Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          y6cPVvwxaSR48PtOhIIAjLwy0jSkra4M1rG0UC4Pyi4=
Subject key identifier:   27:8B:E9:86:04:90:4A:B6:47:A5:CB:73:BD:D6:AE:B8:CC:A8:EE:20
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       01969C74D38CB73CF0A09FC6B3D57D45CD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0C04
Signing time:             Sun 04 May 2025 18:00:24 +0000
Manifest this update:     Sun 04 May 2025 18:00:24 +0000
Manifest next update:     Mon 05 May 2025 18:00:24 +0000
Files and hashes:         1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: jX1ihlZB2E6kBviTjKx7pURnAsxlgpz30j3XHlCSc6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:74:d3:8c:b7:3c:f0:a0:9f:c6:b3:d5:7d:45:cd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: May  4 18:00:24 2025 GMT
            Not After : May  5 18:00:24 2025 GMT
        Subject: CN=278be98604904ab647a5cb73bdd6aeb8cca8ee20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:9e:ac:70:a4:e0:5b:e5:e5:ae:48:40:d5:
                    85:f8:a9:ce:92:73:b4:e4:42:ff:0f:c5:84:9d:c6:
                    fe:2d:ff:cb:d2:14:7f:4f:56:da:cb:65:15:5b:09:
                    08:d6:70:64:a1:85:ba:fd:5f:21:ef:16:1c:52:29:
                    94:07:81:2f:36:fb:f4:5e:fe:ea:3c:9d:a7:be:ba:
                    93:17:e3:ef:09:e7:4f:1f:a6:77:70:86:7b:bc:3c:
                    cf:13:77:57:78:42:d2:a7:5e:f5:97:a4:3b:07:15:
                    98:4a:b1:39:d0:39:76:8f:68:a9:f0:81:26:b9:37:
                    b2:e3:e7:b4:b2:a8:09:79:c8:2c:70:a6:d7:78:66:
                    a9:24:a5:5c:9a:e1:2e:03:eb:e9:2c:11:2d:81:ee:
                    c0:92:04:ef:49:57:0d:6a:38:88:e8:7b:7e:5a:af:
                    31:e4:71:fa:f7:2a:4d:5f:37:90:96:05:db:5d:56:
                    6a:64:09:9e:46:15:42:63:68:99:95:a0:61:7b:56:
                    1e:35:00:4b:ff:8d:b4:30:9c:18:b4:f4:d4:bd:9b:
                    16:14:90:ee:5c:70:c2:1d:b0:bb:d3:28:af:48:67:
                    d6:80:65:66:42:ea:64:aa:14:83:70:e5:38:a3:ce:
                    de:51:70:ea:06:5f:72:28:ff:da:aa:c6:0d:45:30:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8B:E9:86:04:90:4A:B6:47:A5:CB:73:BD:D6:AE:B8:CC:A8:EE:20
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:37:90:39:71:47:86:f6:88:40:57:12:99:23:72:5f:1b:cd:
         4b:59:c2:03:c2:14:8f:cf:93:57:97:b8:17:4f:eb:cd:80:f7:
         cb:bf:b3:fa:25:3a:1d:28:c4:11:59:ab:77:d6:50:31:f2:4d:
         71:92:fa:f3:28:87:9c:87:43:24:e8:95:30:ad:75:f5:dc:0e:
         b8:88:2b:d6:94:93:5e:66:e4:53:1b:f1:9a:29:f9:65:d3:04:
         99:64:86:b2:fc:2d:c0:0a:97:fe:ed:1a:3d:f5:3b:35:88:c5:
         ac:10:0c:5e:e6:20:46:3a:0e:88:05:7f:6b:2c:31:bf:85:9f:
         f1:76:44:8a:d7:0d:46:6d:eb:a3:21:a4:d9:2e:95:b7:33:c6:
         9d:4c:ed:98:24:7c:20:4e:25:f1:ca:bf:9f:c3:7c:8c:a5:fd:
         79:0b:02:2a:7b:b9:a7:1a:83:84:95:d0:c9:04:84:fd:d6:99:
         cb:85:76:4c:d9:e9:a7:f4:76:7b:93:a2:08:ff:ee:3a:98:36:
         3c:4e:99:55:6a:fd:12:ac:28:31:3e:1d:54:0a:a6:d1:90:38:
         43:66:95:35:46:a1:89:06:ef:cc:42:b4:f0:51:81:5d:3b:88:
         6b:77:98:ae:1b:a3:33:06:30:a4:68:e9:b6:1c:57:87:e8:11:
         49:93:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:02:10 2025 by rpki-client