Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          BtG3PDyMn9YesvHxCdXKIniCVNKxR4Me+Ewe0qp3KKw=
Subject key identifier:   FF:72:E9:30:79:EB:47:ED:B8:E7:5F:84:9A:18:A4:19:AB:DC:AC:8D
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       0196B334188C89B87F933B25795F0ADB39E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          09D7
Signing time:             Fri 09 May 2025 04:00:57 +0000
Manifest this update:     Fri 09 May 2025 04:00:57 +0000
Manifest next update:     Sat 10 May 2025 04:00:57 +0000
Files and hashes:         1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
                          2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: 5CDe+upz9u7Pd+mOcN+4U5IWRX3CfXP1Ap6mC+NVYMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:34:18:8c:89:b8:7f:93:3b:25:79:5f:0a:db:39:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: May  9 04:00:57 2025 GMT
            Not After : May 10 04:00:57 2025 GMT
        Subject: CN=ff72e93079eb47edb8e75f849a18a419abdcac8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:50:99:e7:9c:ec:42:72:80:d0:d9:33:80:
                    25:8e:44:b5:0c:c5:7e:2a:c0:38:f4:03:71:e0:ce:
                    90:8f:e7:ed:66:4d:fd:f8:d6:a6:08:8b:3a:2f:05:
                    b1:7a:80:b4:43:83:55:19:80:8a:21:23:71:e3:28:
                    86:6b:a9:f4:13:40:90:ca:ca:d7:2d:e2:35:08:b2:
                    db:06:ab:36:46:e2:55:aa:bd:25:d0:28:a8:30:e1:
                    b2:07:83:34:7c:d6:b7:63:02:28:54:41:8d:f8:11:
                    12:e1:0d:1a:d4:70:4b:35:10:c6:79:9c:b3:5d:36:
                    e0:5d:db:9e:4d:01:b5:63:ea:3d:70:80:7f:e0:8d:
                    fc:e1:90:17:e3:23:2c:d7:0a:67:78:93:3b:70:58:
                    0b:2a:b7:a6:d8:9d:f5:ad:c8:85:48:1f:88:c9:8e:
                    fa:4f:f8:e7:e9:73:d9:f3:ac:b6:ed:a7:20:64:c4:
                    86:c3:1b:b3:1d:98:76:66:ef:a2:94:bf:99:0d:8f:
                    09:44:31:de:80:c3:b3:fb:c0:52:b1:81:a3:fd:8c:
                    bb:90:7a:28:37:64:ef:02:7e:0d:be:45:60:f6:bf:
                    9a:e0:56:08:ab:23:cf:5d:6c:3e:53:3c:f5:eb:18:
                    01:47:ae:17:94:0a:aa:e4:47:bb:96:df:6d:0f:27:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:72:E9:30:79:EB:47:ED:B8:E7:5F:84:9A:18:A4:19:AB:DC:AC:8D
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:7e:c0:28:20:5a:25:cf:d1:78:12:c0:42:16:82:a6:06:
         16:80:d9:44:bc:03:4b:60:46:77:9f:4d:c2:f4:d1:be:de:41:
         09:f5:fb:85:fc:65:69:72:2c:72:b5:64:23:5b:13:24:a5:3b:
         f6:e0:49:72:b0:47:f3:76:98:46:33:74:74:79:a7:86:cb:22:
         09:b0:f3:56:03:6b:9a:1e:76:fa:15:ef:3d:1b:4b:2f:c7:a8:
         89:a5:0a:a4:ef:5f:46:8f:6a:1f:ca:76:28:25:bf:c7:d5:f5:
         b8:74:1c:72:3e:19:ac:1f:32:9e:40:3f:10:04:fd:bf:48:50:
         98:5c:7b:4f:b6:45:23:50:b6:82:73:e4:7a:f9:34:cf:9c:20:
         51:af:54:f9:b7:4c:b1:43:db:0a:c1:3a:c5:47:97:1c:82:ca:
         38:cd:f2:b4:a5:99:ce:4c:18:a9:19:9e:04:f2:05:e5:88:8f:
         63:fe:9c:5f:81:24:29:70:25:7d:d0:ae:2a:f1:eb:bd:60:84:
         3c:05:07:8d:cf:96:bf:f1:aa:0c:eb:94:63:df:c3:fe:6e:62:
         33:09:f9:fb:27:af:50:cd:03:59:8d:fc:c5:98:93:dc:0f:c8:
         a2:0b:b3:47:3e:80:2d:fe:da:00:a3:b8:a2:a5:d5:ff:0c:c8:
         f8:eb:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:49 2025 by rpki-client