Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          8RNU/qsjTmTRMrZja2yoxmSPCUK/IKOOIQ7RkYC/LWU=
Subject key identifier:   3D:00:08:8D:7D:8C:26:5D:02:D3:9B:36:D3:C6:02:92:85:B8:89:A3
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       0197B5C504F57D511ACF5C3DF0EF6BEB8EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          0D19
Signing time:             Sat 28 Jun 2025 09:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:17 +0000
Files and hashes:         1: 5dtg3LCI8AxcnAadUkHS3_C52GM.roa (hash: Vn0K1zYewV4QvEpEk/45tt1gNO9Z9NhkFkfGztTyMls=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: TudkWzbJOPIqUCY4kkXizxy5xvkDY7h5Uka+Pxl7cjI=)
                          3: iHyMz7WaIpGFj9IV33M_hAhVH-k.roa (hash: LGMsJh4DFo99zD3c9hWW4b1EKTfexLADtFi5DHUXz6A=)
                          4: qcTZ9F_MrFUBfQXGS6Pdrvtd3hM.roa (hash: 6Y3o3xfek4OtHUqQEh7Mq+AHRFEDKhceMAsEbUlDjDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c5:04:f5:7d:51:1a:cf:5c:3d:f0:ef:6b:eb:8e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Jun 28 09:01:17 2025 GMT
            Not After : Jun 29 09:01:17 2025 GMT
        Subject: CN=3d00088d7d8c265d02d39b36d3c6029285b889a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:05:02:01:4e:85:0b:0e:22:8b:3e:df:f8:
                    96:95:a2:72:25:e5:fb:c0:b7:9e:02:82:6c:91:38:
                    de:5e:32:79:98:cb:eb:43:e6:b7:7c:68:29:0b:1c:
                    4a:a6:4c:3d:d1:e0:4f:bb:4c:a8:48:12:15:42:1e:
                    db:35:77:10:97:13:25:e2:32:ef:e8:f7:46:6c:c5:
                    f3:2b:56:7d:3d:29:4b:0a:38:99:5b:62:83:48:aa:
                    61:47:72:64:5b:6f:5d:1e:38:8b:07:22:f8:d3:96:
                    fe:d4:d5:f8:85:c0:34:93:e7:50:b9:fa:dd:8c:74:
                    82:a4:e1:d7:60:07:96:a8:12:ce:da:53:8b:b3:73:
                    06:64:51:54:49:1a:23:d9:76:2b:f8:57:bd:07:69:
                    8e:e1:78:08:78:82:7b:64:8e:ea:1b:ea:c2:22:dd:
                    48:4d:a3:3c:b3:32:13:bf:96:60:76:cb:22:4a:78:
                    91:53:d4:84:54:8a:7f:60:fa:d6:2b:48:50:73:4c:
                    fd:1e:62:09:a1:db:24:08:f8:8e:9d:2c:2c:db:fc:
                    29:fa:f5:65:ba:df:37:43:d5:67:af:35:4f:f7:00:
                    bc:b3:52:82:84:d5:cb:fd:76:6e:f1:59:3e:91:d1:
                    83:30:cf:c6:59:20:0b:5f:b4:97:a1:3f:66:2e:18:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:00:08:8D:7D:8C:26:5D:02:D3:9B:36:D3:C6:02:92:85:B8:89:A3
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:c9:2f:13:11:d6:5e:1a:67:8f:7f:0b:1c:9a:30:9e:0c:
         15:6b:a5:1d:4a:3d:a5:a8:9f:4d:ce:c4:3b:d8:92:4b:f8:d3:
         da:61:92:5b:ec:d2:ba:a1:5d:a3:e6:33:c6:13:d3:9a:f8:17:
         43:24:b6:cf:ad:c6:51:9e:58:76:6a:72:1a:0c:24:98:c4:bb:
         91:67:9b:a5:60:8a:c3:06:e1:6d:7d:d5:d2:8a:62:3a:91:98:
         e5:77:a9:8f:b0:8a:c6:8f:89:77:f8:1c:25:bf:ac:92:44:4d:
         d2:37:07:cc:d3:9d:7a:74:65:9f:38:4d:5e:17:51:5b:bc:a3:
         15:47:01:cd:fc:22:af:99:10:68:07:ba:e3:13:78:0b:4a:92:
         b8:d2:b3:b0:db:88:94:23:24:91:ff:e8:76:61:c6:e0:97:23:
         a1:e1:2d:1c:bf:df:f1:0c:7c:bf:85:9e:88:cb:ed:9a:eb:c7:
         cc:ee:4d:a4:c9:d8:67:67:5a:6a:52:32:a7:25:2f:3d:47:31:
         b6:09:89:36:69:18:67:35:d2:c0:76:28:d3:5f:2d:e0:0d:c1:
         90:e0:d3:2a:f4:b8:af:47:6d:75:c6:e7:22:39:20:1e:03:f6:
         af:34:5b:b8:87:b4:9e:4f:4a:77:b7:40:ca:a7:cc:82:a3:c4:
         fa:98:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:52 2025 by rpki-client