Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File:                     JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier:          5X7DJOG92XR+wMCMUWI531ZiRd57L7nyueHYif9kR+M=
Subject key identifier:   C3:33:79:65:C5:7E:DE:A1:D3:8F:F3:C0:9C:0E:B1:E1:D7:CC:6D:74
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer:       /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial:       01969E9A3B8E971E467777A74C8B72957723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number:          0FC3
Signing time:             Mon 05 May 2025 04:00:29 +0000
Manifest this update:     Mon 05 May 2025 04:00:29 +0000
Manifest next update:     Tue 06 May 2025 04:00:29 +0000
Files and hashes:         1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=)
                          2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: aua9G7Lk2z7uVA1ieN9cbUEFWihvCEcmspmVWc3Qv7I=)
                          3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=)
                          4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:3b:8e:97:1e:46:77:77:a7:4c:8b:72:95:77:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
        Validity
            Not Before: May  5 04:00:29 2025 GMT
            Not After : May  6 04:00:29 2025 GMT
        Subject: CN=c3337965c57edea1d38ff3c09c0eb1e1d7cc6d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:73:27:cd:08:9a:68:7b:3b:07:92:a9:3e:
                    a8:82:d3:62:0d:81:09:b1:c6:f2:cc:ed:6e:1f:bd:
                    65:ce:8a:99:c7:ef:b9:68:27:1e:0f:24:92:1d:ca:
                    7d:ec:b3:52:1e:ec:bf:e0:db:de:20:2b:de:23:d3:
                    b8:1e:80:9a:68:e8:40:b1:04:65:95:92:39:62:18:
                    c6:5e:1b:6c:0a:5e:f7:64:c3:57:85:0b:a3:f3:dc:
                    05:1f:28:8e:88:ad:d6:d2:08:c8:fd:a4:19:e6:ca:
                    ce:4d:10:92:aa:43:92:e4:32:37:cf:f9:ba:32:4b:
                    4b:33:5a:1f:e3:d6:e9:a6:9d:17:b3:31:66:9b:83:
                    78:cc:66:3c:95:dd:8a:e4:0d:04:37:77:c8:94:8c:
                    1f:61:4c:07:0a:e6:1f:46:f5:5b:50:8c:57:c5:4a:
                    95:5a:ab:64:63:1a:be:3f:38:3d:ef:22:3b:8f:ca:
                    9e:f9:c6:89:41:13:48:63:44:85:96:4a:28:a1:87:
                    8f:4a:7f:36:51:25:c9:4a:8b:58:d4:28:2e:9d:a8:
                    73:a2:82:60:a8:89:a4:af:17:f5:6b:a4:78:8a:33:
                    62:8c:35:c8:d5:61:c2:47:3f:3a:e8:42:a5:b8:38:
                    a2:36:8f:5b:fc:af:36:bc:28:70:59:16:04:c1:54:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:33:79:65:C5:7E:DE:A1:D3:8F:F3:C0:9C:0E:B1:E1:D7:CC:6D:74
            X509v3 Authority Key Identifier:
                keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:16:6f:11:08:a9:b2:ad:1d:25:13:07:a2:a7:ee:b5:3b:
         d6:09:46:21:39:45:eb:de:67:b6:62:d5:09:2e:12:5d:a0:f2:
         b5:bf:c5:0e:54:10:0e:a9:4f:ea:a5:c2:af:54:3a:b6:21:79:
         19:f9:76:64:53:50:e5:62:b9:d0:b7:9a:86:3a:61:5c:d2:e7:
         b1:69:ae:a9:cc:c2:2a:90:11:22:ee:fd:e2:92:35:49:28:4e:
         be:65:9f:87:5e:34:d9:0b:bf:15:b2:3e:73:62:79:55:a6:72:
         c0:5a:b2:45:57:4b:4f:c4:58:36:ad:00:99:0f:93:3c:61:bd:
         1c:17:e1:da:5a:49:33:f4:ac:49:62:b7:29:79:71:29:f3:56:
         43:89:f6:67:1c:14:c5:ec:8f:84:f4:8f:c7:16:fb:9a:df:10:
         42:77:2f:aa:fb:6b:e8:9c:09:76:45:e8:62:2f:bb:50:fa:7f:
         88:9b:73:19:80:f8:ca:ab:54:dc:60:10:d8:0d:22:7c:63:6f:
         dd:b6:8e:65:81:86:dd:34:4d:80:fd:aa:1f:71:83:37:26:3a:
         41:fb:df:29:b8:bd:d4:8f:d2:ab:21:e4:37:ce:e7:05:dc:fe:
         89:ed:2c:6c:6e:29:bf:ce:96:4b:64:7e:ea:07:87:ef:cc:a0:
         4c:2e:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:09:04 2025 by rpki-client