Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File:                     jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier:          S0ssMm2YNbwgupsiECjvnt6qv9yKjvUDAIeZiGNzuJs=
Subject key identifier:   5B:A4:27:4B:55:EF:09:BE:16:38:F0:EC:78:1A:8C:5B:05:63:7E:34
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer:       /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial:       0197CC83CB86A482CC8DE8BED49D27AEA5A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number:          15C5
Signing time:             Wed 02 Jul 2025 19:01:18 +0000
Manifest this update:     Wed 02 Jul 2025 19:01:18 +0000
Manifest next update:     Thu 03 Jul 2025 19:01:18 +0000
Files and hashes:         1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: eeC9DtgdINyZ73UbUFsoGURuXoKdqKOuG2FAp7FNhBA=)
                          2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:83:cb:86:a4:82:cc:8d:e8:be:d4:9d:27:ae:a5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
        Validity
            Not Before: Jul  2 19:01:18 2025 GMT
            Not After : Jul  3 19:01:18 2025 GMT
        Subject: CN=5ba4274b55ef09be1638f0ec781a8c5b05637e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:ea:43:97:93:9d:e8:cf:26:2e:2a:2a:36:
                    23:68:d6:86:c0:76:10:a1:54:ec:0f:44:80:26:9b:
                    e3:dd:69:4e:fb:ea:00:f7:7d:74:07:fa:4d:15:97:
                    14:54:56:6b:32:43:73:ba:70:e9:4a:e0:ea:6d:fd:
                    c9:4d:a8:84:07:42:ea:6a:ad:af:63:d7:c9:26:44:
                    b3:69:c9:ef:12:75:b2:54:ec:be:0e:f6:4f:22:cb:
                    0e:8e:ff:73:ea:74:f5:59:99:c1:0e:6e:50:45:c6:
                    51:46:e1:3b:c3:c4:55:1e:fc:0a:df:e0:6f:03:79:
                    97:d1:9b:d3:df:53:ea:0c:f5:46:d8:a1:ef:69:a9:
                    5b:6b:fe:71:47:f8:d2:ca:6a:b5:fe:18:75:44:8c:
                    11:d4:ee:27:e3:ab:6c:5a:72:9e:da:88:42:cf:3f:
                    8d:e4:7d:23:a4:ba:93:1c:e4:88:9e:e6:c4:34:eb:
                    90:69:20:3c:49:66:81:56:d6:57:9c:2c:1c:47:76:
                    31:b6:1f:63:1f:61:c8:d7:04:53:60:f0:48:73:53:
                    dd:27:0c:85:d9:a0:87:da:37:af:d5:90:0d:0c:17:
                    4b:88:67:64:3f:39:8b:20:de:83:c3:ef:24:b2:eb:
                    a3:5c:d1:01:a8:ec:ca:39:a4:0c:26:47:3a:3b:01:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A4:27:4B:55:EF:09:BE:16:38:F0:EC:78:1A:8C:5B:05:63:7E:34
            X509v3 Authority Key Identifier:
                keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9d:2d:09:a8:a8:0c:f7:2e:e2:6e:a6:67:ac:57:30:16:47:
         42:22:cf:1b:93:3e:71:0d:af:e8:1b:7f:12:df:a8:7d:f2:ee:
         79:85:e6:9c:62:2d:7e:a7:34:f2:5f:9d:37:0a:5c:8c:fe:d6:
         81:b3:f4:87:b4:e9:c3:56:cb:eb:51:59:0a:d1:84:25:b1:b7:
         ea:17:7f:c6:93:b0:16:1a:58:96:49:92:2e:c5:03:1c:46:74:
         cc:7c:59:16:19:91:a2:72:c8:9c:b3:e4:53:f6:c9:f6:4c:a6:
         e5:f5:23:a2:b5:de:d5:e5:6c:f6:ad:71:79:6e:93:23:3a:5f:
         2f:a9:a7:ec:d2:c1:da:a0:62:dd:5c:ce:f2:d4:fb:d2:d7:e6:
         59:14:54:da:10:e7:ff:d4:4a:c5:d3:84:a0:b9:d1:09:9e:07:
         69:d8:d6:a8:4d:db:c4:0a:fe:97:c1:50:59:58:a8:e9:c8:bf:
         47:13:42:63:92:35:55:d4:72:7f:05:9c:ac:c2:4b:ca:bc:02:
         6e:c1:c5:53:32:1a:92:31:85:d5:11:4d:f7:ce:8f:42:6d:1c:
         ab:ec:79:ca:62:3b:a1:ce:99:d8:77:b6:01:c5:7b:c2:d7:21:
         0e:6e:cd:06:fa:5a:f3:2b:11:10:26:5e:e3:1a:a2:fd:9a:2b:
         d0:e8:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:28:24 2025 by rpki-client