Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File:                     JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier:          NDV3dDIMgnDNt4/MB28/DIqCIojmqjdvOie/12wlhvg=
Subject key identifier:   6B:2B:50:75:A7:DB:AA:12:69:B7:A2:F5:5F:80:DA:D8:EB:F7:25:5A
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       0197B7B378E78CAFC94362225D1B9FBD1D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number:          15C1
Signing time:             Sat 28 Jun 2025 18:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:21 +0000
Files and hashes:         1: 5QHAsQaUMAZIN1n6-pxK5K91a3o.roa (hash: AkFm08Afa/vhsA4n14Vo1RO04eK70G8MZ4yY3wwGuE0=)
                          2: 8__4CSysP9ewpgBTT4RjqVsmoag.roa (hash: 6Vh8B3R0vOjHWshOtYFXsA9V6+E+ovifthcqX5LH5AY=)
                          3: H0T0W0xTBnh83HIo130u3lMx0z8.roa (hash: EnvalVHH06GgGOutMJeFEacXQsa/Sw9Z2kcRlIH1HNM=)
                          4: HUjFpkDkE9aRW0oytyocQloUy9o.roa (hash: mq8+b8jC5/4J8LuF6BxD7TMcx7W9gEcExeXo6od8rqM=)
                          5: Hsa9B01wYzQuVgyvO2-bkNj0_wY.roa (hash: DdezXk60i94ZF2OulsTAeuZBcNuFWBHgNv3S98ro9B8=)
                          6: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: 0q9l4UYXkSyTzZcAm2HJNR55zWgpdCN9WVqSZA8CUWM=)
                          7: KzhPBfzs40BMsYPfoaIPI29P5yo.roa (hash: 95zWAjg8ne0IL6qdhZTUSVplXSRiePGkqfZ93e5qlhw=)
                          8: dwkhaAERSm6uhMOz5nNpmKDQ82E.roa (hash: LJZ+/v8dXlJSBiFG/37Ys6az1iYi7KSm0TcOpKjllW4=)
                          9: uZ2FUQIy4-BglbDIW_Uj_e4ZY2c.roa (hash: cy6Tl3qgTi1iMP0dxF44E6e2zGcGBO8MstsvupGrtLU=)
                          10: wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa (hash: hbL9mJeeAk3YwSAmT6WsY7K2Gkz/S4wOy9jWJcZcNps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:78:e7:8c:af:c9:43:62:22:5d:1b:9f:bd:1d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Jun 28 18:01:21 2025 GMT
            Not After : Jun 29 18:01:21 2025 GMT
        Subject: CN=6b2b5075a7dbaa1269b7a2f55f80dad8ebf7255a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:43:c9:c3:75:dc:63:e6:77:af:3f:f7:c2:
                    0f:38:0d:a8:d4:16:d0:2d:32:ce:c2:d0:d3:c7:01:
                    eb:14:14:62:42:3a:09:7a:7d:83:b4:a7:26:6c:eb:
                    87:27:1c:93:be:51:26:e9:2f:1d:70:31:8c:c7:d4:
                    ea:07:8d:9b:21:33:87:25:0e:ed:e7:50:67:c5:0b:
                    a6:25:5a:99:36:3b:18:28:17:c2:54:7b:27:18:53:
                    75:0d:9a:62:b5:71:a6:00:c9:f4:58:60:5c:10:73:
                    8f:1d:49:64:01:ef:37:38:fe:06:a0:01:7e:04:83:
                    fb:6a:1e:bb:6c:0c:94:ca:6e:d2:52:49:6d:e2:c6:
                    aa:98:d4:ca:c1:0e:64:6f:be:bf:88:f5:a6:75:57:
                    cf:b9:94:19:96:1a:6b:af:49:e6:23:18:01:e0:45:
                    72:83:ed:f3:68:57:64:26:8f:3d:32:22:fb:66:83:
                    7d:04:a1:78:2c:c1:dd:b7:ab:45:b9:e6:92:84:2f:
                    05:70:d7:bc:2e:f0:fe:73:3a:aa:6e:d1:f5:80:56:
                    39:02:09:9f:52:af:3b:78:7d:8a:9d:2d:b1:63:88:
                    d3:f1:2d:2c:ef:d2:88:93:bd:09:30:33:c8:72:05:
                    db:c9:ca:84:eb:6b:7b:64:f5:ae:6a:06:05:ba:a0:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2B:50:75:A7:DB:AA:12:69:B7:A2:F5:5F:80:DA:D8:EB:F7:25:5A
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:b7:57:cb:d4:15:2f:1c:27:12:f1:f4:d1:84:ef:59:34:
         76:a6:87:a0:0d:28:5f:e6:0f:ea:4b:36:ad:c4:88:f8:79:4a:
         4e:ba:61:1d:56:8a:7c:2e:26:ec:16:66:7c:5e:1e:fb:cd:b8:
         92:aa:1f:10:5e:27:e8:4a:de:f7:7f:af:0c:44:87:1e:dd:6b:
         ff:1f:dd:42:a8:59:c6:ad:50:2a:a5:98:fa:e5:07:db:53:80:
         82:66:41:a3:5f:ff:3b:0a:11:e8:f6:8d:80:96:ef:53:e1:98:
         35:53:e5:05:d2:01:3a:8c:2b:bf:63:fb:0a:f0:79:c4:3b:b8:
         9f:cb:95:ca:83:8f:7f:7f:06:15:e1:09:94:4f:75:d7:c2:b3:
         b4:1d:31:cd:13:6e:7a:2f:cc:92:29:fd:b7:b6:f8:59:1d:8b:
         ba:8f:5b:0b:66:2d:9d:79:f5:ff:f5:82:9b:ec:9d:d8:04:91:
         eb:89:34:15:99:5a:88:e5:de:17:46:c3:82:e1:59:8f:b8:7b:
         f8:71:83:10:04:e3:7e:7b:c5:d5:a5:67:6f:eb:3b:5e:95:49:
         2f:8c:f1:88:73:e7:6a:28:a0:65:55:fa:d8:2a:ad:f5:41:d6:
         e3:9f:6a:15:90:49:91:ef:ad:99:42:1b:00:e3:71:20:84:0f:
         6b:33:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:18 2025 by rpki-client