Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
File:                     jlDZuD8_AVrYi_a3xShIZ0rly24.mft (raw, json)
Hash identifier:          wuw7FljhFlVk68En3ypoAr9+cqzHtAQ+6qV9dfOmkL0=
Subject key identifier:   76:1B:46:6E:CD:87:FB:6F:09:F4:1E:38:9D:24:7C:87:C3:AD:E9:96
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Certificate issuer:       /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial:       0196B9A3A17B02E3D1F1F4EBAD37375D4517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
Manifest number:          08AC
Signing time:             Sat 10 May 2025 10:00:30 +0000
Manifest this update:     Sat 10 May 2025 10:00:30 +0000
Manifest next update:     Sun 11 May 2025 10:00:30 +0000
Files and hashes:         1: jlDZuD8_AVrYi_a3xShIZ0rly24.crl (hash: 8vkvts1LWKa5q534BtIJf9N+h6DR/P6YJFUby5h8dVI=)
                          2: kchIPTEIqMp0vpAjfgQEwz2BSpw.roa (hash: Nd32beBirDyD6e0HPEc2YHkqNEJViSi6nJI2FhIdX3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:a1:7b:02:e3:d1:f1:f4:eb:ad:37:37:5d:45:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
        Validity
            Not Before: May 10 10:00:30 2025 GMT
            Not After : May 11 10:00:30 2025 GMT
        Subject: CN=761b466ecd87fb6f09f41e389d247c87c3ade996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:ff:92:12:26:ff:d7:a4:9a:62:4e:70:17:
                    33:53:ed:77:a8:de:63:39:01:74:28:4c:53:6f:9f:
                    b1:d0:65:93:38:cd:42:55:9a:38:c3:f5:07:7c:61:
                    a5:f1:36:a9:47:ce:ee:71:b6:1f:d2:45:68:04:3a:
                    a3:fe:b7:e0:ac:77:65:3e:19:5e:8c:25:1d:fa:c1:
                    06:5a:f3:a6:e2:d2:3d:36:30:d6:e4:0e:88:13:45:
                    55:de:a1:db:a7:a7:04:64:37:e9:43:45:f3:60:3f:
                    76:b2:d2:8f:85:0e:7e:64:48:b1:b2:0e:bb:2b:e7:
                    b9:14:3a:4d:33:99:85:59:64:12:0e:3d:af:1b:b2:
                    1b:5e:3f:6e:de:b5:42:1f:cb:f9:28:61:e6:9e:02:
                    35:af:39:5b:28:d1:07:a9:3c:f0:d4:0f:cd:94:bc:
                    b0:25:1d:37:61:01:98:95:c9:47:2a:4c:cf:d9:44:
                    ab:ab:d7:70:86:c2:aa:78:2a:95:c0:ba:37:ba:3a:
                    89:f4:ce:b9:35:ef:ab:05:92:a1:1e:3e:32:3f:f5:
                    b2:5b:a8:67:56:43:f9:fe:5e:80:bd:fe:4b:d2:b9:
                    21:ea:5e:02:2b:68:e1:b1:7a:1e:c7:a4:6d:d5:b0:
                    d0:50:b5:00:36:03:ca:a6:d4:c8:0f:de:ea:90:9e:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1B:46:6E:CD:87:FB:6F:09:F4:1E:38:9D:24:7C:87:C3:AD:E9:96
            X509v3 Authority Key Identifier:
                keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:71:73:18:e0:11:29:2c:58:dd:8b:6c:b6:30:d1:25:f1:f0:
         4e:5f:e6:52:c3:c2:19:db:c3:91:cc:be:62:65:bc:a1:6e:74:
         6f:01:99:46:93:51:5b:47:d3:93:42:55:3e:6e:29:fa:3e:10:
         e9:64:fd:43:bd:f4:5e:1f:8c:c0:19:7e:e1:2c:bc:b8:7f:69:
         92:9c:b1:23:4f:ec:09:c4:a5:16:47:c3:e9:ef:e4:c1:a4:2b:
         5a:57:1d:5d:3b:0e:ae:1e:fc:16:9a:1f:af:1e:9e:96:b2:11:
         07:2f:9a:03:62:95:88:02:0f:67:c5:e1:fd:13:da:6f:a7:c4:
         51:65:0e:64:98:a8:49:23:ae:48:c1:4b:d8:7c:6a:de:58:fd:
         28:80:71:79:58:af:08:b1:ba:6b:41:23:21:00:b3:aa:f0:35:
         84:a8:28:3c:b4:33:4e:54:7e:b8:e9:43:bf:92:8f:db:0e:ab:
         d6:f0:88:89:a1:36:eb:2d:11:37:c7:ae:20:a8:7a:f1:89:ba:
         66:f2:99:4e:d0:47:97:ee:d0:5f:e6:f1:d6:50:6d:92:ac:87:
         e4:b7:c2:35:5d:52:6e:ed:90:34:20:ae:6f:39:26:61:ae:c0:
         06:88:96:e8:1b:28:41:98:b6:19:ef:78:9f:d9:9f:15:55:71:
         4d:33:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:33:11 2025 by rpki-client