Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          027RDPtM8GvxyLfP0F6UTUJzjX/wzo5bdParg1kMjIc=
Subject key identifier:   48:FA:07:AF:11:9D:A6:18:76:70:49:18:28:FC:8F:71:58:0A:6E:BC
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       0197B96AE960DB6931019D3708D03CAA23B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          10D1
Signing time:             Sun 29 Jun 2025 02:01:20 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:20 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:20 +0000
Files and hashes:         1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
                          2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: TsEUNGV+P1dyPUOhWhssP40b8n7r3xc9el/lWv9j8zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:e9:60:db:69:31:01:9d:37:08:d0:3c:aa:23:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Jun 29 02:01:20 2025 GMT
            Not After : Jun 30 02:01:20 2025 GMT
        Subject: CN=48fa07af119da6187670491828fc8f71580a6ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:32:a8:1e:12:53:8d:50:1c:45:26:4a:e7:
                    38:f9:d5:6b:42:76:87:8e:0f:a7:a9:55:31:8a:10:
                    9d:bb:2f:e6:94:93:5a:87:ca:7d:bc:e4:9d:b2:1b:
                    02:c5:78:61:fc:c1:1d:b7:91:32:1f:e4:c3:f2:d9:
                    d1:01:07:66:e2:82:8e:37:d6:ad:1d:ac:18:d8:a8:
                    48:52:2d:a6:d9:c7:a7:ba:0a:f7:c9:15:d0:17:b5:
                    30:9a:38:05:3c:64:15:1f:ac:63:69:cb:e6:a2:8b:
                    46:da:ba:11:9e:fc:7f:e0:3b:62:1e:71:4a:ba:10:
                    e6:82:7c:7a:90:bf:c9:c2:52:14:d6:ff:a8:00:9e:
                    37:5d:5c:99:51:60:0c:44:37:b0:a9:ae:06:f5:c2:
                    3a:58:4d:d5:23:e8:b6:37:e6:4b:44:cd:3f:66:96:
                    73:a7:9a:ef:26:e3:f3:1a:c1:8b:1e:1a:aa:b1:ec:
                    8a:3a:70:c2:c5:f9:0e:f2:b3:dc:7e:27:32:23:7a:
                    70:f3:cf:42:31:70:f2:ee:50:0c:24:08:b8:ad:9c:
                    76:c0:d0:fb:fc:53:60:49:af:27:40:db:9e:07:06:
                    13:ee:5b:f9:fe:74:59:d1:db:14:89:56:e6:e9:3a:
                    9d:18:30:d3:4d:e2:68:38:f2:21:73:6c:2f:39:cf:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:07:AF:11:9D:A6:18:76:70:49:18:28:FC:8F:71:58:0A:6E:BC
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:48:17:2b:47:9f:80:a1:3e:cc:df:18:19:35:1c:29:5d:
         aa:8b:41:de:16:95:0d:b7:02:ff:d3:52:c8:c8:22:ab:b0:7b:
         0b:95:6e:d9:84:22:1a:af:83:47:87:e9:5f:46:b9:65:63:6f:
         42:47:b9:f0:28:fb:da:ea:62:fb:ae:43:1f:9d:17:f8:ed:5b:
         4d:b8:77:fb:d0:d1:ac:6e:19:d1:37:bb:ce:4f:96:64:ef:64:
         ec:6d:94:af:f5:db:5d:b3:66:48:fa:80:5c:9d:78:cd:5b:5d:
         e5:fc:6d:1a:eb:7e:d6:b8:e7:c7:4b:b8:3c:fb:84:a5:f2:58:
         bb:30:13:34:73:ed:aa:f5:7f:b2:8c:dc:e3:33:db:3f:ec:78:
         51:52:b2:00:87:c3:06:b4:16:c4:1e:08:71:ff:cc:fb:ea:94:
         8c:f9:d7:1e:b6:6f:09:0d:a3:3b:66:94:06:b5:91:4a:14:a5:
         11:9a:e1:3a:f0:6c:44:2b:84:8c:ac:25:47:3b:e1:36:de:1e:
         ec:2d:b2:28:b9:c1:df:08:3d:6c:d6:92:55:4a:13:0f:bb:76:
         a7:43:41:d3:17:ff:2a:b3:ef:30:f3:a6:30:b4:a6:b3:c8:28:
         fb:c2:fc:4f:ff:92:88:69:5f:c7:8c:33:a7:63:4b:4f:6e:85:
         7f:cb:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:09 2025 by rpki-client