Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File:                     jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier:          sri5Svn+J5X5vriD4KVCldpBfCmfT5yhgzAPqCcsclc=
Subject key identifier:   24:5D:9F:03:B4:7B:25:58:30:B5:07:8A:63:DD:E1:28:AB:25:A3:DA
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer:       /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial:       0197B88FD0FBE8EB4A5212B6B0BB55C7373A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 22:02:02 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:02 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:02 +0000
Files and hashes:         1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
                          2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: ZrENAvPqqSYeXIZ4v3a1QHQkjM8BxlAdJx7GBwpxOgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:d0:fb:e8:eb:4a:52:12:b6:b0:bb:55:c7:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
        Validity
            Not Before: Jun 28 22:02:02 2025 GMT
            Not After : Jun 29 22:02:02 2025 GMT
        Subject: CN=245d9f03b47b255830b5078a63dde128ab25a3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:00:20:a3:3f:2a:3f:7f:a0:58:59:48:67:
                    be:16:d4:0a:2f:f9:70:31:d8:7b:e8:bb:3b:2f:61:
                    e4:e7:57:c1:41:4e:08:1d:68:9a:3f:de:29:c1:ea:
                    56:30:27:11:71:9b:f4:c1:70:d9:15:07:4b:04:9a:
                    06:b4:99:7b:b0:94:27:a9:23:91:82:be:8b:95:74:
                    e0:e6:dc:e2:15:51:a2:af:5e:74:f9:7b:a6:e6:37:
                    9f:80:7a:4a:1b:b0:f0:d6:48:dc:4a:88:34:39:69:
                    c4:70:6b:d1:ac:5f:7c:29:f6:45:e0:fc:3c:0e:a8:
                    26:ca:08:97:22:b9:f2:49:3e:2c:af:f6:81:57:3a:
                    02:cf:98:67:0b:31:ad:e0:d0:e0:03:ea:53:60:53:
                    c4:ab:c9:4e:6b:5e:80:52:e9:c7:ab:95:a5:2e:08:
                    84:d2:c6:38:78:97:5d:93:c5:a1:f6:13:48:93:b8:
                    27:c6:5f:c6:6b:2b:a4:0b:06:76:a1:6a:eb:dc:ad:
                    b9:c4:be:68:8c:ee:bf:c0:1d:63:f2:21:a4:b1:bb:
                    80:24:08:ec:58:44:a6:97:8f:88:aa:17:b7:a5:f1:
                    8f:10:e8:72:fd:7e:e3:6f:fa:20:bb:cb:64:b0:b9:
                    b7:d6:f8:d2:63:f1:a2:b2:19:90:dc:4c:ed:a4:40:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5D:9F:03:B4:7B:25:58:30:B5:07:8A:63:DD:E1:28:AB:25:A3:DA
            X509v3 Authority Key Identifier:
                keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c4:1b:97:cf:09:3c:26:17:93:e6:bc:12:6d:b2:a0:fd:43:
         03:d3:87:07:a1:b8:83:4c:93:b9:8d:cc:6f:0a:85:f5:63:c2:
         ea:1d:4c:23:eb:86:c6:3d:aa:68:49:78:ed:4b:27:7a:7b:39:
         7c:6b:fe:41:83:2f:fc:bb:e4:16:42:03:cb:60:c5:9d:10:60:
         19:7f:e9:07:9b:f0:4e:42:b7:9c:57:33:53:7f:c6:e0:4f:6a:
         dd:bb:a6:99:13:bf:15:2b:54:29:0c:3c:e4:34:17:e8:43:88:
         cb:4f:a3:5a:16:70:b0:d9:d6:1d:99:11:76:ed:50:58:5b:94:
         8d:6d:86:40:cd:62:c0:94:32:08:84:14:ff:ef:71:36:dd:f6:
         83:7c:7d:af:83:d4:76:79:bc:0e:2d:f1:ab:3f:8b:c9:b2:09:
         55:07:4b:72:ac:fe:3e:b8:4b:44:f8:7e:0c:4e:4b:23:5a:32:
         88:10:f2:b8:8a:3f:76:57:78:b2:96:07:f9:f1:8e:65:7a:54:
         62:07:e9:22:37:c6:f4:39:0a:df:ef:cc:af:44:c0:fd:51:44:
         76:01:7d:70:b4:f1:8a:d2:e8:68:20:34:f9:09:b0:11:da:fe:
         86:1e:aa:58:bc:03:79:19:8b:84:09:45:30:9f:1f:e5:10:90:
         0c:79:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:39 2025 by rpki-client