Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File:                     j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier:          q4XZ/NA1AJN82CJrQeduWy9cSTMdPdfEsm5CexqdF8k=
Subject key identifier:   6A:E5:4D:FF:B9:6E:FA:F0:0C:97:A7:22:73:34:C1:36:E4:DB:81:A8
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer:       /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial:       019787D8C0A5B33B51AA8020E12010A6029E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number:          13B4
Signing time:             Thu 19 Jun 2025 11:00:18 +0000
Manifest this update:     Thu 19 Jun 2025 11:00:18 +0000
Manifest next update:     Fri 20 Jun 2025 11:00:18 +0000
Files and hashes:         1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=)
                          2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: dzz7AcwcQy0WGHMTcJb5Bd5dM3tQ83CdtZD4ASbzNaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:d8:c0:a5:b3:3b:51:aa:80:20:e1:20:10:a6:02:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
        Validity
            Not Before: Jun 19 11:00:18 2025 GMT
            Not After : Jun 20 11:00:18 2025 GMT
        Subject: CN=6ae54dffb96efaf00c97a7227334c136e4db81a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3a:5b:56:14:d7:a6:6b:3e:ce:ca:49:b5:71:
                    2d:bb:b9:bd:4a:89:bb:e7:d6:3f:c4:45:43:4c:ba:
                    97:86:10:6f:23:69:c6:97:94:32:da:6a:35:26:da:
                    22:c2:4f:bf:c5:83:f7:bc:ac:2e:9c:e6:fa:ce:3c:
                    57:63:12:d2:76:5b:79:a1:34:d3:4f:88:57:7f:32:
                    8b:51:d0:1c:6b:fd:a0:5b:40:be:55:f0:bd:49:86:
                    4c:7c:3d:b7:e8:d9:c3:a8:8c:67:32:ed:b7:36:90:
                    f3:1d:e1:05:6e:5c:46:be:b6:9d:d7:43:e6:27:da:
                    ec:16:5b:b7:58:52:03:16:c2:e3:d2:51:01:87:03:
                    5f:ad:27:8d:fd:db:5c:25:8b:b7:6b:16:5c:74:99:
                    d0:98:09:80:15:db:5b:52:3b:ab:67:bb:52:86:ca:
                    15:d6:36:da:3b:7b:ee:8a:aa:a2:80:b6:7e:a6:62:
                    7d:36:b7:78:71:4f:96:70:7f:fe:4f:5f:06:75:ae:
                    f1:61:dd:0a:1e:fc:3d:8c:e2:2e:23:73:74:32:f5:
                    be:87:90:ba:1b:ae:7f:d7:41:71:d6:94:e0:55:08:
                    1f:2a:ce:05:66:84:c4:e9:3d:3f:f5:59:8f:6b:c0:
                    a7:af:c2:3e:59:ad:f4:49:7d:bc:c6:4e:29:8c:76:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:4D:FF:B9:6E:FA:F0:0C:97:A7:22:73:34:C1:36:E4:DB:81:A8
            X509v3 Authority Key Identifier:
                keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c3:d9:c2:b9:4e:f4:27:40:ed:39:44:47:f9:01:2d:93:6e:
         fe:d0:a2:b9:1d:ba:70:34:34:47:e5:a6:9a:02:ec:fb:c6:e6:
         26:44:ef:f0:8a:f6:c2:8f:1f:1f:a8:46:ab:60:f4:4b:53:7d:
         57:dc:68:20:84:4c:7e:7a:5f:b5:15:fd:aa:89:89:6d:8f:18:
         8e:4c:f6:1f:99:2f:8c:42:59:87:03:0a:b1:4e:ff:5a:11:61:
         ff:97:29:a4:7c:53:eb:0b:97:0f:e3:59:46:1c:8c:4e:e3:59:
         d6:d9:76:8d:6d:8f:cc:98:79:dd:18:67:70:32:d1:c8:ca:62:
         97:94:cb:1b:ee:16:5b:aa:12:b2:4b:ba:6c:8c:db:0e:f9:c3:
         43:a0:e8:79:0f:d7:19:5d:9f:da:28:de:81:e8:e4:30:a4:a6:
         de:09:75:82:aa:3a:c2:90:b6:2c:c9:34:57:e1:69:39:75:a3:
         2c:07:39:c2:ca:6f:84:0b:81:ab:90:f8:7e:79:00:14:a0:38:
         44:4c:33:b5:3c:97:03:02:e4:fd:a3:69:8f:19:78:05:20:7b:
         e3:2c:72:9d:f5:21:a9:f6:f9:79:a6:38:2c:01:e8:b1:99:f6:
         97:f8:ac:ba:e0:76:24:68:96:c8:d6:f3:56:91:cd:4b:ea:37:
         e9:e7:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:41:32 2025 by rpki-client