Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File:                     JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier:          05FpoXdLeIkLcI2aCs72wQijF9yQmnBZZ1BApVcyZeo=
Subject key identifier:   78:9F:B8:75:05:DF:FD:82:D2:0A:C5:0F:24:53:48:6A:16:72:3E:AE
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer:       /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial:       0197B74561CCBB0B3722F9B0691A13F90DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number:          02D6
Signing time:             Sat 28 Jun 2025 16:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:06 +0000
Files and hashes:         1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: +qDInsgfV1LHCfrdCHuDamZKU0OlvLNOrlUfdQlCQG0=)
                          2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:61:cc:bb:0b:37:22:f9:b0:69:1a:13:f9:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
        Validity
            Not Before: Jun 28 16:01:06 2025 GMT
            Not After : Jun 29 16:01:06 2025 GMT
        Subject: CN=789fb87505dffd82d20ac50f2453486a16723eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:6f:35:05:53:5a:d5:25:57:a6:01:20:8c:
                    a4:cc:cc:92:af:fb:88:a0:9c:a7:04:41:18:6d:30:
                    4b:f5:1d:c4:29:02:af:c0:ba:0c:bb:19:61:5a:95:
                    b9:f3:e4:e7:f2:a6:b4:a9:0f:b2:f9:6c:15:c4:91:
                    c5:7f:ec:ac:3c:f8:f3:98:ee:a1:ea:55:3a:4c:7d:
                    be:e3:e0:4b:9c:1b:a3:28:4f:7e:8f:c6:06:bd:44:
                    05:e5:d4:d7:ec:10:e4:10:bb:00:93:04:5f:b7:36:
                    66:14:d8:02:01:1d:47:42:34:0f:30:84:bc:b1:bc:
                    03:4b:22:70:31:d2:2c:9e:53:5d:51:ef:78:cd:03:
                    8e:a1:58:71:14:67:51:d2:99:ec:f5:33:bb:8d:9a:
                    7d:b4:7f:fa:2a:96:6a:61:29:d3:f2:e1:37:a1:fd:
                    00:9a:99:2c:48:18:c8:e3:d5:80:8d:b9:d4:b7:1a:
                    c7:99:1b:1a:2d:76:ca:8b:fa:b4:a9:d7:0e:15:cd:
                    99:05:a1:dd:a2:6e:99:0a:de:d5:45:ad:8e:69:7c:
                    a0:b7:cb:7d:13:f6:17:34:22:f6:92:63:c0:69:4d:
                    55:79:17:67:ae:dc:e7:aa:93:f9:ab:a2:6a:e5:11:
                    96:b4:74:e8:bd:49:2a:78:4d:b4:9d:ef:f7:c5:f1:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9F:B8:75:05:DF:FD:82:D2:0A:C5:0F:24:53:48:6A:16:72:3E:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:14:d8:3b:92:9d:bf:37:c4:8c:f4:e6:0f:c3:56:a6:e6:74:
         2b:b0:ae:51:21:3b:c2:8b:88:b1:c1:29:31:5c:3f:07:a8:34:
         14:47:5d:88:52:29:68:19:4b:58:a9:d6:e0:21:b1:a5:d6:45:
         cc:b5:e9:0a:75:03:da:76:83:74:b6:62:8e:bd:c9:87:f9:30:
         c7:0e:41:f5:ea:a5:09:39:fe:23:42:cd:3f:ce:4a:40:8f:63:
         40:3f:e0:05:c9:83:1f:2e:39:dc:6d:0d:f2:86:b7:6e:4f:14:
         5b:26:12:b3:a9:ef:bd:8b:57:24:d1:16:dd:91:33:c8:1e:7f:
         3b:e9:64:ac:85:25:c0:9c:aa:50:12:7e:3d:a1:a5:d5:bb:9e:
         ca:0d:75:93:d0:b0:4c:e2:be:3e:07:9f:05:6d:be:0d:16:cc:
         e0:0d:de:c7:1a:e4:b3:93:57:27:61:67:8b:13:4c:5f:59:f6:
         82:fc:a9:5e:05:2f:b2:ce:de:6d:5d:af:39:25:3d:a5:01:d3:
         9a:34:3b:92:14:0e:8d:c5:7d:52:f7:c0:5f:8b:b7:7d:b9:dd:
         50:5e:b6:8b:6b:5c:59:0d:77:c4:ba:04:42:ba:41:63:1d:08:
         d5:aa:a7:1e:9b:95:1a:cd:dc:bd:e6:e9:d4:90:a6:89:fd:f8:
         d2:3b:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:33 2025 by rpki-client