Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          qmPVjOrvOrNCumdhrDXWdbz2CPj6SnKQh+TPxhGJtro=
Subject key identifier:   E7:52:C0:26:43:F0:69:AA:17:9E:B4:85:13:D9:79:A6:1C:A8:BB:F3
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       0197B6A179F663083A79843D942C46B64D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 13:02:05 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:05 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:05 +0000
Files and hashes:         1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
                          2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
                          3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: Ht3eEt/IGkcg8Le8uwclPXcEjEusI5iMVj2s2tC4ey4=)
                          4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:79:f6:63:08:3a:79:84:3d:94:2c:46:b6:4d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Jun 28 13:02:05 2025 GMT
            Not After : Jun 29 13:02:05 2025 GMT
        Subject: CN=e752c02643f069aa179eb48513d979a61ca8bbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:88:b3:da:85:6d:14:17:27:71:01:e0:ff:5f:
                    84:42:ff:8e:45:65:11:97:2c:5d:ce:7d:f9:e1:d7:
                    b8:d7:09:1f:25:2f:95:6c:ac:f0:d1:e8:34:99:44:
                    26:e6:c9:10:16:cc:00:05:92:ed:ea:ce:59:00:04:
                    1f:9d:30:7c:1f:39:78:ee:58:31:dd:1b:1f:59:0d:
                    41:7e:eb:1c:4a:13:a1:87:aa:df:f8:2a:f5:41:71:
                    73:f7:29:f0:96:db:df:ad:96:6f:b8:c6:1b:27:4d:
                    aa:ce:c1:5a:35:71:bd:2b:10:d8:39:98:1d:23:9f:
                    f3:07:30:c5:5c:79:ee:c9:c2:4d:68:4e:1b:a4:6b:
                    36:9b:46:3e:5f:03:89:b1:6d:48:62:15:a6:83:cc:
                    16:af:f9:74:73:0b:15:fa:9d:5f:3a:2e:2c:52:bb:
                    86:4f:02:ab:8c:d3:46:86:d7:2c:2b:5c:da:b7:72:
                    74:a9:d8:5b:26:a8:c0:5c:fd:f9:48:26:7b:10:11:
                    eb:38:6e:09:dc:3d:5d:84:37:3d:cc:dc:91:4d:47:
                    e2:54:42:80:87:14:dd:98:1a:32:c8:82:93:28:a1:
                    e4:cc:02:ed:0f:29:ff:3b:7c:93:9f:2c:cc:d1:c7:
                    ae:94:5c:76:59:8e:13:ee:ca:0c:df:6b:96:16:2b:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:52:C0:26:43:F0:69:AA:17:9E:B4:85:13:D9:79:A6:1C:A8:BB:F3
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e3:0b:aa:b1:aa:c4:08:c0:20:b4:e9:0d:b1:ff:10:c8:54:
         36:e0:ae:73:41:e6:4a:c7:40:c2:51:40:51:a7:6d:a6:20:d4:
         71:b2:ea:cd:4c:f1:4e:27:f3:74:8b:b0:ef:c3:e2:cd:4c:3d:
         8e:6b:ce:a1:73:25:89:55:6a:7c:7f:4d:4c:37:1f:5b:26:22:
         61:71:7c:50:84:c2:e4:a7:7e:62:b4:ad:f6:cc:fe:35:32:e9:
         5f:c7:16:bf:c3:1b:32:52:33:ad:5a:b6:47:63:cd:69:62:a3:
         0b:75:84:88:06:57:c1:5d:94:b4:d8:47:e0:f4:92:00:75:14:
         2c:10:22:8b:4b:c3:3f:d1:42:fb:e1:70:81:ac:1f:b9:ae:0b:
         70:bf:e8:d1:15:f0:bb:71:68:9d:67:ab:b8:7c:6a:78:f3:ae:
         9b:67:ca:4d:a0:f1:bd:38:54:29:b4:f2:03:f6:f1:5d:3c:a3:
         65:be:b1:6b:0e:28:f6:52:66:cf:d1:a6:9c:0d:f8:10:e9:54:
         b7:8f:36:3a:96:a5:c9:e3:2a:34:0e:10:05:8c:5f:24:99:1f:
         9f:33:66:8c:73:77:7e:2c:60:68:bc:00:cb:0c:42:0b:cb:10:
         a9:ff:7f:be:bb:d2:21:cb:9e:77:c1:2c:d8:58:d7:37:f6:4b:
         63:09:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:49 2025 by rpki-client