Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File:                     RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier:          F29Rp3gBDv8dHAOdzHOur+rONRI91fJ+2gvCnY9D6uA=
Subject key identifier:   06:76:30:47:F5:01:27:C9:94:F4:63:79:C1:C6:DC:46:E8:94:7B:16
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer:       /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial:       0197B70E6D0F0E9DDD418EECC3AA30B33884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number:          070F
Signing time:             Sat 28 Jun 2025 15:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:05 +0000
Files and hashes:         1: PoLYxkMVycTNzRpiJblUxxrqJt0.roa (hash: Lw/mDGQLMZUq6fBec8pNWkJSbSgJOh8v7cZOSqwybpw=)
                          2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: lnD6UavnpLWLmqVWa5W6WhzICRiPfYT4rHqDKA23J/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:6d:0f:0e:9d:dd:41:8e:ec:c3:aa:30:b3:38:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
        Validity
            Not Before: Jun 28 15:01:05 2025 GMT
            Not After : Jun 29 15:01:05 2025 GMT
        Subject: CN=06763047f50127c994f46379c1c6dc46e8947b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:ec:e2:93:9f:39:49:ee:76:1a:be:2d:30:
                    85:ca:4c:51:e0:9f:b2:e6:84:8d:43:6d:b6:b8:4c:
                    4c:e6:89:4c:d3:c4:ad:63:6c:de:e4:6c:1f:2a:02:
                    35:ff:47:4d:e3:1a:63:48:77:47:3c:82:48:07:01:
                    42:af:16:b7:13:f0:25:c5:7f:a9:10:26:da:ee:0f:
                    05:a2:df:33:09:9c:57:48:1b:b2:cb:f8:78:8f:31:
                    da:a1:40:e7:ca:88:5c:43:5b:86:41:7b:43:40:29:
                    e3:da:48:b3:06:20:13:b5:c5:8d:58:39:42:5a:06:
                    6a:ad:91:b2:b9:1c:21:c8:54:57:47:e7:3f:a7:1b:
                    53:64:41:1c:32:90:2e:a0:b0:4f:52:ba:b6:c7:18:
                    09:ee:e5:59:55:33:93:0f:b0:a4:ba:d4:7b:a4:55:
                    6f:ec:0a:83:6e:6b:76:eb:ac:88:3e:43:79:7a:6c:
                    82:49:5e:68:bf:fd:32:b1:a7:5e:3b:d5:1f:5d:92:
                    31:4a:cf:11:aa:df:31:d4:f6:78:aa:37:ca:d4:a8:
                    35:ba:67:54:04:f2:8a:f8:b6:39:58:62:55:ec:e9:
                    8f:4a:30:ea:5c:ee:3a:3f:86:ed:0e:41:b2:25:3a:
                    3d:ea:de:2d:a5:93:38:fa:4e:57:75:37:48:ad:3d:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:76:30:47:F5:01:27:C9:94:F4:63:79:C1:C6:DC:46:E8:94:7B:16
            X509v3 Authority Key Identifier:
                keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e3:35:ab:85:12:8c:b1:a5:f2:b3:11:dd:81:7e:0f:a1:05:
         41:84:66:d9:50:cd:13:d7:2c:af:c8:81:fc:a8:19:8c:5c:a1:
         bf:0c:46:92:ef:95:96:a5:1a:c3:3b:e0:51:8b:59:68:60:90:
         9f:4c:fd:f2:ea:28:14:64:9d:a7:cb:ba:95:69:27:a5:c8:e1:
         4b:20:cf:45:cf:2e:e6:62:ed:60:5c:ba:b0:bf:7f:7e:fd:8d:
         17:ec:25:a5:20:0d:12:07:f3:69:26:27:13:ef:a0:09:35:d0:
         b9:11:98:57:2d:ed:7b:32:db:31:54:0f:d2:82:6e:4d:3b:ec:
         6b:6d:e9:d9:15:a0:69:a8:7e:18:80:c6:ac:79:b4:21:71:6f:
         e8:e2:34:a3:a1:18:77:19:45:68:a2:6f:a4:ca:b8:ce:af:0f:
         e1:c7:20:0a:fa:a0:9d:b5:35:f4:54:bc:7f:39:9e:db:b2:7c:
         bb:33:de:11:31:07:7b:5c:86:f9:ad:38:97:c7:c2:d0:34:de:
         0f:3e:0b:00:f8:c0:1c:94:83:98:85:b4:73:13:f4:b0:71:d0:
         af:58:e4:79:5a:6f:e7:d6:cd:ce:4a:12:17:0f:47:e7:90:21:
         3a:9f:5a:23:6a:f6:f6:4e:aa:2a:f7:1e:1a:01:0a:82:40:bf:
         31:48:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:58 2025 by rpki-client