Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File:                     jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier:          JTkoiKVJXNKWOQ+Pm1Zvgcn7Eb5mudm6BamB0GCuTfE=
Subject key identifier:   4A:D2:33:57:15:AF:24:76:B8:D3:3A:13:36:1F:17:80:12:F0:BE:63
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer:       /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial:       0197B6D752F789CE7B9D8BDA5DE51CB2F9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number:          0BB5
Signing time:             Sat 28 Jun 2025 14:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:54 +0000
Files and hashes:         1: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: qSRaXbyViSQdlXm1VOeRnvTMl9MM2ZUR/KlKW8rOGns=)
                          2: ySlLPEF0_k8P8U6yS6zwOctOeEs.roa (hash: r8YWQ1xdm6QLIVkwwxYzXaqNSyOxkQhbcdOP2vA+IBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:52:f7:89:ce:7b:9d:8b:da:5d:e5:1c:b2:f9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
        Validity
            Not Before: Jun 28 14:00:54 2025 GMT
            Not After : Jun 29 14:00:54 2025 GMT
        Subject: CN=4ad2335715af2476b8d33a13361f178012f0be63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:3d:4b:89:c9:06:d3:4f:ec:a7:3d:d1:0f:
                    a7:43:98:fd:0e:f1:d2:11:b4:b5:1e:e4:fc:33:51:
                    45:82:4b:44:9b:3b:af:d2:fc:15:29:d7:be:94:5b:
                    8f:7b:43:67:2b:85:eb:56:2b:59:f9:ec:88:c7:66:
                    4a:aa:6d:3b:bf:c8:70:fb:3a:2b:88:c6:14:4d:87:
                    b8:49:d3:30:a2:d2:cc:26:e3:87:06:c9:23:58:5d:
                    3d:ca:ff:6c:48:91:f2:65:de:1b:7c:1e:cc:d5:68:
                    da:4d:59:ca:9c:27:48:98:ae:5d:9c:3e:2b:8e:ab:
                    f8:f4:10:8d:19:8d:8a:e8:0c:a5:ba:6c:64:da:00:
                    24:4b:4f:dc:65:5b:61:9b:ea:a1:46:81:94:a9:2c:
                    04:46:95:c3:cc:2d:89:d6:d0:6a:f2:9f:5b:5e:92:
                    9f:7c:e7:ac:c5:f3:fc:de:3f:b1:cf:d9:16:97:5f:
                    88:fb:7e:34:22:7b:a2:c0:93:5f:a5:b7:bc:76:e5:
                    e9:9f:0b:fd:71:0e:32:88:90:10:f5:65:aa:41:25:
                    84:07:4f:81:c9:56:6f:df:d7:f1:b2:a0:9a:19:28:
                    fd:ad:66:13:c9:a9:ff:26:5d:2f:c6:b5:59:1c:30:
                    8b:47:64:ff:47:dc:93:bb:e4:c0:14:82:8b:c4:89:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D2:33:57:15:AF:24:76:B8:D3:3A:13:36:1F:17:80:12:F0:BE:63
            X509v3 Authority Key Identifier:
                keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:34:49:ab:47:38:ac:80:e9:f2:06:74:7d:7b:74:03:5c:31:
         64:f6:00:c0:6f:e6:4b:85:2c:26:79:89:25:0e:68:e1:d8:04:
         36:76:ae:9c:05:c2:91:52:8f:97:ff:fa:15:6c:17:53:1a:08:
         70:fa:23:f6:17:15:9d:30:d9:67:23:e1:85:55:d3:c7:d1:43:
         e9:ac:da:8f:98:c2:a0:1d:67:b5:65:c8:c0:db:d9:d1:bc:76:
         24:56:4d:72:a8:f1:8d:e8:66:bb:b8:ed:1b:48:bd:6b:4b:c7:
         c6:cf:66:d8:ca:15:56:85:4f:56:10:41:16:90:f8:4f:21:2a:
         2d:30:3d:56:c8:9d:38:81:17:ca:c8:da:0f:00:8f:16:c5:bd:
         a1:3e:29:b9:28:8c:71:bd:67:a9:23:2f:7a:0c:54:df:8c:bc:
         ab:f1:0f:9a:24:74:1c:c2:84:5e:ee:2f:9c:0c:d4:44:aa:25:
         e1:36:29:87:2e:93:0e:6a:75:08:fc:32:8a:85:05:16:4e:c8:
         a0:25:10:bd:c2:2f:a7:63:ce:f0:11:b0:63:31:8c:fc:3a:a0:
         f6:45:1f:82:da:b3:f9:eb:29:14:79:80:7a:a4:d7:68:28:b0:
         eb:51:d2:47:5c:1c:bb:6d:5b:99:6a:48:16:75:6b:49:b9:4a:
         a8:ce:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:40 2025 by rpki-client