Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          HM3FvQAWrbCBB8NtNPXkJp1VvtdFvuZYUEq9jdl/qO8=
Subject key identifier:   20:4F:90:85:C3:99:97:A2:62:B1:D0:36:92:CC:74:8D:B6:CE:05:5E
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       0197B82134C13CBC79F4295EA8E861A1B39F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          087F
Signing time:             Sat 28 Jun 2025 20:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:13 +0000
Files and hashes:         1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: 6gXyOnn4P5Bm9ri6Ljh1cKDnlTc9kmejLFFA36OWIQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:34:c1:3c:bc:79:f4:29:5e:a8:e8:61:a1:b3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Jun 28 20:01:13 2025 GMT
            Not After : Jun 29 20:01:13 2025 GMT
        Subject: CN=204f9085c39997a262b1d03692cc748db6ce055e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:ee:65:c2:1f:88:55:c6:f3:1d:cc:78:99:
                    3c:ea:be:e0:dc:ae:ad:42:ba:3b:5c:a8:99:90:27:
                    5d:63:cf:91:a0:f8:2d:10:e3:e1:09:95:19:1c:4d:
                    16:4a:1f:ab:98:ba:44:bd:cf:17:ed:3c:eb:c7:90:
                    42:ff:59:6c:ce:e8:8e:5f:67:42:d2:e1:2e:00:06:
                    58:52:4a:d7:e4:72:fb:e9:63:67:cb:51:11:01:56:
                    12:09:b9:96:0e:ad:58:4e:03:a0:4a:d8:43:f4:8d:
                    d7:f2:3e:26:5a:88:f2:b8:4d:3e:80:6b:f4:91:22:
                    25:b1:78:da:03:8b:12:9b:31:22:53:3b:f9:dc:c5:
                    29:7a:e6:e1:60:b4:24:43:2b:85:23:2f:fc:7a:4c:
                    77:7e:75:d0:bf:e1:dc:7e:1d:8c:61:88:e6:a1:e7:
                    c5:97:83:4e:e4:6b:0e:cf:d9:04:90:0e:70:89:df:
                    86:10:4c:ea:56:32:50:59:01:31:a7:6b:26:05:e4:
                    cf:aa:13:d2:b8:09:7f:d5:ad:3a:3c:e5:94:3b:5d:
                    b4:3a:8d:12:cf:90:26:aa:58:e5:d1:de:9c:9a:18:
                    91:22:9b:35:e6:ea:68:a6:94:94:00:ab:64:70:1b:
                    1d:65:ac:b5:fe:56:ba:5b:5e:94:5f:b2:12:b5:d8:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4F:90:85:C3:99:97:A2:62:B1:D0:36:92:CC:74:8D:B6:CE:05:5E
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:95:3b:ed:c0:62:75:fd:91:ce:af:6d:dd:07:67:23:86:
         bc:61:8d:b9:5c:14:28:ba:33:61:9d:40:c6:c6:c2:2a:e5:35:
         e9:23:1b:b3:33:6f:44:25:5a:0f:8b:19:af:71:37:dd:41:11:
         67:a3:48:2e:d7:85:a3:2c:3c:ca:4b:be:94:a4:d4:5b:4e:16:
         ad:89:94:e5:5c:e0:3f:8e:06:74:fc:14:cd:d0:35:2e:47:7c:
         e2:4e:f0:03:9c:5c:17:6f:f5:83:2e:84:70:b7:b2:27:9c:3c:
         16:26:74:16:2f:d2:99:c9:01:82:d2:3c:8d:6c:bb:0b:4e:ac:
         ac:91:75:a7:99:fd:eb:05:4e:9e:c4:20:34:3d:f2:48:08:e5:
         73:85:7e:43:e4:57:ac:5e:71:40:40:5e:ac:5d:5e:7d:85:b2:
         30:ef:16:8e:4f:ae:cd:b3:2f:12:51:25:cb:27:28:8b:d3:e8:
         47:26:4c:e2:08:1b:62:f2:72:21:ee:9c:c3:1b:9d:aa:52:78:
         a6:f3:d3:0a:aa:fb:4a:02:c7:3f:18:ba:77:5d:16:9d:45:d4:
         58:9e:08:39:7d:9d:3a:cb:90:a0:82:cc:81:3c:05:53:e0:97:
         7a:5c:de:49:2f:d1:ea:99:04:ac:0e:49:46:a9:13:f0:b1:04:
         18:b0:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:59 2025 by rpki-client