Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          GWHc3VsaD99+HrI+Y6cF58TpvgolDbtmQQIijNVyf4Q=
Subject key identifier:   C6:29:C8:5A:8F:60:6A:9E:4B:9D:3C:3A:3E:E9:43:B2:C0:65:4C:C7
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       0196C1944587547BE6F11F8ACB66342C73B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0548
Signing time:             Sun 11 May 2025 23:00:41 +0000
Manifest this update:     Sun 11 May 2025 23:00:41 +0000
Manifest next update:     Mon 12 May 2025 23:00:41 +0000
Files and hashes:         1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: 7OsJxr3puwh0A+BNQ1OMLLgmafJkdzIqWs2QBrfYOQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:94:45:87:54:7b:e6:f1:1f:8a:cb:66:34:2c:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: May 11 23:00:41 2025 GMT
            Not After : May 12 23:00:41 2025 GMT
        Subject: CN=c629c85a8f606a9e4b9d3c3a3ee943b2c0654cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:fe:b2:be:eb:59:4d:fe:96:9f:5c:fe:83:
                    79:60:68:71:7e:26:be:87:e1:e2:b1:5d:44:de:49:
                    62:37:17:d7:5d:9d:93:af:15:fa:99:6e:c7:b1:85:
                    a3:59:2a:5b:23:eb:e9:85:bd:45:08:03:31:33:1a:
                    bd:c5:5f:18:41:4e:82:99:25:90:84:09:f2:aa:52:
                    7f:c2:e4:b1:6f:83:7c:78:eb:58:35:74:6b:82:79:
                    85:18:e7:39:b0:ed:84:d6:e4:49:1f:44:99:35:aa:
                    a7:3d:c1:4a:4f:f0:2c:0e:5d:da:2e:70:6e:6d:d6:
                    d4:cd:01:9a:fc:3a:53:94:0e:72:ef:c5:c9:57:97:
                    64:3e:21:77:7e:e2:03:7f:48:ee:89:3e:62:f3:a2:
                    cb:ef:88:df:b2:e3:bd:92:02:33:f7:6b:b7:0a:5b:
                    88:be:05:14:0d:4d:d9:b5:d8:50:e3:81:10:80:bb:
                    7a:c6:39:dd:57:a8:f0:ff:fc:8b:80:c0:c6:35:9b:
                    d2:6f:f5:d2:33:33:b8:8b:9f:ac:62:0a:ef:17:60:
                    9f:cd:a6:57:9e:5e:d2:5e:45:41:70:2a:b1:b7:52:
                    0c:43:f6:84:f4:f9:03:9c:fb:d4:6d:6f:94:72:64:
                    b6:40:fb:ed:54:16:48:16:38:7b:2c:21:b7:67:07:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:C8:5A:8F:60:6A:9E:4B:9D:3C:3A:3E:E9:43:B2:C0:65:4C:C7
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:85:47:b3:28:5a:f1:b3:f2:4f:9b:07:23:79:d4:e8:73:
         b4:45:24:a3:38:d8:e7:fb:f4:f5:fd:3c:5f:ad:44:93:75:41:
         0a:d7:bc:b6:c3:72:8d:66:5d:f4:56:ee:e5:cc:65:dd:8c:24:
         21:7c:51:07:c0:0e:7e:ad:fd:ec:19:5a:52:ab:ba:97:58:4f:
         85:5c:49:f4:81:27:88:14:b8:34:40:7a:e4:15:8a:24:32:af:
         ce:c2:78:b6:df:2b:db:3f:13:cd:5c:02:82:22:43:c5:49:dc:
         4c:a4:da:80:a9:12:bc:a7:0c:79:90:4b:2e:52:26:84:92:3e:
         22:0b:8b:85:d8:75:d2:e4:33:07:85:c8:ae:e2:94:b1:15:ac:
         a4:4f:5f:f7:9e:18:bf:8d:5b:2a:c4:da:22:7b:a1:ad:95:cc:
         b3:ff:26:a7:42:68:75:8d:00:b7:30:57:5f:07:ed:dd:d2:3e:
         85:c5:08:24:b3:2a:0b:2d:88:3e:7b:05:b6:5b:67:af:bb:a0:
         75:de:3f:f0:b9:3f:38:cb:73:48:88:7f:df:81:91:e3:72:65:
         6a:49:08:42:b4:22:cc:76:02:44:f3:84:ce:bd:a8:5b:34:90:
         96:79:49:72:98:24:f5:fd:5b:2b:0a:66:12:60:2f:a0:83:79:
         33:8f:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:28:25 2025 by rpki-client