Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
File:                     jswinlaZEFgoVkt4UJ87cvMJCiE.mft (raw, json)
Hash identifier:          pWoKfhlYM3VPToVTazq6qOMmfTG9Lqy4nvQeFw/06Lo=
Subject key identifier:   C4:53:AE:AA:5A:23:A4:FD:30:10:50:A6:7E:47:41:64:8E:22:5A:DD
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       0196C193F9E87C74F2673C6AC5DDECEADA29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
Manifest number:          153E
Signing time:             Sun 11 May 2025 23:00:22 +0000
Manifest this update:     Sun 11 May 2025 23:00:22 +0000
Manifest next update:     Mon 12 May 2025 23:00:22 +0000
Files and hashes:         1: FURjaUQ0FEbchTkhcxeSRtrU1s4.roa (hash: jQVRJAAAyS8YQn84udlC/TaV1qdxFSfvYs7sBZO1tP0=)
                          2: K5vbAl_H3B87djRm_AqpMSGgebs.roa (hash: Fe41AX22b8kKGMiquA7Aakj+0l+wq87HyZLc6RPvrEg=)
                          3: jswinlaZEFgoVkt4UJ87cvMJCiE.crl (hash: j3A4Meb2PzWT32yYIEVNHDjA24bH5c9cNdW2aF2mB8k=)
                          4: t8cq4b1nAfG-fC4vwdKSmjzZztc.roa (hash: URrKscem9x14TGL4Viw7da7kLuo3IZFxvYHMeZaxOEs=)
                          5: xqlVZBB9sO3vWj8zwFa7d_DV0K8.roa (hash: WJGw9tR1uFvJvx7voYo2acpZQ7m9lC9bCrk6L8c57Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:93:f9:e8:7c:74:f2:67:3c:6a:c5:dd:ec:ea:da:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: May 11 23:00:22 2025 GMT
            Not After : May 12 23:00:22 2025 GMT
        Subject: CN=c453aeaa5a23a4fd301050a67e4741648e225add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:ff:23:77:bc:ef:ce:93:05:38:62:64:ce:
                    07:3a:4e:98:65:ad:1f:30:fd:f2:6c:5a:da:e3:26:
                    bf:a8:12:70:de:49:26:1b:41:fc:a2:1d:67:58:78:
                    e3:9e:44:a3:69:bb:21:b5:55:d6:3d:81:31:20:2f:
                    2f:87:8e:c6:e5:81:a9:bd:5e:ed:bc:17:71:87:35:
                    fa:c6:27:f0:e0:61:6c:92:06:9e:98:e2:c7:3f:37:
                    43:02:87:ed:96:17:75:9a:40:15:ec:9e:21:59:36:
                    d0:46:5f:b9:11:ed:c4:03:0e:91:34:35:8d:6b:bd:
                    83:42:91:a9:58:ff:b7:40:de:47:fd:b8:53:c6:7b:
                    f4:a8:92:ca:a1:59:76:6a:bf:1f:f8:f2:33:c0:d6:
                    97:9a:a3:26:97:10:40:62:91:3c:ad:84:0c:d8:7d:
                    8a:8e:89:6f:e3:bc:08:5a:89:0e:dd:09:4f:28:14:
                    77:6f:f6:bf:27:28:21:34:1e:16:e3:46:03:dc:b7:
                    06:b2:49:9e:46:41:ae:2a:ab:7c:27:20:c5:8f:6b:
                    36:43:e2:69:c4:11:09:5a:05:99:4d:27:37:1a:96:
                    74:e1:79:8e:6f:75:f0:38:6e:f8:1a:5c:8b:1b:6f:
                    24:15:90:fc:ba:d4:db:bc:d9:9c:8c:ee:1a:c7:62:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:AE:AA:5A:23:A4:FD:30:10:50:A6:7E:47:41:64:8E:22:5A:DD
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:2a:e5:87:77:da:e2:90:f4:f1:c9:02:16:1c:fa:b9:ed:05:
         04:0b:03:5c:e5:79:0a:23:8e:89:c4:bf:7d:df:e8:a2:b5:3b:
         6c:6f:aa:47:21:09:5d:c7:fe:62:c5:16:1c:d9:cb:30:b3:70:
         9f:26:35:1e:3b:8f:22:f4:95:b0:a6:5b:4c:79:3a:6a:cb:1b:
         fa:a1:b7:d1:58:5c:38:26:97:07:f3:f6:79:a2:cd:03:66:64:
         76:70:43:e3:d9:0f:b9:13:6c:38:ea:8e:55:88:04:0d:4a:e2:
         3b:04:d1:05:4a:54:e7:9f:e8:6d:8f:34:a0:2b:ae:aa:72:c4:
         02:99:5f:e8:4a:b9:1d:aa:c7:35:33:eb:ff:c8:99:2f:09:cf:
         a9:af:de:59:c1:85:7e:1f:96:a8:02:8a:8b:f1:a2:0f:1a:83:
         90:32:bd:b7:c6:f2:5a:45:f4:05:c7:78:ef:73:63:ae:6c:af:
         b6:76:ce:ad:29:03:0c:2c:b8:9c:7d:ac:61:7d:fc:2f:43:2a:
         54:b6:7c:e6:b8:97:bf:0d:47:47:86:55:5d:3f:a6:2b:7b:a2:
         b9:25:c3:cb:82:89:e0:36:df:46:42:df:d0:e3:62:bf:53:d7:
         d1:d7:f2:b1:11:f2:c9:e7:31:80:d1:65:6c:ed:c3:d5:91:06:
         4e:b7:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:28:00 2025 by rpki-client