Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          Vp3GcFPewgxx88ihSPzyeoXyC7kgHWlfDo09PYoyD4I=
Subject key identifier:   61:BA:4C:AB:55:9D:75:8D:B8:4C:E6:36:7A:ED:48:B2:C9:D2:26:9C
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       0197B77CB833C21B9D4E7BB1720A786BF5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0C84
Signing time:             Sat 28 Jun 2025 17:01:33 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:33 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:33 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: ySSCH5JfuciojJklCGV4rGTuo0c0PUFb39Qwo2KCSIA=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:b8:33:c2:1b:9d:4e:7b:b1:72:0a:78:6b:f5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Jun 28 17:01:33 2025 GMT
            Not After : Jun 29 17:01:33 2025 GMT
        Subject: CN=61ba4cab559d758db84ce6367aed48b2c9d2269c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:c1:c8:a8:0d:29:a0:c6:ea:fd:8d:b9:44:
                    a9:78:9c:ee:07:91:7a:c4:d8:f4:1d:3f:5d:c5:ee:
                    88:48:4d:e3:db:de:48:21:3f:ec:54:16:d8:81:58:
                    1e:ca:77:47:fd:30:f1:f5:a4:89:1a:ba:6c:9a:bb:
                    0a:04:40:af:5c:d2:3d:5c:fb:f6:82:1a:87:a5:66:
                    12:cb:e8:84:63:9e:12:26:1b:69:75:72:ca:da:9a:
                    da:d5:e2:3a:20:87:d4:92:1d:dc:4b:de:b9:25:11:
                    ef:cb:84:6c:ff:29:6a:31:eb:b7:7b:24:bd:81:55:
                    03:0b:73:27:41:0a:74:63:8b:9d:6a:41:0a:81:76:
                    09:fe:cf:d5:9e:66:f2:c1:02:fd:28:f1:f9:f2:ff:
                    25:48:53:4c:09:77:22:c4:84:22:9e:66:48:82:71:
                    0c:46:71:93:13:d6:6e:77:ac:30:34:a8:40:e1:94:
                    f7:9b:b0:d6:50:b4:f9:dd:1c:6f:d8:45:54:1b:d2:
                    a8:9d:8b:c5:1c:51:0f:77:af:41:fa:d0:d7:8b:c0:
                    6e:9e:d3:b0:ca:df:59:c0:e7:89:61:b8:f6:90:76:
                    bd:b9:02:e0:3d:aa:0b:c6:ed:7f:3d:de:8e:c5:86:
                    24:c3:dd:6b:bb:52:8b:7c:ab:37:91:ca:e8:1d:11:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:4C:AB:55:9D:75:8D:B8:4C:E6:36:7A:ED:48:B2:C9:D2:26:9C
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:92:bb:19:70:d0:cc:f6:fa:c7:ab:f6:58:e1:f1:f4:0d:
         76:4b:ae:85:b2:31:1b:21:a8:b4:3a:fb:e8:6a:55:16:89:86:
         a8:cc:87:8a:ba:76:9b:e1:ec:65:fa:63:02:20:bc:62:f4:e7:
         de:15:9a:47:f1:a9:54:88:1a:80:83:6c:e2:5e:45:c8:a7:a9:
         06:76:bb:28:a7:f6:7b:55:bb:aa:b5:ce:80:43:09:33:af:da:
         53:e9:18:47:4c:ed:a9:c8:45:35:39:f2:4e:d4:cd:89:58:81:
         67:bc:27:5e:9d:b9:fb:b0:72:ea:81:c1:4f:c3:22:ca:01:c0:
         da:41:53:38:61:2f:0e:ae:4f:25:f1:d4:58:8e:27:8b:96:39:
         d8:2b:7f:c5:3e:4d:11:77:94:24:bd:a2:68:bd:00:ff:ec:b3:
         78:6b:f8:7b:25:44:6a:c9:c5:6b:e3:be:c3:7d:71:38:c4:71:
         c7:1e:d2:12:bc:b9:2f:74:78:c1:b6:9f:06:ee:fb:1a:23:34:
         f9:97:74:4e:eb:0b:1e:94:3c:b9:3f:67:40:b5:2f:05:f6:da:
         6c:13:a6:0a:da:92:3e:6d:7b:34:f7:1b:7d:94:d1:08:28:22:
         85:46:88:63:32:c2:35:8e:0c:2d:d3:f3:b4:0b:b2:7f:fe:16:
         38:59:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:38 2025 by rpki-client