Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File:                     jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier:          k/9VEYsBjgcU2FLf1hukgn9QzXbT7/UXwSLiAXjbtb4=
Subject key identifier:   B9:E2:0E:D9:3B:CB:5B:AB:E9:84:C2:56:4F:55:4F:DD:33:25:73:5F
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer:       /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial:       0197CB031865AE91283CE7A9CFF932578AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number:          15BD
Signing time:             Wed 02 Jul 2025 12:01:06 +0000
Manifest this update:     Wed 02 Jul 2025 12:01:06 +0000
Manifest next update:     Thu 03 Jul 2025 12:01:06 +0000
Files and hashes:         1: LOaUW2EiiQcwyCw-rJigudzub6k.roa (hash: RdbP2I4p2rkiwtFqPpCMDtwplJx26+Pix0+Jf5B+brg=)
                          2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: W9cucyMmJJCY7NT+2d/uRD/aSCdmHnqm/iFtlT3ZUBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:03:18:65:ae:91:28:3c:e7:a9:cf:f9:32:57:8a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
        Validity
            Not Before: Jul  2 12:01:06 2025 GMT
            Not After : Jul  3 12:01:06 2025 GMT
        Subject: CN=b9e20ed93bcb5babe984c2564f554fdd3325735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:62:46:5c:fa:f0:ff:48:66:22:03:76:59:
                    38:e8:5e:95:9f:42:a0:1b:b5:6a:d0:f8:ad:ac:88:
                    03:7c:af:fd:bb:86:ae:80:04:b1:d4:e1:9f:2c:61:
                    b9:65:a8:17:63:79:73:f6:ea:6a:f0:3a:f4:7b:bf:
                    0c:01:5e:0b:f7:86:1a:c6:fd:63:ba:4d:b1:e5:fa:
                    4d:03:ee:bf:9b:a9:8c:e5:34:40:48:be:44:9f:0e:
                    9c:b1:c4:86:de:5d:d7:60:83:e9:60:24:36:46:55:
                    25:2e:e1:53:48:fe:b3:a1:34:25:2c:5e:b8:06:ac:
                    6b:fe:33:92:c9:a7:dc:0a:a0:14:c7:ca:ec:67:82:
                    03:49:e4:7a:60:81:e5:34:a8:54:6f:9c:aa:14:8b:
                    97:63:0d:27:43:5d:c8:a9:1a:63:ff:48:e0:46:ad:
                    b8:d8:be:e0:ec:06:0c:7c:4d:00:e1:43:0b:c5:bc:
                    45:f2:d3:73:93:aa:35:05:d8:b8:33:d7:ff:94:4d:
                    8e:37:e2:47:18:a8:95:af:77:5a:4a:f4:af:91:65:
                    20:ee:d4:90:17:09:5a:c7:63:4c:b0:69:ab:f2:e2:
                    7e:ad:9e:33:93:d5:c0:b0:00:4a:bb:84:d1:2d:b9:
                    cf:9d:de:5b:a8:42:a1:31:f5:89:38:e6:8d:fc:7f:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E2:0E:D9:3B:CB:5B:AB:E9:84:C2:56:4F:55:4F:DD:33:25:73:5F
            X509v3 Authority Key Identifier:
                keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e2:29:67:86:0c:f6:5b:60:2e:76:03:27:0f:e9:09:62:1e:
         b6:d3:f4:96:b6:0e:1a:d6:2f:6e:65:e2:5d:76:d5:fd:d9:a7:
         6b:fe:da:a0:88:74:2d:9b:80:94:33:fd:bd:d1:9c:af:e9:ee:
         2e:62:60:8b:5b:1b:91:ff:68:63:17:82:40:c7:28:4e:9f:54:
         69:41:4a:52:e6:e9:c4:ee:91:52:f0:8f:7e:97:a3:da:eb:0d:
         e9:cb:c4:32:14:ed:7c:2b:ee:c6:71:e8:90:ce:a8:dc:70:0d:
         3e:51:bd:b8:dd:d4:85:ca:05:20:24:d7:b5:39:0a:05:92:37:
         b9:04:a9:ab:0c:21:5a:f7:02:f4:d0:39:9f:a4:d6:ab:5b:7a:
         b0:6c:ce:fb:70:92:86:8f:d9:71:48:aa:81:30:26:8f:3e:39:
         d3:76:15:08:1d:aa:4d:64:15:bd:75:0c:f0:47:16:09:96:a2:
         c4:35:58:a1:50:82:77:0c:8e:5b:71:ac:68:f8:6d:00:e0:98:
         a2:5e:39:2a:55:ee:7c:e1:bc:2e:08:2c:c2:b9:9c:47:47:c3:
         01:94:d1:09:48:09:a7:26:0a:d6:10:85:ce:85:33:44:12:2c:
         f2:1e:43:08:cd:1c:3e:d7:54:64:f9:8d:53:67:73:96:e0:83:
         a5:ed:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:22:05 2025 by rpki-client