Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File:                     jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier:          TdGFtXAIIFygU7bDZCy5APJBIdl7wOX7XlQn8MJQFH8=
Subject key identifier:   06:B4:F7:35:45:DC:03:82:3E:38:17:34:73:F3:AD:14:AC:8F:76:73
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer:       /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial:       01969ED1489060A9EDD66F543597C0224F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number:          0B4C
Signing time:             Mon 05 May 2025 05:00:37 +0000
Manifest this update:     Mon 05 May 2025 05:00:37 +0000
Manifest next update:     Tue 06 May 2025 05:00:37 +0000
Files and hashes:         1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
                          2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: lT7HbYAPyIBrR9q3HP4HQY2RL7mDL6ZOWh4WFcodfxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:d1:48:90:60:a9:ed:d6:6f:54:35:97:c0:22:4f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
        Validity
            Not Before: May  5 05:00:37 2025 GMT
            Not After : May  6 05:00:37 2025 GMT
        Subject: CN=06b4f73545dc03823e38173473f3ad14ac8f7673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:49:01:f9:ec:d2:8b:80:51:94:f5:8f:38:
                    5a:76:2e:af:ed:8b:f6:de:1d:bc:1e:bb:d1:1c:30:
                    e9:74:39:c8:12:03:ea:2d:c8:53:47:f2:0a:e5:46:
                    cf:7d:d1:64:22:df:ab:e2:0f:91:08:8c:ab:3f:d8:
                    df:aa:c0:92:69:67:ca:b3:56:a2:d7:14:40:5f:35:
                    2b:74:95:d3:73:86:0b:32:4d:09:e6:1c:bd:0c:fe:
                    29:2d:a0:17:0d:b2:2a:16:f0:31:75:ac:64:f3:9c:
                    c3:c4:04:05:d0:be:13:ce:05:eb:43:06:1a:0f:db:
                    41:d6:18:6b:87:24:47:57:84:17:da:61:b4:eb:d6:
                    45:d1:5a:f9:5f:92:b5:88:fb:6f:81:fe:56:bf:35:
                    f6:cb:ef:ad:df:75:5b:8c:a4:f8:73:17:02:f6:fe:
                    c3:ce:01:5d:2c:41:18:f1:c0:dd:0f:09:7f:47:3b:
                    4b:bf:f2:40:a2:85:d1:dc:58:17:df:99:e7:d9:50:
                    83:50:50:45:5b:94:e3:65:fd:88:39:9d:63:6f:69:
                    52:1a:51:ee:d5:d8:68:b0:6c:8a:02:4a:3e:5e:ef:
                    5d:5d:8d:fe:5b:a1:fc:dd:e5:d1:8b:82:08:ec:7a:
                    4f:93:7c:90:24:c8:35:d8:6d:e6:31:eb:e6:88:c6:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B4:F7:35:45:DC:03:82:3E:38:17:34:73:F3:AD:14:AC:8F:76:73
            X509v3 Authority Key Identifier:
                keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6f:0f:64:98:69:7c:ea:7a:03:0c:f3:db:74:79:46:31:a5:
         38:03:7c:80:30:4e:1f:ee:3f:77:c1:fb:78:43:38:3a:39:fa:
         fe:32:c9:64:01:94:94:56:f4:ba:29:09:c5:ae:dc:54:c6:78:
         80:a3:32:af:e9:4f:88:98:82:54:ee:a7:2d:22:18:61:b7:8c:
         ed:f0:86:3e:c1:4c:42:75:b3:a6:d8:9e:57:44:bb:5b:74:16:
         52:f4:14:e4:cd:16:73:d5:2e:9c:39:c0:85:04:d1:3c:80:3a:
         ab:fe:da:94:5a:3b:bf:6a:b8:f7:07:39:50:03:b9:b6:1d:94:
         b4:4d:b0:e4:da:f5:28:7c:f1:5c:2d:a6:b0:8e:a4:f6:63:b1:
         9d:24:41:33:29:b2:84:e1:7c:fa:ff:f1:e5:63:dc:f7:26:e3:
         c1:0c:75:7d:96:21:d8:0f:14:12:09:11:6a:99:74:59:8c:00:
         90:43:fd:3d:b1:d0:d1:ed:81:97:d4:68:96:ff:66:0c:e8:12:
         8a:0f:e1:58:57:75:eb:db:55:8c:01:f8:f9:0b:48:cc:5b:7b:
         0c:d9:24:d5:84:44:d9:ee:b7:a6:0f:20:00:87:48:c2:e0:53:
         cd:02:55:1e:9f:70:ef:c0:02:32:98:87:da:0c:9c:0e:22:dd:
         53:dd:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:30:02 2025 by rpki-client