Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          BsWGa+j5jJ0unxr8SGJPnIHAcvSFN9JS7752RrBXEyU=
Subject key identifier:   B4:6F:EC:67:B8:E1:79:1A:6B:24:F7:07:30:9A:BC:EF:71:09:47:06
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       0197C380CE0CE67B4B2AFA543582F02830C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0A64
Signing time:             Tue 01 Jul 2025 01:01:27 +0000
Manifest this update:     Tue 01 Jul 2025 01:01:27 +0000
Manifest next update:     Wed 02 Jul 2025 01:01:27 +0000
Files and hashes:         1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
                          2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: XmL2hjecdn2oQUcpNhbBMffw1wvfYjLA3nCUX98atYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:80:ce:0c:e6:7b:4b:2a:fa:54:35:82:f0:28:30:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Jul  1 01:01:27 2025 GMT
            Not After : Jul  2 01:01:27 2025 GMT
        Subject: CN=b46fec67b8e1791a6b24f707309abcef71094706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:70:e5:5c:21:a0:38:c2:86:20:fb:07:bf:
                    e1:2a:1c:95:b0:38:88:3a:29:ed:9f:72:21:9a:71:
                    37:77:26:b4:4a:0e:36:42:2a:d7:5b:0d:8a:f8:e9:
                    54:ba:e2:a8:7c:da:05:2d:47:d3:0c:1a:19:19:18:
                    f0:0d:65:24:65:ee:58:27:70:6b:39:a6:52:7b:21:
                    ff:98:62:57:f3:b5:56:d4:d3:9a:da:7d:22:e4:5a:
                    5e:63:1e:c4:2b:71:e0:b4:23:b5:d3:f9:6d:9f:0a:
                    41:ca:55:33:49:de:08:bf:e8:28:14:e3:12:b3:be:
                    0d:6b:80:6b:ae:8e:5e:92:b6:75:13:85:04:ad:c2:
                    9c:d9:d4:e4:c8:30:7c:98:f8:37:e1:43:38:da:bf:
                    2a:91:97:62:4e:41:02:3e:e6:9f:d3:05:eb:1e:57:
                    0a:0c:86:f4:82:8b:90:98:86:12:b2:2d:e9:45:05:
                    42:1d:10:a3:17:1e:0d:2c:28:99:c2:f4:ac:9b:94:
                    bd:1e:56:d6:88:08:56:1a:b0:aa:e4:65:16:c6:66:
                    65:5e:78:72:b1:39:95:2c:e0:71:b2:cd:cd:e0:32:
                    76:82:20:41:e5:89:03:9a:1b:59:0a:91:4c:b9:1e:
                    86:3b:e4:ba:33:88:23:88:88:45:05:65:db:ec:b4:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:EC:67:B8:E1:79:1A:6B:24:F7:07:30:9A:BC:EF:71:09:47:06
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:18:04:c9:bc:43:6e:a2:0b:bc:65:34:6d:3b:1c:61:18:
         54:5f:f6:a0:c9:79:ba:f9:fa:52:6d:73:d8:ea:a6:8f:19:3a:
         77:43:76:d3:01:83:bb:78:e6:95:2e:9f:92:db:d5:d1:b9:09:
         bc:82:62:be:1c:fa:ba:1f:d1:fe:e1:dd:3c:c4:38:ca:16:6f:
         8c:08:ef:3e:34:24:3d:ca:ba:57:0d:dd:9b:e2:2d:2c:2a:14:
         48:fa:7e:05:c2:b6:53:04:0b:39:09:04:32:de:05:81:8a:5e:
         4c:3e:be:00:55:f4:8a:bc:0e:90:7b:9f:b0:a1:04:26:0f:88:
         d3:b6:ad:76:7d:40:12:66:99:58:da:55:45:8b:ae:ff:41:d9:
         a7:8e:d0:99:8a:bd:28:06:e0:24:99:9c:43:7a:a4:51:68:68:
         5a:8a:3a:9b:ff:82:01:b1:8c:b2:5f:96:1b:3c:05:4e:17:b8:
         79:f1:b3:74:e3:ab:3c:36:bf:d3:4f:bc:b7:78:e9:0c:ef:47:
         96:65:66:dd:46:8a:bb:72:cf:2c:79:9a:4b:9d:34:46:b6:96:
         97:bb:64:df:35:38:79:ee:12:03:64:d5:77:2c:81:e9:8c:ec:
         fa:1f:8a:db:cd:15:ca:25:59:0e:2d:4b:f2:a0:e2:4d:10:e0:
         e6:9b:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:33:54 2025 by rpki-client