Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File:                     jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier:          nXoYsD5KNm+jOzSgcSrrfgoC1N9/f5pCewrYkuOJEzU=
Subject key identifier:   3A:DC:07:A7:87:8C:76:14:A8:62:D0:F7:52:DB:D7:63:AA:6A:D1:64
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer:       /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial:       0196A0520C0DE75CF19431498A503E6008E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number:          05CF
Signing time:             Mon 05 May 2025 12:00:53 +0000
Manifest this update:     Mon 05 May 2025 12:00:53 +0000
Manifest next update:     Tue 06 May 2025 12:00:53 +0000
Files and hashes:         1: dCLBCLtRiEHKLnEsttcCW1iM_BE.roa (hash: vfnxCa/UgYFBFIEv8mBtn7OLgChKNbNgT9iBOTqVg7E=)
                          2: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: iXTGRGgoOqVGf8kKbAqNuXtcXssW6TOIXzVaNEoN28g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:52:0c:0d:e7:5c:f1:94:31:49:8a:50:3e:60:08:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
        Validity
            Not Before: May  5 12:00:53 2025 GMT
            Not After : May  6 12:00:53 2025 GMT
        Subject: CN=3adc07a7878c7614a862d0f752dbd763aa6ad164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:16:bd:96:e2:18:81:d4:5a:fd:1f:52:ab:
                    bc:36:52:2e:57:df:98:ef:75:f2:78:4f:0b:b9:86:
                    6a:82:0c:08:78:e8:51:03:de:f4:b9:be:e6:12:7f:
                    0d:0a:09:59:3c:6c:cb:d9:59:f1:37:f3:3e:66:1e:
                    31:70:cb:c1:99:b4:fb:b2:c5:be:23:5c:13:d6:d7:
                    dc:15:82:b3:14:e9:46:ae:c6:cb:98:58:8c:19:fe:
                    2e:b0:1e:77:31:06:82:a0:6d:44:22:3d:0a:0e:7b:
                    fc:e9:c7:53:6b:dd:85:ef:42:ca:37:2f:bc:4e:b3:
                    34:cf:07:cd:a3:0a:ca:db:9c:39:49:1d:3a:a2:f5:
                    ea:9f:f4:1d:a5:72:d6:cd:f1:35:f8:cb:25:9c:f8:
                    2b:5f:71:e0:be:97:5f:cb:95:6b:02:54:04:38:d4:
                    c5:18:36:f3:67:b6:0a:94:76:d0:c3:0c:f4:52:5e:
                    ed:00:78:d1:30:83:b7:22:ff:3d:35:58:69:6b:40:
                    fe:5f:92:1b:f0:01:63:34:f5:50:7e:cd:33:61:ce:
                    63:c8:e6:e1:6c:36:c7:3e:f4:62:d6:c2:5d:7f:02:
                    aa:89:bf:ff:ba:36:5d:b7:7f:07:24:e2:d7:a4:f8:
                    eb:c5:8e:f7:c7:e6:fd:64:01:6d:19:d8:59:d7:bd:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DC:07:A7:87:8C:76:14:A8:62:D0:F7:52:DB:D7:63:AA:6A:D1:64
            X509v3 Authority Key Identifier:
                keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:a5:2e:1e:22:ab:5f:d5:c7:3f:bc:2e:9a:4b:90:b3:96:
         db:1a:41:b6:4a:88:dd:7e:07:36:9e:c1:65:15:4b:38:90:3b:
         13:de:1b:28:ca:81:de:7b:ff:6b:22:87:84:c1:b2:ad:67:0c:
         d2:f2:7b:bd:c6:e1:ca:5d:e7:68:3e:5e:d4:f5:6f:b9:31:75:
         f5:5c:25:e2:77:4c:bd:e9:8f:97:0e:fd:ed:77:b6:0f:16:1e:
         af:d1:cf:87:9e:40:0e:d0:ae:ee:ac:08:73:67:4e:a2:cd:9a:
         13:e2:08:16:b6:66:20:bd:53:09:6a:97:e2:35:8d:bd:df:02:
         24:df:8b:29:7d:93:f8:d4:d9:23:54:5f:e8:a8:39:5d:77:d7:
         fe:96:03:76:e0:c7:48:95:55:8d:7e:7b:11:df:ed:49:3f:f8:
         cb:b5:03:d6:46:25:a5:7c:09:a4:30:22:e9:cd:61:0a:ad:7f:
         23:cd:b1:e9:52:0a:c4:ed:40:82:6b:37:fd:55:05:fc:d4:b8:
         28:eb:ae:4f:68:d5:5a:e6:c8:ed:99:c4:dc:0b:2b:69:8b:c3:
         49:82:e7:87:ef:fe:72:7f:8c:34:50:ec:82:9e:f8:19:c4:0b:
         fb:c4:51:80:c2:05:02:b0:30:d3:9c:96:62:eb:8c:b3:0e:93:
         d9:bd:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:51 2025 by rpki-client