Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File:                     JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier:          bvxca2N5cmVJQyibiJeN4j2rU5QPwT9Ne3laeAaWC4c=
Subject key identifier:   EB:75:44:2A:9E:19:F8:D0:F8:34:24:41:28:FC:DE:FA:DD:35:7A:49
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer:       /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial:       0196C20244D58F7D5E48F1C6DEADECE7E554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number:          1534
Signing time:             Mon 12 May 2025 01:00:50 +0000
Manifest this update:     Mon 12 May 2025 01:00:50 +0000
Manifest next update:     Tue 13 May 2025 01:00:50 +0000
Files and hashes:         1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: 8YToh9X8eYnjP48FITSG6TjcoGw/1kxnMdR2fLTcHNc=)
                          2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:44:d5:8f:7d:5e:48:f1:c6:de:ad:ec:e7:e5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
        Validity
            Not Before: May 12 01:00:50 2025 GMT
            Not After : May 13 01:00:50 2025 GMT
        Subject: CN=eb75442a9e19f8d0f834244128fcdefadd357a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:b2:ea:ab:1a:0d:de:fa:a8:ef:84:8d:db:
                    1b:d2:f9:e5:e8:29:64:58:3c:fc:66:0d:05:fb:88:
                    3d:01:1b:d3:9a:96:65:49:42:80:27:26:4a:bd:c6:
                    a0:93:f3:21:a9:d7:d5:e1:30:0e:18:49:3d:a5:5a:
                    87:2f:76:b5:86:f5:3e:de:b0:c9:6c:ee:64:d8:49:
                    c5:b8:39:d9:14:05:d3:1a:14:4c:6e:d9:db:af:17:
                    22:9a:d6:ae:7f:5b:01:f4:a6:29:6b:29:dd:70:24:
                    3c:82:d6:77:b9:d1:43:4b:41:a0:bd:f7:e2:6f:5e:
                    30:82:b4:7a:63:7d:71:09:d1:33:1c:2e:ed:cb:3f:
                    d9:05:10:04:01:7d:e9:c5:71:55:f5:80:b9:6b:2b:
                    0f:8c:30:db:11:1d:f9:16:36:0c:29:da:15:75:c7:
                    ef:e9:11:aa:e0:fe:fe:c6:2c:c6:55:75:1d:1d:a5:
                    be:a7:de:61:98:94:64:c4:bf:7f:cd:e6:ae:3a:8a:
                    00:4d:d6:54:cb:6d:15:e3:07:ac:dc:4e:12:aa:83:
                    72:e2:38:fe:08:b5:8a:a9:42:c1:73:b5:77:17:38:
                    14:78:1f:99:64:22:c2:50:8e:b9:da:90:31:66:4f:
                    52:3b:e4:0a:e5:37:69:a0:8e:d0:b3:a4:df:c1:f4:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:44:2A:9E:19:F8:D0:F8:34:24:41:28:FC:DE:FA:DD:35:7A:49
            X509v3 Authority Key Identifier:
                keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b3:55:87:47:74:3e:aa:3d:fa:46:71:7c:cd:6b:3f:63:77:
         d6:b1:f0:69:45:b1:c5:76:92:94:98:ed:a6:be:4a:75:4b:53:
         b3:9c:ac:bd:8e:86:43:c6:4e:de:a9:60:b4:42:5e:1a:b5:81:
         d5:ae:76:38:30:2b:50:e1:8a:78:c9:20:a6:5d:15:ad:c8:d7:
         78:41:fa:ef:ce:55:da:bb:66:25:f9:1b:4c:d7:4b:c9:83:32:
         e0:9e:d5:e1:c0:6a:cb:5d:eb:ae:9b:87:48:13:74:94:73:82:
         0e:dd:2c:39:8d:51:e4:04:3c:af:8c:da:1c:e7:99:6d:5d:db:
         d5:cb:8f:d2:16:c6:36:6e:45:b9:6b:26:11:58:42:c3:85:d7:
         51:95:dc:65:49:69:c2:18:41:e9:cc:75:4b:d7:1e:19:94:41:
         f7:c7:2d:d3:39:e6:a9:00:91:42:ec:b3:62:e1:6a:20:f9:94:
         b2:02:c7:13:80:0a:64:d9:38:de:44:7c:9b:69:15:b9:f2:38:
         a5:e3:4c:67:d8:d8:30:9c:ff:ea:12:ff:9a:5c:76:2c:ce:dd:
         38:85:a5:d5:26:79:e4:4e:b3:d6:cd:cd:f0:c3:d6:bb:5a:63:
         4e:da:22:ba:f5:29:77:03:7f:f4:64:06:00:af:2f:2c:c7:7d:
         31:bf:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:23:25 2025 by rpki-client