Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
File:                     jvk0jidxFMzrutie_olfUKEqgYc.mft (raw, json)
Hash identifier:          j7zKOeT44A+7or9gZquw06qsSLA8ORCVDiJfyqCcA/g=
Subject key identifier:   73:71:8A:1B:97:E1:43:98:08:B1:8A:D2:B1:BD:C7:9D:E1:5B:90:D6
Authority key identifier: 8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
Certificate issuer:       /CN=8ef9348e277114ccebbad89efe895f50a12a8187
Certificate serial:       0196C4270950492C82C488CD1FA00C549F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
Manifest number:          0C93
Signing time:             Mon 12 May 2025 11:00:14 +0000
Manifest this update:     Mon 12 May 2025 11:00:14 +0000
Manifest next update:     Tue 13 May 2025 11:00:14 +0000
Files and hashes:         1: jvk0jidxFMzrutie_olfUKEqgYc.crl (hash: yahpYTLOZEWwg6T07iDER+bPNCp+2VNQ6p9W/3qv4kI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:09:50:49:2c:82:c4:88:cd:1f:a0:0c:54:9f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef9348e277114ccebbad89efe895f50a12a8187
        Validity
            Not Before: May 12 11:00:14 2025 GMT
            Not After : May 13 11:00:14 2025 GMT
        Subject: CN=73718a1b97e1439808b18ad2b1bdc79de15b90d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:0d:a5:01:25:e4:98:58:5a:45:64:58:5f:
                    d6:e2:10:39:3d:69:66:3d:6b:cc:2a:3b:77:1c:b0:
                    6a:69:86:50:9f:4c:e6:55:36:90:84:31:ef:98:95:
                    3d:70:16:44:66:56:85:36:9b:35:9f:c8:71:b1:0f:
                    f5:a2:87:9a:67:fd:9e:e8:52:44:5a:89:5d:b3:40:
                    d1:b2:38:58:5d:e0:19:49:07:a8:2a:78:f3:34:c4:
                    7b:77:1b:6e:d4:57:5c:34:ba:25:f4:f6:80:c5:e8:
                    d2:27:f8:25:cf:3a:bb:69:0c:fd:28:59:b2:da:f0:
                    61:36:ce:d4:b5:a5:c2:53:e8:95:c4:36:91:54:3f:
                    05:86:b2:cb:47:b9:c0:3c:ac:47:a8:39:96:b7:b8:
                    95:19:61:13:71:76:10:d1:7c:cf:41:d8:c1:5e:a0:
                    8a:50:37:4a:0a:1d:fc:04:b9:ec:ca:b9:f5:41:a2:
                    d1:77:7f:48:72:0f:38:36:67:ee:34:8c:16:ed:aa:
                    90:04:fd:ce:eb:e6:90:ec:1a:d8:d9:b3:2f:24:b7:
                    03:de:04:ba:c0:fe:ca:87:c8:d9:21:da:75:fb:1f:
                    8e:91:dc:20:b5:06:41:21:6d:55:99:c7:93:43:61:
                    90:73:3f:00:4e:3a:3b:aa:62:66:fe:fe:d5:f7:c0:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:71:8A:1B:97:E1:43:98:08:B1:8A:D2:B1:BD:C7:9D:E1:5B:90:D6
            X509v3 Authority Key Identifier:
                keyid:8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:40:cb:88:d5:00:8e:1d:ea:cd:09:1e:01:21:b2:25:ac:
         7b:71:02:e0:d9:71:44:39:d4:b9:b5:f1:0f:66:e1:c0:0d:3e:
         eb:df:cc:c4:47:5d:6a:fa:2b:3d:2c:bf:4c:34:70:53:c0:dc:
         06:78:ee:cd:55:7e:bc:b3:92:bd:fa:84:40:14:cd:3d:03:25:
         b0:60:4d:93:59:2b:ad:fe:e4:97:88:39:67:8f:2d:00:3e:fe:
         26:5c:b0:96:5e:67:09:36:95:22:65:1d:bc:84:4a:b7:db:69:
         3c:2c:13:4a:ca:50:56:fa:70:1f:24:ee:17:ab:5c:8e:86:e4:
         20:2d:69:f6:00:16:ca:93:74:a5:fa:cd:f2:30:33:cc:d5:3e:
         c9:5f:3d:c1:ac:89:87:f3:b3:2a:01:9d:c4:03:4d:e8:ff:67:
         c4:da:8b:49:9b:bc:58:10:a8:60:a6:98:b2:2b:c1:da:5d:9e:
         b6:dd:57:d2:92:c3:ab:22:49:7f:a2:74:c3:10:b5:76:ef:90:
         f6:38:16:f7:68:ea:ca:70:33:de:ba:9a:ff:aa:9b:c0:26:d8:
         d1:7c:12:a4:9e:47:c8:c6:96:ff:8c:4e:96:f5:65:83:bc:aa:
         af:56:91:4b:21:0e:ce:3a:0b:55:f6:14:55:d9:5c:36:9c:84:
         d6:8a:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:15:32 2025 by rpki-client