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:25:8f:ff:c2:54:56:ab:1f:18:ec:30:43:
                    7c:2d:60:23:f2:f0:d2:71:92:31:dc:91:92:bc:db:
                    78:3f:9c:ff:7d:75:41:d1:d1:fc:a5:8e:fe:d6:9a:
                    20:6c:f2:32:fd:25:f6:dc:b8:b7:71:7d:b5:cd:63:
                    f0:bf:15:f5:4c:0b:cb:04:8b:89:08:c4:41:01:87:
                    97:30:a2:ac:f4:5f:53:d3:17:d8:f0:3f:88:5e:db:
                    1a:cf:1a:a5:5f:ef:c1:d9:db:b8:7a:96:23:33:13:
                    22:3d:15:df:d9:4d:50:af:63:ca:85:7d:05:f9:76:
                    fe:7a:6e:e3:54:ed:68:9d:3d:6d:69:a0:d7:07:23:
                    82:6d:37:e0:05:38:69:47:04:35:9c:75:45:0a:e7:
                    96:f2:8c:a8:4f:fd:d8:72:51:23:5e:c2:48:cf:5f:
                    63:0f:55:1f:80:f3:38:92:4c:6d:b0:a3:ff:ab:c3:
                    c7:6e:98:81:6a:10:62:51:e3:3e:bf:4e:c5:69:8b:
                    0a:2b:fb:ba:99:3e:79:54:16:99:8a:31:88:fd:f6:
                    0e:5f:37:2e:cc:d5:f8:98:32:36:70:e7:df:a3:ca:
                    77:95:79:57:9a:10:1a:ed:32:37:69:71:51:3b:2e:
                    fb:31:1c:42:93:42:aa:de:f5:69:f5:bd:84:8a:dc:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:D2:69:61:1A:06:57:C5:84:5C:AC:43:68:C5:D5:21:A3:F6:35
            X509v3 Authority Key Identifier:
                keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ac:17:1a:e1:5a:f6:b6:42:4b:80:32:31:27:ea:b0:5d:78:
         4d:ee:6f:d8:39:d5:7d:c0:5d:33:d7:33:be:43:3d:9a:3d:f0:
         b4:f0:76:d9:5d:0d:32:d7:59:78:39:4d:12:09:a1:f0:43:a4:
         b1:80:9c:23:bb:44:4a:b9:0f:2a:e3:b1:92:45:3f:a8:30:0c:
         9d:4f:e2:b0:39:4b:c0:6e:d8:b8:e7:30:79:f8:fe:6e:34:d5:
         86:df:bb:e4:c9:1d:e6:9d:b7:01:d3:25:e3:68:d6:f0:bd:1c:
         9a:3a:c0:70:24:b7:e8:8a:96:e2:ec:ac:12:58:a8:d0:83:07:
         04:30:ea:84:e7:e8:68:91:a8:03:d5:d1:5b:08:9f:8b:17:fb:
         53:7e:6c:7f:44:31:22:0a:f9:72:ee:52:6b:9f:bf:fc:0b:ee:
         57:5d:02:74:47:cc:62:68:cf:e8:f8:a0:10:2c:36:3d:0e:14:
         22:61:63:6d:21:f7:8b:32:0f:85:af:5f:64:1b:91:1b:7b:53:
         5c:bf:3a:2d:47:97:75:a6:bd:cb:5f:de:56:fa:fd:26:f7:e8:
         94:77:f6:fe:a0:3b:9d:81:38:7b:85:60:18:90:20:b0:02:05:
         c6:47:6e:8b:cb:cd:19:83:9f:aa:35:6c:e2:be:d0:eb:a0:bc:
         82:dc:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:20 2025 by rpki-client