Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File:                     JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier:          KvvM1S6NCebzaIvo0CIjc7JonXVwiMAq13bwIRBjCoU=
Subject key identifier:   8D:B6:B3:B9:A8:F9:86:B6:F2:50:AB:B0:BE:A4:78:18:16:77:22:B9
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer:       /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial:       0197B70F370408DCD36646705C7CFD8C6BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number:          0E24
Signing time:             Sat 28 Jun 2025 15:01:56 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:56 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:56 +0000
Files and hashes:         1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=)
                          2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: xJbS05UF5gue88ohXyPhu0MN1tX+WnqR83MuWL30y2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:37:04:08:dc:d3:66:46:70:5c:7c:fd:8c:6b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
        Validity
            Not Before: Jun 28 15:01:56 2025 GMT
            Not After : Jun 29 15:01:56 2025 GMT
        Subject: CN=8db6b3b9a8f986b6f250abb0bea47818167722b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:79:f4:53:8d:37:4b:e8:bd:c1:d1:11:06:
                    ce:ef:de:31:fc:43:d5:d6:ba:28:f1:5a:9d:fa:da:
                    13:22:26:35:cf:aa:c0:20:b6:55:fd:f6:1b:1f:2d:
                    27:53:54:29:20:6b:e1:0f:0f:7b:9c:23:39:a5:9e:
                    5b:85:c4:9a:32:62:96:99:53:86:ca:ad:0a:80:d4:
                    fb:e3:d5:1b:e8:22:76:98:02:5e:18:94:a9:c7:1f:
                    06:33:c3:ce:11:94:de:dc:d3:22:0b:8f:e4:32:5e:
                    be:a2:51:df:82:a7:a1:50:a0:c4:13:d9:09:69:69:
                    5c:55:74:95:bb:d6:a7:6e:72:03:60:2a:ac:98:e4:
                    05:0d:9d:10:29:05:8d:37:e9:70:95:31:17:61:0a:
                    89:16:97:bb:51:22:60:1a:d9:a1:24:1d:ab:a3:ac:
                    8e:c2:82:da:d1:dc:7f:92:da:4c:b8:82:29:0a:1e:
                    d6:e1:1c:fc:6e:d6:4c:af:69:80:c6:17:f9:b5:0f:
                    32:25:13:9b:e2:80:45:21:14:59:e1:c7:f3:3f:a8:
                    71:fb:b7:94:c1:63:32:4a:93:52:b0:49:bf:11:d6:
                    94:9e:5f:f5:47:af:86:39:e8:7f:2b:59:63:59:62:
                    88:fe:ee:ba:40:2c:34:ce:e8:f1:bc:81:74:a1:3a:
                    96:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B6:B3:B9:A8:F9:86:B6:F2:50:AB:B0:BE:A4:78:18:16:77:22:B9
            X509v3 Authority Key Identifier:
                keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:96:94:f3:4b:62:07:2e:d4:42:48:f4:35:f8:51:50:7a:cc:
         cc:f2:60:50:ed:6b:f6:b5:58:2f:1c:2b:eb:bb:49:a4:da:73:
         b0:28:9b:ec:e5:59:33:b6:5a:b3:35:f1:3a:5a:d2:6f:7c:90:
         2c:18:48:1c:63:a5:a0:72:5a:4e:d6:b3:31:08:d4:13:80:07:
         a2:4d:27:38:d0:8f:cd:bb:db:a4:cc:e0:3f:fd:44:0d:63:4f:
         98:73:90:9a:85:a9:73:70:a3:96:84:11:7e:99:d5:c8:fc:c4:
         d9:1f:7f:4d:87:8d:89:02:4a:1f:1a:bb:4f:ec:06:ae:f3:aa:
         ae:55:eb:66:0c:9b:34:61:d7:b1:af:19:47:8c:60:cd:17:f1:
         91:77:66:7c:97:5f:65:64:e3:14:65:01:62:6b:02:6a:72:a3:
         0c:8c:7f:80:b1:c9:71:f8:bb:e6:81:97:d8:22:8a:91:c7:e4:
         6d:b9:6d:4a:50:26:86:1b:d6:57:7e:cd:61:ae:61:d1:90:d0:
         3f:a0:2d:ec:a4:59:48:90:52:8d:05:22:3a:e2:55:86:9e:2d:
         60:ca:63:bb:d2:f6:00:5d:30:69:89:fd:ae:da:6e:a2:e0:af:
         12:e2:82:dd:da:dc:0c:23:cd:10:b6:b3:cc:27:a5:85:e9:4c:
         df:cf:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:56 2025 by rpki-client