Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File:                     JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier:          xgoVYmrJQjJucsUVghUHKf1LihxDohWn10DloYXQJHg=
Subject key identifier:   EE:BA:C6:86:53:01:C3:C5:FA:C5:F9:43:85:98:25:36:A4:5C:86:D0
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer:       /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial:       019777C132C9CC24E4993776ECADF8A8D2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number:          12DA
Signing time:             Mon 16 Jun 2025 08:00:39 +0000
Manifest this update:     Mon 16 Jun 2025 08:00:39 +0000
Manifest next update:     Tue 17 Jun 2025 08:00:39 +0000
Files and hashes:         1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: 6743g5RPTH4m84YgclyAiJdVHxDt1n+SZzatFg43GdQ=)
                          2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c1:32:c9:cc:24:e4:99:37:76:ec:ad:f8:a8:d2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
        Validity
            Not Before: Jun 16 08:00:39 2025 GMT
            Not After : Jun 17 08:00:39 2025 GMT
        Subject: CN=eebac6865301c3c5fac5f94385982536a45c86d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:a8:f3:56:30:1e:f9:c2:37:05:87:98:38:
                    ae:85:19:97:c5:22:02:8d:20:92:11:b8:31:18:40:
                    81:9c:38:a6:a6:51:af:40:41:7e:60:43:89:6d:8a:
                    a8:7c:73:a8:b5:b6:56:65:55:47:55:e6:59:2e:f4:
                    ca:e9:ae:0d:2d:b1:25:17:c2:da:a5:4a:8d:92:c1:
                    cb:e2:d6:d1:32:ac:bd:62:72:b6:e8:f1:6a:5e:88:
                    b8:c8:6d:4b:d1:5d:2f:44:4f:35:59:da:29:14:20:
                    2b:bf:8e:af:9c:6a:b3:89:d0:29:56:44:81:0c:1e:
                    b6:14:6b:95:f0:d7:ef:7f:a9:03:e8:bd:de:b8:a8:
                    b2:da:47:41:b8:41:3c:b3:ec:e0:1b:77:0b:88:af:
                    d1:68:90:17:08:46:67:62:a7:9a:47:c1:fa:4c:5e:
                    bb:93:92:4d:98:ed:bc:e4:4f:2e:68:68:d9:76:35:
                    ac:a6:8e:a9:bd:9d:13:98:3a:a7:c4:81:3c:c9:89:
                    c2:ef:c9:7d:af:b5:c5:75:43:c5:cd:20:3b:d0:ba:
                    db:c2:0e:c1:bc:ca:c4:fa:21:bc:05:87:ed:8b:66:
                    60:6e:09:2b:ea:ac:b0:e9:9a:b7:93:f9:52:fd:ef:
                    04:41:da:5f:a6:1f:f0:a8:36:38:61:c2:e8:c1:78:
                    6c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BA:C6:86:53:01:C3:C5:FA:C5:F9:43:85:98:25:36:A4:5C:86:D0
            X509v3 Authority Key Identifier:
                keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:dd:d6:83:d9:e0:f1:d6:79:c0:85:54:3e:ef:8e:37:4b:
         62:92:ca:91:0c:f0:d4:56:0d:94:ba:88:91:53:30:e4:1b:45:
         94:bd:95:86:4e:cc:97:4f:f3:a4:11:de:96:8e:7d:b5:2e:8d:
         9e:1f:06:eb:d7:df:8e:76:21:78:aa:01:87:df:3e:1f:2a:1e:
         29:0b:99:07:11:b5:25:d9:68:15:a4:ca:c8:f5:15:0e:1f:3c:
         d1:46:b2:c5:c9:82:4c:73:fc:16:58:43:bf:06:36:ee:46:7d:
         dc:6b:b8:08:3b:43:8b:9d:d3:98:5d:15:a3:5f:92:1b:2c:0a:
         aa:65:3b:bd:d9:ce:52:d1:c1:d5:0b:f0:fa:40:0b:0b:fe:eb:
         14:49:65:2e:80:5c:e7:4b:5e:c8:6f:8b:83:c5:a0:19:0f:ab:
         4a:90:f6:9e:f5:c7:8a:a2:69:83:78:cd:99:d4:40:af:99:7e:
         09:23:29:6c:35:87:19:f9:99:18:69:20:2c:87:b6:87:b5:aa:
         cd:6f:4e:6a:8f:5d:8e:00:5d:da:48:6d:c7:62:e3:c7:e1:44:
         b6:56:97:60:c0:0d:d0:87:80:21:c9:9b:e0:29:4a:a5:33:22:
         70:d2:c2:cc:60:af:c2:d7:43:06:44:75:b5:ab:80:58:19:47:
         0a:9b:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:32:03 2025 by rpki-client