Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          NN7MetnXvkYKBffXSZjoFC6SQ1qx4mp/Coh14HPdwSs=
Subject key identifier:   BD:E8:6F:46:6B:24:98:98:EA:DC:7E:17:F6:DC:22:44:57:05:31:B9
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       0197B6A229D555CE87CFA74A1B023965BC9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          122D
Signing time:             Sat 28 Jun 2025 13:02:50 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:50 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:50 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: AJPoSdfwnKIQehX06xmsyDkLM42Nnsi3ibjGKUQcZxY=)
                          2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:29:d5:55:ce:87:cf:a7:4a:1b:02:39:65:bc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: Jun 28 13:02:50 2025 GMT
            Not After : Jun 29 13:02:50 2025 GMT
        Subject: CN=bde86f466b249898eadc7e17f6dc2244570531b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:85:07:33:8c:fb:68:f2:10:de:29:99:b7:
                    8b:3e:11:4b:47:86:df:59:62:3c:0b:9a:5e:90:77:
                    ae:77:b3:6f:24:f6:53:fc:73:69:fc:91:64:24:1f:
                    18:b4:34:2c:6b:ec:09:7a:bd:ae:2f:35:b4:a4:e3:
                    37:e6:99:57:71:d4:86:d4:61:2b:ff:52:8a:69:e4:
                    0b:7f:1f:2a:17:96:3f:69:aa:84:01:60:40:1a:80:
                    f9:4b:81:dc:9e:19:21:7d:4c:5b:e3:83:82:00:f2:
                    d6:ea:7c:e4:e8:b3:22:ef:71:06:89:c8:16:22:e7:
                    50:c9:82:c2:41:18:64:43:fe:ca:2a:66:71:40:85:
                    3d:68:b6:a7:9a:ad:2d:7a:fe:9f:db:27:8e:42:1e:
                    f1:e3:c5:3d:60:2f:93:c3:db:bf:42:06:fb:b8:77:
                    01:87:c0:ba:1a:b6:c6:6e:35:d4:f2:bd:34:4e:33:
                    7b:21:27:7b:93:25:51:2c:ce:f4:bb:69:47:9f:72:
                    66:1c:8c:76:d9:67:87:33:6e:5a:61:90:3e:89:4a:
                    03:cb:85:48:a5:bb:d0:d7:e8:df:fc:9a:5e:3c:02:
                    02:60:56:9d:7e:a8:18:62:bc:4a:21:2e:71:e6:9a:
                    8d:11:e3:80:bf:6a:61:55:df:5b:d1:db:d9:17:55:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:6F:46:6B:24:98:98:EA:DC:7E:17:F6:DC:22:44:57:05:31:B9
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:14:d3:72:c7:25:2d:b4:8d:9f:3b:82:b1:f1:ec:cb:5b:1d:
         2f:2f:34:f4:33:1b:ac:33:c0:89:1e:21:75:2a:bf:e0:66:5a:
         ab:90:ac:2d:b8:20:ca:ed:85:b1:42:d5:8d:d0:a0:45:fb:98:
         26:4b:fb:07:c5:a7:a7:02:73:3f:0d:5a:54:78:7c:0d:72:94:
         d1:52:85:ed:e1:13:44:00:ec:3a:7b:05:e3:33:e7:a6:40:1b:
         dd:e2:23:0d:db:b7:2d:4e:b4:bb:48:d8:89:ce:6e:e0:d4:51:
         1d:16:e0:5b:25:0e:a6:56:e1:f0:65:d4:f8:cb:e0:6b:33:da:
         a1:66:ba:b3:73:54:a4:39:1f:d8:7a:64:ab:33:2e:af:a4:5c:
         80:39:28:68:ad:ac:45:78:c1:f4:6a:d4:f8:a2:0a:76:79:d4:
         36:be:0b:c2:f0:09:ca:66:5f:66:bf:27:f5:f3:ce:59:68:e2:
         a0:03:74:8f:67:fe:47:90:de:9e:0e:f1:aa:4b:01:18:ac:84:
         d1:49:1a:2e:ee:a7:cb:03:1b:82:7b:05:2c:e6:2b:03:6c:21:
         f0:d7:71:14:58:1d:ef:3a:db:b5:78:4b:5c:5a:c6:52:b5:ce:
         dd:f7:65:64:69:41:0c:ae:9a:7d:10:27:4c:c7:22:e6:d3:33:
         1f:21:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:43 2025 by rpki-client