Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File:                     JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier:          Kg1fjyfDB/un3JNbS6fkNyLGT18W60cc3sL1TkJjEZE=
Subject key identifier:   6D:FF:88:70:8D:9E:20:16:7B:EA:F1:B5:7C:EC:96:59:13:B5:83:CE
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer:       /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial:       0196B823B64D92425BC5C4050D969DE8912F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number:          0D62
Signing time:             Sat 10 May 2025 03:01:10 +0000
Manifest this update:     Sat 10 May 2025 03:01:10 +0000
Manifest next update:     Sun 11 May 2025 03:01:10 +0000
Files and hashes:         1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
                          2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
                          3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: wzM//p8y/oJP81xvwLrFCTOhvP3b/X755/lx1wtBhLg=)
                          4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
                          5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
                          6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
                          7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
                          8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
                          9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:b6:4d:92:42:5b:c5:c4:05:0d:96:9d:e8:91:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
        Validity
            Not Before: May 10 03:01:10 2025 GMT
            Not After : May 11 03:01:10 2025 GMT
        Subject: CN=6dff88708d9e20167beaf1b57cec965913b583ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:6e:56:dc:0a:11:49:f9:7f:ff:ec:98:c6:
                    e6:ee:1e:88:96:b4:d3:3f:90:7f:2e:23:3b:c6:28:
                    74:a0:54:fe:72:7d:db:59:a4:48:66:04:29:91:a4:
                    e4:6e:0a:2a:70:d8:f1:be:d2:d7:64:77:19:06:64:
                    db:1f:56:28:79:51:ce:a5:2e:3a:b2:f5:8d:85:b4:
                    b1:61:b6:07:2b:64:c7:ee:86:6b:88:23:c3:2a:90:
                    f2:d1:53:f2:60:1e:fa:1d:21:5e:0c:4c:5a:8f:62:
                    68:ad:e7:76:e7:06:0d:8e:27:9f:07:48:6f:b1:57:
                    a9:8e:07:e2:09:42:a7:1e:83:4d:0b:3a:2e:08:a0:
                    a7:d3:58:55:96:34:79:19:0e:f5:ab:c2:a3:c5:be:
                    6a:2c:c3:73:a9:04:92:d3:9a:ee:41:31:cf:22:62:
                    d5:43:25:73:0b:71:20:07:25:90:0f:fe:ee:39:cd:
                    30:35:5b:c5:5f:de:a4:10:9f:03:38:b8:77:4a:09:
                    45:81:82:00:55:d3:df:30:11:c8:0c:58:7f:ce:79:
                    4b:01:cc:1e:fa:9b:df:f3:29:68:25:3d:31:6d:ca:
                    43:31:0e:5d:82:93:29:5d:7e:c9:15:34:4e:36:d7:
                    ee:a8:74:6d:f1:7a:67:49:f1:80:77:cc:b9:c7:e8:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:88:70:8D:9E:20:16:7B:EA:F1:B5:7C:EC:96:59:13:B5:83:CE
            X509v3 Authority Key Identifier:
                keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:97:02:56:fe:ea:b0:0b:bb:d4:a6:57:81:b6:bd:87:e2:ef:
         e2:81:6f:4f:9a:87:2d:c3:41:f7:aa:3a:11:2f:7c:ce:f7:ce:
         a8:0d:6f:23:76:e9:2a:b4:3e:b9:e5:c1:dd:87:54:0b:cc:e1:
         87:c5:02:0b:42:3f:13:58:15:c7:36:f2:d4:0b:73:80:21:85:
         9b:a7:90:1c:49:3f:67:c6:a6:a4:ed:52:e1:37:05:1f:a3:74:
         1d:7c:fb:24:b3:5b:05:13:65:6d:f6:63:bd:d3:c6:d8:fd:ee:
         5d:ac:dc:0c:a4:07:7c:a2:99:d6:74:b9:ea:06:9c:25:ea:43:
         39:b5:71:fe:a8:5a:39:37:95:a7:2b:49:1a:58:a2:ed:37:a4:
         92:0d:4e:82:f7:aa:57:af:49:a6:79:5b:4a:8a:3b:71:17:a3:
         60:24:3d:65:e8:41:6c:69:95:0d:a5:e8:5c:e7:fe:22:43:8f:
         9e:c7:1f:e7:82:d8:3d:8c:1a:fd:70:5e:1c:36:79:10:cc:92:
         7a:7c:fa:2c:07:e1:3e:fe:a2:40:bc:b6:7f:6a:b1:01:71:9c:
         9a:f0:52:1d:d4:83:d9:66:e6:64:7f:33:cb:9d:51:b0:3a:22:
         1e:6c:a7:75:ac:4a:20:3f:fa:86:0b:c1:12:6f:dc:6e:c7:91:
         4d:49:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:28:01 2025 by rpki-client