Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File:                     JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier:          Mihr5xXcalPAYC2BHlnXlxU2pdbPgsPNKgo6lna893Y=
Subject key identifier:   0D:B7:9D:B8:EA:32:3F:07:1A:31:46:FC:7E:20:7D:43:68:2B:DC:6D
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer:       /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial:       0197BAEBCB1361AF7B91B438EF8050AAFEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number:          08FB
Signing time:             Sun 29 Jun 2025 09:01:44 +0000
Manifest this update:     Sun 29 Jun 2025 09:01:44 +0000
Manifest next update:     Mon 30 Jun 2025 09:01:44 +0000
Files and hashes:         1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: QfeJ4WM2xDK4WJcfpFiA7gB2QnxzJMjxTiuzX0tgbhM=)
                          2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:eb:cb:13:61:af:7b:91:b4:38:ef:80:50:aa:fe:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
        Validity
            Not Before: Jun 29 09:01:44 2025 GMT
            Not After : Jun 30 09:01:44 2025 GMT
        Subject: CN=0db79db8ea323f071a3146fc7e207d43682bdc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d4:85:42:5b:03:25:fd:27:c8:ab:33:aa:b9:
                    cf:f4:26:bc:1d:0b:38:95:8a:bd:d9:73:5a:4c:1b:
                    94:9d:2d:1b:db:84:27:75:10:f5:83:1c:42:63:8f:
                    f2:b9:ed:ce:ea:b3:a5:76:13:a4:9c:0a:e3:c7:60:
                    e2:79:ef:30:51:c6:11:c8:35:3a:c6:41:67:e1:d2:
                    8b:2f:bc:0b:37:13:72:0e:06:ad:fc:1c:e8:3a:0e:
                    ac:84:ed:cc:d7:3f:6d:b5:be:22:39:51:28:9e:7d:
                    25:5c:2e:cc:6f:bb:3b:d5:83:8c:c8:d1:9c:5d:68:
                    77:85:6a:7d:74:3b:ff:a4:4b:1d:de:cd:ec:04:83:
                    cb:98:21:2f:42:33:84:8a:59:a0:8d:67:2d:76:95:
                    df:6d:58:5b:33:05:5d:23:a7:96:10:dc:74:55:9a:
                    4a:23:cc:a2:be:66:63:b1:ef:c1:d9:64:06:d9:7c:
                    c3:67:1a:42:de:0a:2e:eb:43:7f:9b:6e:be:6f:c2:
                    f4:92:cb:8f:66:b9:4f:52:9c:59:fd:25:a2:4b:a7:
                    20:3b:89:57:e3:02:dd:bf:50:0c:34:fb:1c:ac:de:
                    76:ce:64:55:3e:ab:5c:66:7a:2d:c9:52:ca:3b:80:
                    59:3c:a6:34:5d:f8:e6:27:d9:bb:26:3a:50:4f:b1:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:9D:B8:EA:32:3F:07:1A:31:46:FC:7E:20:7D:43:68:2B:DC:6D
            X509v3 Authority Key Identifier:
                keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:9b:27:f8:e7:88:88:0f:42:dc:d7:42:84:c4:05:ac:93:6b:
         a1:01:16:20:4e:be:83:38:5f:30:6a:d9:91:f7:9b:cd:65:16:
         06:84:86:c9:c2:d1:70:b0:4b:ce:fa:6a:14:95:46:f8:64:62:
         e0:44:d8:25:31:6b:d3:9b:28:0c:bd:f8:2d:40:38:35:02:07:
         ab:d7:9a:c5:5c:b0:47:10:8c:23:bd:b2:c1:b7:50:0d:f4:c5:
         67:4a:f8:6d:17:ad:77:f9:1f:95:a5:19:97:c3:36:14:e5:6a:
         a3:56:71:14:9e:f7:ef:bb:b8:29:36:ff:26:47:3c:12:fd:c6:
         19:c8:3c:e1:1a:2e:45:ed:c0:5c:16:8f:3e:7b:8d:2c:15:10:
         d3:48:b4:b9:f8:26:0b:85:b3:e2:3b:64:3d:76:90:61:a9:20:
         80:e5:3d:30:eb:ed:00:a3:d7:31:d3:7d:ea:e8:4d:05:92:7a:
         b3:62:20:7b:35:59:62:c0:89:ee:c6:5a:6a:fd:9a:79:53:81:
         0c:70:21:55:7b:df:22:c4:13:2a:c2:db:06:e7:09:35:37:26:
         0c:47:53:36:3c:ef:34:14:cb:d0:b7:c4:3f:ff:46:2f:68:23:
         27:82:5d:f5:70:2e:d3:6b:6f:64:b6:2a:d0:24:42:7e:0d:61:
         2c:b3:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:11 2025 by rpki-client