Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
File:                     JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json)
Hash identifier:          aMUubiNtq7jG1pwTwGzuGdFRBnP/kRPL5ZTFhzkCjZM=
Subject key identifier:   34:EB:85:CB:47:2E:A5:6A:A3:82:7E:CB:3A:40:4A:7A:05:BA:3A:0E
Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
Certificate issuer:       /CN=25a3f511d0095606a525084ae460836dc5d24397
Certificate serial:       0197B70F4882967980D1388D03C73535B55C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 15:02:01 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:01 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:01 +0000
Files and hashes:         1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: kkFloMcr75lgrzy9RAYujWoxr8gEOkLVLBJJKI9zluE=)
                          2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:48:82:96:79:80:d1:38:8d:03:c7:35:35:b5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397
        Validity
            Not Before: Jun 28 15:02:01 2025 GMT
            Not After : Jun 29 15:02:01 2025 GMT
        Subject: CN=34eb85cb472ea56aa3827ecb3a404a7a05ba3a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:c8:1f:70:da:12:43:6b:ab:16:c6:e6:10:
                    91:2d:b5:df:6d:b6:57:46:24:85:57:38:f6:2b:5a:
                    18:cb:98:6a:19:f2:1f:88:82:29:c7:20:52:b8:df:
                    2b:50:3b:23:b5:96:18:4f:26:88:6a:db:e1:8e:de:
                    9b:78:3a:ac:70:f9:bc:3d:55:a6:70:df:b8:d3:5c:
                    43:8c:71:b9:40:5c:1b:0d:d0:98:58:e8:21:80:f5:
                    82:99:17:17:be:ec:83:63:05:1c:19:ee:2b:d4:93:
                    e3:2f:47:55:f0:1f:73:05:d1:0d:d3:a7:fd:c0:ac:
                    9a:85:7e:73:eb:0e:21:ed:fa:d4:7c:b4:d7:01:7a:
                    a3:a8:60:02:74:23:69:91:0e:7d:f8:37:22:b7:a9:
                    ce:7f:ff:55:d6:14:14:c5:9c:9a:6b:91:c0:b9:0e:
                    48:0a:f1:ac:d2:b8:a1:d4:6f:9c:b7:ba:46:99:e4:
                    cf:ef:6a:1f:c8:c8:26:4a:59:35:31:f6:fb:d5:b6:
                    80:e4:38:ad:c5:15:d9:89:db:bb:a9:d7:5b:ac:27:
                    f5:fb:32:f7:c6:d3:cf:9e:39:37:f0:23:8a:c0:c4:
                    44:d4:ac:2b:46:81:45:28:54:ee:8b:67:20:2e:b3:
                    6d:6e:5a:ff:e9:6e:29:c2:76:49:36:0e:dc:ee:a5:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:85:CB:47:2E:A5:6A:A3:82:7E:CB:3A:40:4A:7A:05:BA:3A:0E
            X509v3 Authority Key Identifier:
                keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:85:d5:d7:5c:66:64:a1:e8:21:e6:02:d3:4b:6e:64:b2:5f:
         b4:e1:3e:6c:63:44:80:e7:a4:26:4e:45:f3:f8:9b:27:5a:b6:
         a4:50:34:33:3f:2b:8c:96:53:4d:0a:4c:45:71:65:67:de:77:
         59:c6:a0:5d:3f:fa:91:1e:b7:e8:1e:6a:3d:c9:22:93:f6:3a:
         68:0c:3d:e2:17:40:8c:aa:cb:e7:fb:2a:bf:48:91:9e:ac:f2:
         a5:28:41:42:1b:5f:a8:13:9e:b3:77:85:7b:11:0d:36:99:9b:
         f7:2f:7e:93:53:28:5c:5c:1b:26:81:15:8c:f2:8b:47:63:09:
         dc:99:39:6f:80:4f:fe:fb:56:17:0d:b0:88:4f:c6:47:7a:55:
         59:46:46:61:b5:e1:6d:69:1e:95:79:a6:fd:61:c3:1c:2a:c4:
         58:7a:e6:31:1f:c3:55:ce:59:cd:0e:27:01:37:5f:95:68:95:
         f2:a1:9f:4d:cd:e5:3a:98:20:1f:5e:ee:a9:13:bc:be:62:d7:
         75:33:b3:96:ac:48:78:6e:86:c0:cd:17:5f:16:16:da:4d:1e:
         ab:04:1e:e0:6b:80:a3:3e:c6:cb:05:85:2a:d3:b0:ce:02:d2:
         20:5f:37:96:bd:e0:9b:d4:03:9f:5d:fa:77:61:68:38:a7:79:
         8d:87:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:48 2025 by rpki-client