Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File:                     Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier:          1a/vH8abwoGtKjtFQJ0rsdM6T6P1XgawMhy4Nw+50Tg=
Subject key identifier:   10:28:11:E6:0D:C9:3A:80:00:96:87:57:74:79:0A:1C:05:30:E3:F4
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer:       /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial:       0197B5C495055A2D8918480CF69BFA78EE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number:          1246
Signing time:             Sat 28 Jun 2025 09:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:48 +0000
Files and hashes:         1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: rQBEhu+JwbxUmnE1MOIT2tDvKo3LeTlH8G7YN1+OuKQ=)
                          2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:95:05:5a:2d:89:18:48:0c:f6:9b:fa:78:ee:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
        Validity
            Not Before: Jun 28 09:00:48 2025 GMT
            Not After : Jun 29 09:00:48 2025 GMT
        Subject: CN=102811e60dc93a800096875774790a1c0530e3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:86:60:34:f2:13:d3:82:7a:43:17:f5:39:
                    db:06:63:9e:33:b3:dd:0b:65:c8:95:03:40:52:f7:
                    21:f9:01:20:59:3c:33:0f:88:a7:73:ff:94:78:5a:
                    d4:eb:ce:b3:67:0a:06:46:27:63:dd:c7:81:bd:b2:
                    eb:dd:e9:fd:ab:68:03:d8:54:72:27:42:5d:9a:05:
                    49:25:d5:e7:b0:df:d7:e2:cd:35:c6:5f:0b:a0:37:
                    41:3f:d7:cd:f8:c4:60:d8:ab:93:9c:5c:20:b6:55:
                    ca:bf:0d:ba:7e:24:04:c3:ca:46:c3:69:71:c0:99:
                    ac:da:c1:4c:b3:36:84:42:75:79:0a:59:71:71:8c:
                    5c:80:64:8e:c2:5f:00:0e:59:3c:95:91:bc:b9:07:
                    1f:63:36:e2:61:3e:bf:d7:40:b1:42:c0:7c:bf:55:
                    f2:7a:06:b1:a7:54:6f:8d:03:68:c7:6d:47:ad:dd:
                    d1:25:25:31:f8:40:f8:96:0d:b0:92:b1:14:ff:51:
                    be:65:d7:c3:a1:86:42:28:cd:61:ce:50:2c:a8:f0:
                    77:e6:81:51:9c:49:b1:dc:13:bb:9c:e8:16:2b:b4:
                    2d:73:d4:52:6d:c8:56:c6:7b:b7:f4:79:6f:51:da:
                    0b:23:84:8b:a7:7c:56:73:c4:d8:27:5b:a1:e5:87:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:28:11:E6:0D:C9:3A:80:00:96:87:57:74:79:0A:1C:05:30:E3:F4
            X509v3 Authority Key Identifier:
                keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e4:3a:18:0d:59:1b:49:9d:cb:d8:41:d9:9f:5b:8f:18:24:
         8b:50:8a:08:ed:3d:e4:97:60:0a:23:a4:e1:d4:4a:75:f2:c2:
         27:2f:ef:88:cc:cc:42:2a:e7:a0:e8:18:e1:b7:e3:fc:66:d1:
         c9:58:62:8e:a6:0a:eb:96:42:23:83:90:57:71:06:9f:11:95:
         71:14:a0:b7:0c:64:23:03:30:fd:47:48:85:b2:72:40:0e:f3:
         ac:47:f5:1e:a6:af:ca:fb:48:51:4b:95:a1:e3:1d:fe:3e:4c:
         b7:17:8b:13:e0:f9:b4:c7:3d:9e:61:ca:cb:97:83:aa:11:c9:
         92:4e:43:79:d7:c7:5d:63:ce:e0:23:36:06:1a:60:c2:36:80:
         80:95:13:8d:ba:df:af:fc:10:71:c6:3b:e7:f9:fb:a2:34:8d:
         bf:6e:34:ab:85:b3:bc:4b:ab:8f:3f:fb:ad:57:a8:8a:d9:31:
         3c:df:73:af:0e:10:48:f8:76:1c:10:4f:b8:6a:a2:89:d9:f0:
         e9:33:8b:66:48:54:09:17:75:da:51:5c:39:8b:ef:e7:07:06:
         b1:2d:4d:4f:39:d5:42:50:4c:4b:30:ae:2a:1d:d3:fc:14:98:
         11:b9:89:41:a4:78:30:82:7b:e6:62:ae:39:73:84:c0:e8:b2:
         4b:2b:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:25 2025 by rpki-client