Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
File:                     jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json)
Hash identifier:          VlrlzafgMdXePNoL+kDHvMVjvEoCV7yCf+h9Xygkr8c=
Subject key identifier:   3C:A9:70:95:21:B5:23:8C:44:53:3B:C6:DE:21:0C:11:54:FE:99:F6
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Certificate issuer:       /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial:       0197B70E76986B1D9ADC45B3097E85706716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 15:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:07 +0000
Files and hashes:         1: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (hash: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=)
                          2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: /V1STJbv5YIajaKneqdux8yIOWdJpSgaN7rd5l98Qa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:76:98:6b:1d:9a:dc:45:b3:09:7e:85:70:67:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
        Validity
            Not Before: Jun 28 15:01:07 2025 GMT
            Not After : Jun 29 15:01:07 2025 GMT
        Subject: CN=3ca9709521b5238c44533bc6de210c1154fe99f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:79:38:06:43:ae:05:35:a9:bd:0a:c1:b1:
                    e0:61:96:b9:a7:19:80:d4:b8:c8:42:6e:68:0d:23:
                    c9:7b:3f:02:53:57:a2:65:b6:16:ab:9f:18:bb:11:
                    cf:69:c0:4c:85:97:15:5a:37:a4:e1:c2:0a:37:66:
                    86:31:ce:5b:42:92:b3:b2:7b:e0:4f:a8:13:4f:8d:
                    a0:bd:db:12:cc:6a:f4:c0:ea:1a:1d:11:eb:4c:02:
                    87:43:2b:3f:54:c5:2b:c0:e8:ad:24:af:ac:4b:f0:
                    27:b0:66:65:da:f2:37:98:6a:5a:a6:c6:fc:0b:37:
                    0d:ab:44:08:64:35:86:dd:bd:3f:6e:f1:2f:a1:36:
                    a0:1f:e0:29:50:e6:11:06:5d:bb:68:01:40:69:15:
                    43:a5:d2:eb:51:40:a4:dd:5c:03:89:3c:64:94:3d:
                    7b:14:bd:c1:d7:63:b5:d1:cd:1d:a1:0b:fd:6c:f0:
                    9a:4c:01:22:71:23:b4:31:d9:9d:b9:50:48:a7:20:
                    a6:da:d6:45:63:9c:a5:92:b1:89:d5:e1:89:31:90:
                    a3:d0:a0:30:77:8f:5b:d2:ea:68:71:7d:ba:19:12:
                    8a:30:c5:19:e5:fe:fd:b3:97:0b:79:21:e9:5a:8a:
                    d9:df:ce:4c:20:68:38:f9:82:9b:41:8e:b7:b7:ef:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A9:70:95:21:B5:23:8C:44:53:3B:C6:DE:21:0C:11:54:FE:99:F6
            X509v3 Authority Key Identifier:
                keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:d1:37:63:5c:ca:2d:14:39:3f:1d:43:e8:8d:84:dc:ec:
         f6:43:53:76:d1:c9:a5:11:8a:2b:2d:66:76:3a:5d:6b:2c:99:
         19:95:4a:1c:39:4e:aa:9f:bf:b0:7e:ed:15:68:b3:4e:b4:eb:
         87:89:c2:b1:fd:4c:63:d4:b5:fe:fe:9b:47:5d:48:6a:fc:e6:
         70:74:95:30:c7:21:a2:d4:06:0e:55:39:d9:69:c5:2a:95:c4:
         3e:4a:41:d8:46:bb:50:73:80:54:08:dc:0b:d6:ff:95:7f:70:
         4c:ee:ed:55:85:b4:a4:0f:23:fd:1a:27:9a:c6:d6:e8:de:42:
         b4:22:40:b8:8b:df:23:6c:ab:46:5b:b5:c9:52:fa:cf:40:09:
         1a:8a:06:9e:99:8e:da:7a:aa:dc:2c:8f:bd:e6:ba:e7:60:10:
         91:ee:7a:ac:5e:b8:54:ac:77:6c:cd:12:3d:df:f9:54:82:64:
         ba:b1:bb:b8:a8:b9:c9:36:ac:0c:8d:53:43:90:48:29:af:51:
         be:3b:32:24:2f:eb:ba:07:d2:2b:ef:b5:70:50:5e:d4:35:b0:
         07:57:83:2d:60:58:88:40:1c:12:cb:eb:37:1c:c8:0b:fc:f7:
         b5:bf:ee:d9:e2:d8:da:ab:9e:17:f7:5c:40:09:d3:ec:37:ad:
         78:f0:52:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:26 2025 by rpki-client