Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File:                     jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier:          wX62LFgb1SCRsfjmNs+uiOn9sKTQpRpl1TDBPVAdX7A=
Subject key identifier:   A6:A5:48:56:21:D1:EB:9D:6C:6B:D2:A5:D8:9E:0B:43:D8:BB:EF:8C
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer:       /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial:       0197CDCE2630360DC2A7850C522882895309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number:          15C4
Signing time:             Thu 03 Jul 2025 01:02:08 +0000
Manifest this update:     Thu 03 Jul 2025 01:02:08 +0000
Manifest next update:     Fri 04 Jul 2025 01:02:08 +0000
Files and hashes:         1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
                          2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: pv3Jj5LOK0wbNymWksjMbrrbvpo2F8+Rgo+Pwq0P2mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:ce:26:30:36:0d:c2:a7:85:0c:52:28:82:89:53:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
        Validity
            Not Before: Jul  3 01:02:08 2025 GMT
            Not After : Jul  4 01:02:08 2025 GMT
        Subject: CN=a6a5485621d1eb9d6c6bd2a5d89e0b43d8bbef8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:ae:98:9b:90:c7:40:55:c9:ab:96:43:d2:
                    af:14:10:97:c8:b3:01:be:78:e0:dd:ba:4d:2f:50:
                    ba:06:c2:38:95:6c:c4:c1:0f:53:2e:71:9d:e8:f3:
                    2e:96:2a:fb:0c:ee:93:0b:fa:70:95:88:00:58:bf:
                    85:d5:42:ae:98:49:10:dc:01:e9:a9:17:1c:48:4d:
                    ff:6d:87:6a:72:aa:e8:05:e2:16:ee:88:50:cb:1b:
                    7e:86:b3:ff:85:76:34:e1:93:34:be:e5:1a:e4:f1:
                    6a:9e:3a:fd:85:fe:37:c7:ac:ed:1d:76:67:ef:81:
                    a5:f4:83:6b:a1:f5:93:25:29:a6:1b:07:48:f9:21:
                    bb:a3:aa:1b:ff:15:aa:a3:05:14:60:0f:0c:31:46:
                    82:53:f2:02:e3:95:7b:b7:fd:f6:93:e8:05:f7:08:
                    ea:7b:8a:94:ce:be:9b:17:a9:82:6d:8c:67:15:ac:
                    2a:9c:3b:39:2a:bc:ae:a5:31:f4:34:6b:77:d4:6f:
                    39:05:d9:93:67:d3:c9:64:49:07:3c:05:52:ec:bc:
                    2b:fa:e6:3e:67:9a:75:36:1c:42:a8:d9:b8:18:29:
                    2e:07:45:90:7a:5e:d2:e0:d2:53:b9:61:4a:38:5d:
                    01:37:e9:84:2b:a7:a7:a3:65:f5:66:95:7b:08:19:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:48:56:21:D1:EB:9D:6C:6B:D2:A5:D8:9E:0B:43:D8:BB:EF:8C
            X509v3 Authority Key Identifier:
                keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:92:d3:b3:24:a1:5f:ac:a1:bc:cf:12:87:b2:ac:9e:6d:12:
         c2:34:65:d8:7d:4e:0a:5d:43:66:7b:8d:d7:fe:84:db:4d:58:
         4e:89:b2:7b:b6:ea:15:28:ee:54:42:58:6c:2b:e3:20:1b:86:
         e9:e2:da:54:16:cb:ea:62:09:60:7b:56:c2:b0:67:8a:5f:45:
         fc:8c:06:06:ed:94:dc:48:40:ee:48:e8:ad:b7:de:18:8f:fb:
         65:9e:94:4c:56:3b:dd:12:cc:4c:fd:20:7e:6c:0b:45:3f:a9:
         85:66:f1:06:de:46:db:31:0e:42:a0:5a:f1:75:e1:7a:b5:53:
         c7:89:53:1d:7d:88:f4:bd:0c:df:94:da:08:23:9a:a6:8f:6c:
         6e:eb:7d:33:36:88:7d:52:e4:cb:d1:d5:f0:39:d2:ad:9a:a4:
         99:59:f7:4e:50:92:bd:c3:11:fb:bd:68:b4:a4:93:e3:48:cf:
         07:10:f1:a5:55:6f:34:45:61:28:12:ca:7f:1c:c5:90:aa:36:
         7f:f9:31:d1:90:bd:50:69:25:b4:9a:ef:f7:cd:87:21:c1:db:
         fb:1e:37:27:e8:54:1b:4b:95:53:aa:f2:d2:6b:90:e5:77:10:
         75:8c:e2:3e:42:ad:28:ed:05:ba:df:11:b0:d8:39:fc:22:43:
         7c:1e:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:08:46 2025 by rpki-client