Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File:                     rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier:          XJjWvBtqUBjWdNXrnxRm+4wdjCMtcNMs4jjLHDf+24c=
Subject key identifier:   B0:B6:A5:0A:AF:A8:C5:BC:8F:8E:C2:07:95:B5:5E:C4:23:F8:1D:D1
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer:       /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial:       019775D2F84F08CFCF24F02DB6F92F5B0A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number:          0A85
Signing time:             Sun 15 Jun 2025 23:00:49 +0000
Manifest this update:     Sun 15 Jun 2025 23:00:49 +0000
Manifest next update:     Mon 16 Jun 2025 23:00:49 +0000
Files and hashes:         1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
                          2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: 8xMnViDZVtEGEOoVBLBzbVEPDK3FJ/hD8YHYDROYYfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:d2:f8:4f:08:cf:cf:24:f0:2d:b6:f9:2f:5b:0a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
        Validity
            Not Before: Jun 15 23:00:49 2025 GMT
            Not After : Jun 16 23:00:49 2025 GMT
        Subject: CN=b0b6a50aafa8c5bc8f8ec20795b55ec423f81dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:b6:86:d8:41:e3:15:9a:0e:74:01:82:38:
                    76:e4:ce:31:e0:ce:0c:2d:ab:a5:c2:ed:ae:24:48:
                    a5:cf:d1:a4:89:42:ee:8f:34:52:18:54:86:14:cf:
                    3a:9c:57:c9:fd:93:da:07:cf:97:77:17:85:13:70:
                    b0:65:e2:7c:8a:2a:27:9e:5f:cd:78:2f:42:e1:45:
                    75:a8:8f:f2:0f:1c:7e:5d:e1:e1:02:86:62:70:46:
                    15:bd:82:0e:7b:98:0c:8d:10:27:05:fc:6d:1e:0d:
                    1d:06:99:d1:be:1f:03:41:5e:3b:e6:54:1d:7a:70:
                    7f:23:37:17:d4:a9:90:6c:50:fb:af:83:9f:a5:14:
                    f8:f7:f0:ab:2b:4b:a9:d3:89:e6:0d:1b:76:78:6f:
                    48:bc:64:5e:c7:e0:97:c8:9f:d7:c0:8b:0e:de:83:
                    23:38:04:b2:92:16:28:f2:69:22:d7:91:85:f6:c6:
                    2d:37:2f:3c:18:ab:e8:22:66:84:03:0b:66:20:cf:
                    4d:65:42:3d:15:31:c5:ee:1f:fe:9e:be:de:56:3e:
                    73:60:88:eb:0f:50:9a:ef:e8:75:01:0a:36:74:b2:
                    6f:a9:bb:e5:79:b2:30:a2:92:08:da:b3:fb:ca:d0:
                    06:34:43:85:9b:c9:9b:60:cd:5c:39:21:d4:9c:67:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:A5:0A:AF:A8:C5:BC:8F:8E:C2:07:95:B5:5E:C4:23:F8:1D:D1
            X509v3 Authority Key Identifier:
                keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c8:7d:2b:7d:ca:a3:6e:f0:00:ef:8c:8e:bf:1c:53:4b:4e:
         62:7f:bb:a9:8e:a8:48:49:10:bc:5a:5a:06:96:1e:12:90:6b:
         2c:94:e3:35:d7:32:1a:79:0c:c7:de:15:1c:ae:c1:28:7a:0b:
         0e:4d:f2:ba:df:39:5c:8d:76:df:4e:9b:9b:66:40:e8:39:4b:
         e0:ba:b6:09:6c:b6:86:92:72:9a:7b:27:dd:a7:e0:7c:4b:a3:
         91:a2:ee:8e:b6:57:93:2a:5f:81:a3:43:cc:a2:ed:74:0c:00:
         4e:9d:5f:45:5b:b8:51:c5:33:40:ce:86:8d:d2:eb:37:18:87:
         68:5f:6c:7c:00:a6:ba:61:8c:10:97:ba:06:e9:b3:b1:9e:13:
         ab:d2:c0:cc:0c:e7:b9:20:07:b2:d8:24:67:8d:34:ef:17:52:
         d1:68:4a:c2:2a:41:de:ed:39:ae:8c:44:e1:41:a5:ba:46:cb:
         b7:2b:c3:a3:3b:e3:d2:9e:15:34:b7:57:59:14:eb:13:fe:31:
         6a:b2:a2:bb:84:07:a4:bd:90:d3:c4:b0:70:f3:39:08:06:2b:
         6f:8f:9f:87:f3:51:3c:b3:9c:fb:65:c3:48:7f:18:26:1a:d8:
         e7:ff:00:50:fe:c7:c3:dd:e4:22:52:10:d5:74:53:2e:5c:25:
         8a:87:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:27:57 2025 by rpki-client