Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File:                     jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier:          xBXVrQXMvwF4O0CkbOxRSXVkfcKOQ07q1u5cEbj++YY=
Subject key identifier:   65:FF:32:5A:F6:C0:E8:EB:A9:A2:33:4E:40:21:5B:23:56:81:2C:B0
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer:       /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial:       0196C728E86622A9DBD99E60A6B0A9368471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number:          0C47
Signing time:             Tue 13 May 2025 01:01:08 +0000
Manifest this update:     Tue 13 May 2025 01:01:08 +0000
Manifest next update:     Wed 14 May 2025 01:01:08 +0000
Files and hashes:         1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
                          2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: KJUCpoOFn3xJWb9qi2ZB4TJj9oJ1hV/qg+y+ZQa+Jas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:e8:66:22:a9:db:d9:9e:60:a6:b0:a9:36:84:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
        Validity
            Not Before: May 13 01:01:08 2025 GMT
            Not After : May 14 01:01:08 2025 GMT
        Subject: CN=65ff325af6c0e8eba9a2334e40215b2356812cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:d6:7f:89:22:77:56:70:c8:ae:3b:58:6b:
                    b2:f2:e9:b7:5f:e0:ae:e8:ae:33:cd:0c:69:dc:5f:
                    9a:b8:e6:11:20:8d:e9:6d:df:22:0f:07:fe:bc:c9:
                    07:22:ee:df:cd:8c:ae:2c:04:15:f4:02:8d:a3:40:
                    4f:6c:e3:fb:b1:0e:2a:1b:a2:dc:5c:e3:34:40:3b:
                    27:9a:96:ed:eb:aa:90:5d:dd:80:4d:f8:64:9b:c0:
                    2b:2f:70:e3:bb:e0:e3:57:c1:02:b0:9c:d6:03:1f:
                    7c:55:82:08:98:e7:a8:79:0e:2e:c8:af:1f:e2:dc:
                    fe:e1:fe:fa:b3:bc:65:2f:c6:d0:79:50:e7:90:53:
                    5d:09:67:b6:ba:18:00:22:dc:a8:0c:f3:c9:b8:1c:
                    12:81:f9:98:1c:92:e5:c0:a9:4d:31:74:31:13:1b:
                    94:86:ce:15:7f:d1:1f:44:7c:5e:89:13:07:ea:5d:
                    c3:9d:0f:51:d2:21:33:c4:d9:82:52:03:a6:4a:93:
                    84:66:f0:8b:06:73:6f:f7:29:fd:4f:30:c0:cc:c3:
                    86:54:ee:3a:26:9c:06:ad:5d:b6:d1:db:f5:12:43:
                    27:53:2f:e4:f5:e8:10:ad:91:a2:63:f9:8c:a7:3b:
                    bf:ab:7c:d9:99:3d:c3:91:6a:df:02:fc:9b:39:09:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:32:5A:F6:C0:E8:EB:A9:A2:33:4E:40:21:5B:23:56:81:2C:B0
            X509v3 Authority Key Identifier:
                keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e9:e4:14:ab:02:ea:49:7c:21:af:4e:f9:01:1a:3d:f9:df:
         0d:2a:d0:2a:50:07:bf:6d:1c:8d:5d:c1:09:e4:ba:61:f1:76:
         6c:b8:9b:9a:3a:ad:74:c3:5f:86:c1:98:ca:eb:13:42:cb:19:
         f6:27:a4:24:46:b4:be:7c:7a:9f:87:24:0a:01:d8:47:c3:4b:
         98:cb:16:41:b2:49:5c:dc:a7:60:46:67:7e:34:55:e0:8b:be:
         a5:8e:cf:83:4e:24:1a:c8:2f:3b:9f:58:43:b8:b5:69:d6:f3:
         66:32:51:4a:93:36:3d:0d:42:7d:85:24:a0:b2:9e:d8:47:8d:
         d4:20:33:18:e0:e3:23:51:10:a3:e5:91:ac:38:9f:9d:52:61:
         53:94:10:6a:82:2c:96:3a:4e:88:4b:6b:ef:d4:cc:48:f1:d5:
         74:c0:e6:6b:81:19:62:0c:46:70:ba:e3:c1:66:42:f9:19:18:
         93:8b:f4:4b:41:f1:3c:75:3d:13:df:8b:0e:5f:c5:e1:3d:c7:
         87:ef:4b:80:93:a6:2f:fd:06:3b:5d:fd:c9:ed:0d:ba:be:98:
         ee:9e:37:06:3c:83:c2:fb:99:ab:03:84:8e:69:1a:1c:13:94:
         22:aa:01:2d:0e:d7:ac:72:bd:12:3e:d7:8c:d6:e8:16:de:83:
         fb:b8:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:47:31 2025 by rpki-client