Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File:                     j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier:          G+GfFTQH2V3dcCEIxWdqBsuzrI1XWRsGdbgFsGH7AVM=
Subject key identifier:   18:F4:45:6B:F1:C8:3D:10:D0:F9:D8:A1:E5:4F:95:29:55:44:A4:98
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       0197C2A50CDBFC37C7135C1DEB8B47D96683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number:          0DF0
Signing time:             Mon 30 Jun 2025 21:01:25 +0000
Manifest this update:     Mon 30 Jun 2025 21:01:25 +0000
Manifest next update:     Tue 01 Jul 2025 21:01:25 +0000
Files and hashes:         1: 0hR_0c7RQJiSWec5GOXGTkJBB-o.roa (hash: 6B95v6L3QKq5sJN6SrWqfMlBSuwCIbwLv0Gvp6AwXSs=)
                          2: HWJyqOYgKmYyzjid7IInVzpFlwA.roa (hash: 3+ag2Dw5tuJ29n6cQ1euqcvO0rPVdHqsSUSY7z8He/0=)
                          3: SA-KGCApQAk5dV-uBcL4crTpK78.roa (hash: U4+vxtQUb5bot1HWyDwYpTjdt9NcKSDTCzFzv9zH3l8=)
                          4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: YdnGjZShbJKPEEPxYeUpEiCdQMApt+z0DDbM8aehyik=)
                          5: l_EpL9DerXvkoi9mgtKAqNomA8k.roa (hash: NYPx355N2XC2PNV7lGv0qgOFwLrFg0uF6l0cLL8mgHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 15:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c2:a5:0c:db:fc:37:c7:13:5c:1d:eb:8b:47:d9:66:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: Jun 30 21:01:25 2025 GMT
            Not After : Jul  1 21:01:25 2025 GMT
        Subject: CN=18f4456bf1c83d10d0f9d8a1e54f95295544a498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:c8:d2:c8:52:b0:7b:e6:12:da:36:55:f3:
                    5a:18:7e:b5:ee:25:28:53:2b:96:69:aa:02:a0:d7:
                    6b:c1:be:22:70:d4:87:fb:3d:28:db:b5:eb:6d:8a:
                    50:7d:4f:25:1a:6a:47:23:2c:8e:66:22:95:6e:c1:
                    cb:da:10:f0:ef:bf:ab:0e:88:54:d9:34:33:8d:99:
                    da:08:be:3c:9f:6b:9a:1e:5b:74:89:4a:16:51:5f:
                    f9:56:84:e9:32:ca:6f:3b:df:56:7b:5a:57:7e:8c:
                    f1:9a:11:12:c9:e7:1c:3d:b2:8c:71:50:34:0c:7d:
                    15:d4:4a:8b:3e:43:64:5a:49:08:23:f1:6e:50:dd:
                    a4:f7:de:dd:59:68:ce:c7:74:4c:91:80:a4:bd:41:
                    f4:b2:26:d1:35:df:95:94:2b:24:93:c4:a6:fc:40:
                    21:21:4b:19:23:94:b5:c7:f9:01:23:63:33:4e:28:
                    8c:96:7e:26:d7:b4:ae:4b:a9:e4:50:d7:9d:f6:50:
                    ed:31:03:73:0a:28:db:47:9b:f9:fe:84:dd:26:d0:
                    d1:2c:f1:b3:44:2e:c0:8f:a3:49:dd:61:1a:dc:84:
                    16:6a:14:01:a1:91:71:9b:38:b5:e5:c7:b6:de:56:
                    3c:5b:62:46:a9:85:64:61:22:e3:46:ce:07:8e:77:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F4:45:6B:F1:C8:3D:10:D0:F9:D8:A1:E5:4F:95:29:55:44:A4:98
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:37:bb:fd:b5:7f:f1:aa:d8:0a:74:c7:b6:fa:54:78:f7:49:
         84:43:f4:04:ac:2e:14:f2:e5:df:07:d4:c3:cd:ac:9c:22:a1:
         63:04:96:5d:b7:8c:4d:4a:37:60:fe:0d:a3:9c:83:e2:fd:6b:
         5b:13:76:10:2f:c1:ad:78:64:0e:2a:17:24:b2:bd:13:62:6b:
         98:52:0d:04:24:48:51:46:1c:94:ac:ee:37:f1:ac:c0:73:ca:
         9b:e3:b6:76:b3:c7:15:25:55:1a:10:7c:a1:f3:60:0f:cf:16:
         87:f6:a0:2b:42:d1:91:0c:18:98:07:52:74:78:31:55:60:14:
         bb:31:72:67:a6:97:58:8d:62:70:5e:8b:04:f0:7c:f3:81:24:
         05:04:09:17:34:71:a5:f3:58:fe:18:9f:a1:57:80:bd:3c:3c:
         48:80:67:72:a4:4c:e6:bd:4d:4f:6f:12:ec:61:e3:57:03:37:
         c1:c2:70:12:ae:59:33:ce:0c:49:ec:cc:c7:5f:f0:4e:3d:a8:
         06:86:5c:be:75:3c:23:a0:33:5b:74:be:eb:53:d6:37:af:45:
         0a:43:7d:fe:32:13:13:bc:25:2e:e5:73:22:39:2c:e3:48:69:
         0c:ee:46:20:8d:80:5a:cb:24:57:0b:db:04:ed:04:51:39:4e:
         ae:4f:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:46:43 2025 by rpki-client