Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          Gx+VY8PDt9zyO5bAQdIV7qdgHLHhsa30e9fkryBm4dM=
Subject key identifier:   86:19:45:F4:A8:44:BF:DF:42:97:85:70:18:EB:BA:92:DB:3C:67:FD
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       0196C238EC0E39AFA3AE0C781565F18DC01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0C05
Signing time:             Mon 12 May 2025 02:00:32 +0000
Manifest this update:     Mon 12 May 2025 02:00:32 +0000
Manifest next update:     Tue 13 May 2025 02:00:32 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: BDPMzIq9yEpjRTJbt715A6g4co1cPrJeAd3Apl4uOfg=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:ec:0e:39:af:a3:ae:0c:78:15:65:f1:8d:c0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: May 12 02:00:32 2025 GMT
            Not After : May 13 02:00:32 2025 GMT
        Subject: CN=861945f4a844bfdf4297857018ebba92db3c67fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:8f:ab:6e:92:6a:86:81:2c:68:ee:bd:b8:
                    ca:90:a3:1c:fe:87:db:b9:ee:24:fb:a1:17:36:03:
                    60:9c:6e:14:ea:7b:18:00:93:32:8a:55:cd:78:62:
                    a5:3a:6f:70:75:95:83:0b:bb:e7:de:22:82:56:ff:
                    85:45:f6:9d:42:9d:bb:12:77:85:2f:e8:06:7b:91:
                    64:ee:56:83:16:6f:b0:7d:15:6f:75:47:6d:bc:93:
                    d8:6f:af:7e:41:dc:3e:45:f6:ab:c5:51:07:2a:0a:
                    d7:26:dc:d6:92:36:05:43:49:48:06:72:8a:da:32:
                    68:f8:6a:73:4e:71:72:e4:94:e9:e1:c9:09:d6:42:
                    26:c9:51:4d:e8:97:fe:25:47:17:6b:24:b3:d6:57:
                    a6:df:26:0c:bc:a0:48:34:17:53:60:20:6f:41:07:
                    51:4a:13:28:c7:da:43:f6:5a:98:00:6b:f2:f6:a1:
                    0a:72:c0:c8:6d:10:29:f5:c2:70:5e:c8:6f:ce:e0:
                    02:f6:f4:6a:cb:16:aa:a4:d8:a3:fa:4f:d4:7c:e9:
                    1d:fb:50:24:db:59:5d:e5:09:7b:36:e6:62:b5:3e:
                    2d:33:3b:4a:65:c2:67:46:ef:e0:bc:c8:bb:2d:32:
                    d2:66:27:01:e2:12:ce:9c:6b:41:fb:19:ba:ac:c9:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:45:F4:A8:44:BF:DF:42:97:85:70:18:EB:BA:92:DB:3C:67:FD
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0e:b0:1f:56:a7:fa:6f:74:a0:45:62:98:ab:4a:9d:44:8d:
         00:c5:3e:fb:af:9d:71:54:a9:5a:7a:56:39:de:18:6b:3e:0b:
         a8:8f:2d:82:eb:58:6e:8a:98:a1:f6:1c:b7:e6:16:88:9a:5e:
         32:ed:fd:dd:d1:16:10:51:d0:63:4e:3e:54:6e:75:0a:c3:24:
         ce:0a:ed:b8:59:ab:56:9c:8b:d2:77:b2:0f:d6:44:1d:88:17:
         f9:7b:3c:40:2c:04:39:21:71:40:c1:43:b9:05:fe:60:07:ce:
         5e:78:ba:a0:5e:c1:8f:67:f6:46:6b:46:28:e9:b2:9d:b1:81:
         6a:79:12:70:ef:22:f1:ec:19:ae:c4:b7:f0:1a:dc:53:f2:6c:
         4b:51:2f:1d:17:cf:3b:64:00:b5:5f:3e:b5:d6:f9:7b:03:04:
         a8:be:e4:07:fb:9a:44:a3:39:8c:0c:0f:57:4c:be:f6:2e:47:
         0a:fb:cb:b4:dc:a5:2b:93:c1:8a:0d:da:67:72:89:8b:74:50:
         46:81:2d:81:9d:d3:f9:f7:8a:f5:16:39:78:d7:42:43:8f:e4:
         bc:6e:df:17:41:cb:2f:39:18:91:e8:b4:e6:ba:09:c3:09:7b:
         d4:c1:71:3c:24:e4:df:cc:9e:5e:ef:fe:d9:5e:56:49:23:08:
         3c:2a:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:44:27 2025 by rpki-client