Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File:                     Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier:          mvSNkTxt6RYhsGQ9jzccwTDV4gfTyYK1706IUVTb60M=
Subject key identifier:   FB:E1:7B:6C:F2:08:22:C9:75:70:E4:AC:ED:DA:62:57:AC:E7:9C:74
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer:       /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial:       0196D2508D0574EA3603CB99F52DF6C10D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number:          08E8
Signing time:             Thu 15 May 2025 05:00:16 +0000
Manifest this update:     Thu 15 May 2025 05:00:16 +0000
Manifest next update:     Fri 16 May 2025 05:00:16 +0000
Files and hashes:         1: Fy2IYBN9hjZkWkvbtPQPrYui0qc.roa (hash: JelZKBaztB5j8Dd3i30kr2+tTI62dQSAVwbIQZ0Mhyo=)
                          2: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: gbDZP1juYWXutc3xcSl1vl3PDvh6bcwvlypQ2v2/MjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:50:8d:05:74:ea:36:03:cb:99:f5:2d:f6:c1:0d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
        Validity
            Not Before: May 15 05:00:16 2025 GMT
            Not After : May 16 05:00:16 2025 GMT
        Subject: CN=fbe17b6cf20822c97570e4acedda6257ace79c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:1e:9a:8e:2f:f3:ab:a2:fd:5d:91:b3:42:
                    3b:9a:76:06:4d:3f:44:54:57:7f:43:8e:f9:7e:04:
                    a1:8a:5f:6a:c6:b8:98:53:ea:9d:98:94:4b:a7:40:
                    73:69:c2:66:c2:fe:2a:98:d0:95:37:43:cb:9e:ec:
                    5b:c7:1c:81:63:82:f1:aa:f7:6b:ca:4d:e2:fd:81:
                    6c:d1:a6:f0:bd:ff:53:f2:2e:c6:dc:09:65:2f:4e:
                    8f:2f:f4:f9:6b:d4:ee:11:20:8a:1f:93:61:e0:bf:
                    fb:ef:56:30:17:59:53:32:f3:6f:a3:21:60:ec:b6:
                    fb:af:07:9e:fc:4e:16:6a:be:fd:8d:3f:47:11:23:
                    64:1f:c5:ec:4d:eb:7f:8d:a4:f4:00:eb:fc:48:dd:
                    d8:d3:54:7f:f1:8d:1c:7e:c1:94:e4:ae:16:49:00:
                    ac:d2:35:f7:3b:f9:44:0c:5d:6d:c9:84:51:88:0c:
                    e4:63:48:08:05:9a:25:7d:0c:a7:8c:60:74:f5:b6:
                    f3:9e:8a:50:fa:09:dd:9c:e2:07:f3:a2:e3:52:64:
                    71:8e:7e:a2:f1:70:33:4e:12:a7:d5:fd:41:eb:e7:
                    65:37:2e:61:a9:42:56:06:a0:02:3c:82:cf:88:79:
                    21:31:9d:cc:39:50:63:09:d3:bd:bd:af:c0:03:fa:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E1:7B:6C:F2:08:22:C9:75:70:E4:AC:ED:DA:62:57:AC:E7:9C:74
            X509v3 Authority Key Identifier:
                keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:af:f4:39:fb:5c:42:fa:d9:23:6c:12:3b:0d:ac:83:db:5e:
         02:39:cc:eb:22:94:5b:21:b2:be:b3:eb:b6:cb:29:27:e3:70:
         d8:cc:61:e2:d5:70:03:13:6d:58:80:2b:10:36:d8:bc:de:27:
         9b:b7:78:f9:d8:21:76:ee:ed:f6:1d:84:02:ed:15:20:99:de:
         e7:87:85:7f:56:e4:b6:14:bf:65:6e:e1:c0:fd:43:7c:04:7a:
         55:93:0a:fa:59:43:8c:66:55:f4:b3:2c:6d:a0:b9:52:6a:a0:
         35:ce:8b:9d:70:db:65:ec:ff:54:94:5b:ce:d5:16:3a:10:1b:
         63:25:9d:4d:29:c5:15:af:42:3d:ec:94:74:e0:ba:6e:9c:4b:
         99:a0:30:b3:76:81:94:66:68:88:7e:a8:a8:7f:2a:86:5d:e5:
         5d:4f:1f:bd:02:67:05:25:78:f6:f2:b6:2b:99:ef:89:0e:06:
         bc:d5:17:23:4c:d1:10:91:ba:0f:c2:bc:cd:be:b6:cd:84:5d:
         5e:8a:e7:05:a5:10:dc:ac:eb:1b:ac:c4:ee:8a:50:b8:50:da:
         1e:4e:d6:02:81:4c:b9:d6:21:38:9b:7d:a8:ec:4d:da:d6:df:
         6f:29:ba:01:2f:8a:30:ba:21:e5:cc:8a:99:2e:3d:1f:b9:3b:
         9b:00:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:24:15 2025 by rpki-client