Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File:                     jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier:          p/ICCj4eyShofnAD/MQwP14omn2DQDYNjLQkbDo+/pU=
Subject key identifier:   41:88:4D:F5:C2:EC:E6:0B:82:ED:EF:BB:B0:2C:F4:D1:47:67:83:E4
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer:       /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial:       0196BFDCCC574072C4D18A9B96BBCB6DAC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number:          117E
Signing time:             Sun 11 May 2025 15:00:40 +0000
Manifest this update:     Sun 11 May 2025 15:00:40 +0000
Manifest next update:     Mon 12 May 2025 15:00:40 +0000
Files and hashes:         1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: 2pjN7Y0NnBPsYc3Th6gCdonXGS7WpxLoOblXRMe41fU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dc:cc:57:40:72:c4:d1:8a:9b:96:bb:cb:6d:ac:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
        Validity
            Not Before: May 11 15:00:40 2025 GMT
            Not After : May 12 15:00:40 2025 GMT
        Subject: CN=41884df5c2ece60b82edefbbb02cf4d1476783e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:4a:71:f4:9e:63:dd:75:37:f3:51:ce:35:
                    d4:ab:07:17:18:2d:5f:09:09:7a:e6:71:31:e8:c8:
                    75:3f:df:3e:2e:6a:88:7d:ac:df:b7:ba:81:c6:1d:
                    8c:6f:bd:ab:10:19:8c:6f:04:4c:1f:c7:bc:8f:d4:
                    ab:93:0f:9c:fb:0f:8a:31:12:e2:53:eb:95:50:19:
                    ef:df:ec:28:0a:43:20:4b:c9:74:d1:d6:54:af:4e:
                    a5:a3:d7:ee:13:a7:a5:74:1e:fd:e1:86:1b:b1:67:
                    d9:dc:d6:a3:c6:7d:cb:c1:f3:6b:d1:5e:5b:54:ea:
                    ff:d8:81:1d:e3:d9:cd:2b:b2:b6:fa:f5:69:5e:12:
                    dc:f7:fb:52:f0:20:eb:57:66:19:75:d5:81:92:58:
                    09:39:99:ca:09:bc:43:b3:af:3d:26:3e:8b:31:2b:
                    ef:fc:64:cf:c9:39:6b:a6:08:0d:da:a6:17:15:8f:
                    a1:e5:2a:a0:62:05:08:b5:d7:76:18:ba:c2:a2:d2:
                    d6:62:c0:45:42:ba:f4:5b:8e:22:ac:15:dd:b0:6e:
                    e5:bf:01:57:59:70:ac:59:b1:ca:a7:45:42:35:68:
                    e9:53:bd:94:ab:3f:24:43:a7:8e:ec:3d:40:ae:6a:
                    df:1c:5c:79:96:e9:01:e6:2b:44:97:85:31:18:f3:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:4D:F5:C2:EC:E6:0B:82:ED:EF:BB:B0:2C:F4:D1:47:67:83:E4
            X509v3 Authority Key Identifier:
                keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:55:67:06:15:d3:8a:6f:75:33:08:bf:95:fb:b0:ab:32:
         6c:08:9f:a9:77:90:ed:d4:ba:20:03:26:00:7a:27:f3:18:32:
         5e:9c:e2:92:b1:63:6c:89:cb:3f:1a:26:8a:b9:1c:32:3e:c5:
         5c:dc:88:40:89:7b:d4:e3:0b:86:ed:39:39:19:35:14:30:d2:
         21:9b:bb:8d:0f:09:d0:57:83:cd:21:9d:63:b1:56:b0:0e:cb:
         6e:8e:ed:5c:36:bf:cd:cc:ad:04:0e:21:93:14:31:6c:5f:5e:
         77:1c:7c:69:37:dd:ac:78:26:55:1c:23:cb:0d:a3:7a:5b:38:
         24:b4:b7:18:fd:f4:11:f0:ed:26:22:3a:0e:20:c6:c2:b5:79:
         3f:5e:4c:0d:63:ee:a1:52:be:ac:dc:cd:b9:96:4f:57:e5:3b:
         d0:8c:21:e9:1f:97:e6:7a:94:72:ac:55:a4:8c:cd:f4:3a:0a:
         35:6d:80:1f:f9:4a:70:23:58:33:5f:61:00:af:27:27:7f:ce:
         c7:fb:27:43:06:bf:b3:49:3c:c9:fe:4a:6b:2f:b7:89:2b:a8:
         eb:ab:ae:8b:c8:e6:98:0f:7f:3d:e9:9a:2a:00:2b:d0:71:ae:
         cf:75:0e:37:df:a8:99:23:f1:76:8e:d3:82:c8:0b:9f:11:c5:
         dc:b2:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:52:00 2025 by rpki-client