Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File:                     jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier:          SEIkdR5EBXzF4SIdPlQ7E1V5SCZzr8iT+G89+dkjZvw=
Subject key identifier:   DF:1A:14:E2:6B:DE:A2:4F:00:4C:2C:E3:8D:F9:56:39:D2:EF:D8:AA
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer:       /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial:       01969E9A888F9E60FF7F25F42970B31F899E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number:          14B7
Signing time:             Mon 05 May 2025 04:00:49 +0000
Manifest this update:     Mon 05 May 2025 04:00:49 +0000
Manifest next update:     Tue 06 May 2025 04:00:49 +0000
Files and hashes:         1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
                          2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
                          3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: DgppAcjq/cNwsYsXecNTLXhu4AcFP6Snz75SBUGNbEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:88:8f:9e:60:ff:7f:25:f4:29:70:b3:1f:89:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
        Validity
            Not Before: May  5 04:00:49 2025 GMT
            Not After : May  6 04:00:49 2025 GMT
        Subject: CN=df1a14e26bdea24f004c2ce38df95639d2efd8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:66:69:eb:d3:1a:e4:8e:9c:09:27:c7:dc:d6:
                    3a:4e:dd:d1:f8:94:df:7e:2b:e6:4d:35:fc:bd:06:
                    46:90:2d:32:b1:b7:a5:c7:bf:37:9c:88:03:17:32:
                    1c:59:05:ae:61:11:6a:78:d1:49:e2:81:07:10:4d:
                    14:7f:20:92:e1:89:93:39:1c:c3:de:ba:72:1d:75:
                    0d:0b:39:2a:91:a9:2d:ed:a5:4a:9c:f0:13:83:a2:
                    c4:92:5f:ee:2f:98:80:ad:17:25:d2:3f:52:f2:99:
                    c0:f9:79:10:5b:98:05:01:b0:04:e2:52:dd:87:4d:
                    d5:34:3e:7e:d8:a4:66:54:11:f4:eb:65:9b:87:13:
                    8e:35:93:58:df:8f:e7:b8:3a:92:a8:38:75:fd:f0:
                    e9:0f:01:fe:c9:02:b5:65:1c:b5:2c:73:e4:05:8f:
                    da:0e:b2:a5:73:0e:fc:08:8e:0f:4f:f2:77:3f:30:
                    1e:be:aa:6d:d6:9d:1e:df:4d:14:f8:d6:0a:fb:01:
                    b6:5e:00:9d:8b:03:26:15:a6:06:d8:03:d8:c8:64:
                    5b:a2:3e:c4:c5:f9:33:4d:8a:73:50:db:b6:e8:f3:
                    a0:9d:cc:e4:bb:9e:bc:f0:01:ea:c7:ac:6e:1f:5c:
                    e5:73:a8:a2:75:f0:bc:c1:8d:e1:33:51:e9:7c:e1:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1A:14:E2:6B:DE:A2:4F:00:4C:2C:E3:8D:F9:56:39:D2:EF:D8:AA
            X509v3 Authority Key Identifier:
                keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:ea:bf:17:c1:61:52:6b:3d:02:b9:89:c5:8a:2b:86:68:
         47:28:50:6f:2f:57:72:26:ff:68:f8:78:15:ac:9b:a5:2c:8d:
         f3:e1:9c:89:e2:89:8b:8e:d9:56:d7:e0:50:50:15:fd:b9:da:
         21:b9:59:ea:c6:08:14:10:46:88:8d:b5:30:a8:02:5e:f2:84:
         5f:df:98:73:0a:b2:f6:bd:71:e4:ba:88:f1:6d:aa:e9:b2:81:
         98:be:17:9e:95:c6:e2:35:0f:34:e3:78:78:51:75:72:b7:f0:
         f0:5b:c1:b8:37:04:2a:0b:38:a5:14:7c:54:25:33:87:7b:7c:
         73:6e:07:03:d5:65:78:df:06:4d:c5:0c:9c:8c:fc:d4:9d:16:
         f3:94:21:2b:dc:05:3b:6b:2f:04:ab:cd:a6:5b:05:6e:f0:17:
         9f:c6:bc:3c:f7:84:39:15:cc:cc:0c:3f:c5:f6:de:3a:63:74:
         b5:55:65:4e:d0:c3:cc:48:09:db:6d:0a:ab:d7:f3:bf:c9:f7:
         c1:08:ef:76:d4:dc:bf:f6:75:f6:f8:7c:c3:17:7f:e0:02:0a:
         72:1c:fd:b4:00:74:d4:88:d0:ae:17:bc:1d:82:b0:8c:cf:f4:
         99:dd:0d:f5:48:83:93:bd:6e:ac:87:6d:b0:63:01:5c:df:1c:
         c2:6e:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:50:14 2025 by rpki-client