Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File:                     J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier:          xOZ0JyJUL66yDsoYWa2vkKP5I81pL6yQmD3LfwpcKb4=
Subject key identifier:   31:55:8B:77:0F:93:43:AC:E1:45:FF:44:B3:38:8D:0A:9D:9A:4B:03
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer:       /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial:       0197759C0AB6F08A7BF50F71B1957763564D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number:          1596
Signing time:             Sun 15 Jun 2025 22:00:50 +0000
Manifest this update:     Sun 15 Jun 2025 22:00:50 +0000
Manifest next update:     Mon 16 Jun 2025 22:00:50 +0000
Files and hashes:         1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: dhviDDw/OMwpeGWnI9UaBRC+Nl6lfqeUG1yFuwuxdr0=)
                          2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
                          3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:9c:0a:b6:f0:8a:7b:f5:0f:71:b1:95:77:63:56:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
        Validity
            Not Before: Jun 15 22:00:50 2025 GMT
            Not After : Jun 16 22:00:50 2025 GMT
        Subject: CN=31558b770f9343ace145ff44b3388d0a9d9a4b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:9a:b5:4d:0b:d6:fd:2c:7c:50:b2:5d:9e:
                    7b:e8:46:15:8e:f6:c7:a2:da:62:42:bb:57:cf:73:
                    e0:35:bf:84:3e:47:10:7d:71:fe:34:ab:06:0e:9c:
                    e1:48:33:7f:03:61:f6:28:6d:03:1a:6c:f8:07:bc:
                    9e:f2:65:9b:c2:b7:64:fd:e4:53:42:06:07:54:fa:
                    4a:51:d4:96:ff:ba:55:4c:8b:b2:de:4f:46:df:18:
                    ee:fa:bd:6c:33:4d:90:31:24:c8:a1:f4:26:70:f9:
                    13:44:ab:0d:7b:04:ad:78:50:30:3f:90:f5:6d:01:
                    f0:bd:a5:f0:bd:b9:2e:31:ac:62:92:4e:0b:d9:f2:
                    7f:b2:01:05:cb:82:ac:5c:5e:10:1b:2f:31:86:aa:
                    e4:e1:3e:f3:19:e8:0a:2d:35:b4:cc:ac:34:b4:0f:
                    c6:2e:32:8b:03:2e:ff:bf:f3:1e:ac:4c:af:fb:5f:
                    1c:e8:c1:f0:42:25:22:ba:c6:2d:83:f6:70:86:c7:
                    10:f2:bd:64:31:ac:23:d7:e8:d1:6f:73:2e:15:fb:
                    c3:b8:04:88:4a:76:6d:70:f9:35:76:a6:65:5a:b6:
                    02:68:0b:d8:57:ff:ea:41:3e:6d:f4:32:21:ca:dc:
                    98:76:94:05:38:64:6e:6e:f2:ba:ca:96:fa:26:41:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:8B:77:0F:93:43:AC:E1:45:FF:44:B3:38:8D:0A:9D:9A:4B:03
            X509v3 Authority Key Identifier:
                keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c9:02:40:22:09:92:82:3f:1f:be:7c:4d:17:2e:5f:8e:ee:
         49:b4:68:36:ac:20:2f:6f:ef:51:57:f9:7f:e3:90:c0:0c:d5:
         fc:44:a8:d4:e4:b8:0d:8c:5e:54:6e:dc:9b:18:2c:55:85:ca:
         64:ee:2c:6e:04:de:e6:3b:8f:dd:75:3c:09:ec:34:2f:4a:86:
         a0:5b:91:f9:49:fd:33:34:a4:6a:d2:17:f6:9f:85:ca:5a:9f:
         e9:a5:a3:da:db:36:72:e0:8a:28:de:52:5d:a4:e2:0c:4b:6c:
         89:69:8d:19:b1:c8:db:c1:d2:2c:e9:99:80:a4:db:a9:e6:71:
         45:ec:b4:24:b4:b0:82:f2:ec:1f:bc:67:10:b2:09:85:2d:2c:
         fa:59:a6:40:ba:f6:00:0d:b2:64:b6:d0:5c:5f:c9:f2:b8:fc:
         a6:3a:06:61:4b:ba:e3:b2:79:7d:ee:94:9b:dc:a5:25:6c:b1:
         2b:16:af:01:4e:a0:ad:6c:ac:20:79:56:4b:a2:39:86:12:3e:
         2b:19:91:e4:cc:2e:e5:6b:7e:55:32:a9:b1:d0:a0:f8:5f:e9:
         82:ca:ef:2c:94:fa:7a:77:c1:4f:df:67:6e:9b:33:2f:ab:5a:
         b0:23:52:72:50:f4:1f:13:78:80:f2:ae:14:15:23:ef:57:15:
         c2:ff:be:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:14:30 2025 by rpki-client