Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File:                     jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier:          PkGzyNwrzBPiqzo5/SSdSeXafYMIuLOEJ7/di4oMCdY=
Subject key identifier:   B7:81:4D:92:0B:8C:71:2A:0C:59:65:46:B2:A1:CC:ED:AE:2A:5F:85
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer:       /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial:       0196C12608188D17C0E0909042A48CDFB840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 21:00:17 +0000
Manifest this update:     Sun 11 May 2025 21:00:17 +0000
Manifest next update:     Mon 12 May 2025 21:00:17 +0000
Files and hashes:         1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=)
                          2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: aaQXmQHvw4SBDLEWH4W2mLXd7gYkychVWPNJXQNalRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:08:18:8d:17:c0:e0:90:90:42:a4:8c:df:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
        Validity
            Not Before: May 11 21:00:17 2025 GMT
            Not After : May 12 21:00:17 2025 GMT
        Subject: CN=b7814d920b8c712a0c596546b2a1ccedae2a5f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:1f:7d:33:fb:ce:f2:a5:9e:93:e2:24:36:
                    c8:0c:00:ca:1f:b3:f1:42:52:30:bb:d2:4e:8a:c9:
                    27:e7:7d:b8:87:61:49:d5:eb:71:e3:0c:1a:38:36:
                    5f:32:08:da:6d:6d:ac:37:b7:a5:bb:a6:37:78:ee:
                    8f:4b:57:0e:d3:2c:f2:2a:a8:6b:c3:c9:ee:c1:f3:
                    01:d7:81:4b:b1:70:bb:15:1f:32:a3:41:a6:a4:57:
                    1f:9b:f9:66:79:84:e8:ec:6f:74:60:84:d5:27:d4:
                    82:4a:1e:38:0e:14:9c:54:d5:c6:3b:66:b8:4d:c9:
                    d7:ae:f6:1c:76:66:47:c9:52:00:71:95:76:19:75:
                    36:27:6d:a8:b4:c4:a5:11:45:1e:a1:59:6c:84:c7:
                    aa:bd:58:24:60:8d:44:44:fa:7c:d4:40:9d:05:eb:
                    da:20:3e:6b:76:58:c7:ab:89:a4:16:e9:bf:22:75:
                    41:01:1c:14:50:a1:53:1a:05:96:00:0b:70:63:f6:
                    12:f0:57:d0:00:d1:cd:bf:4c:de:11:6f:ab:12:f0:
                    e0:08:98:0b:e3:2e:d6:a7:b4:69:31:ec:ef:3e:20:
                    cd:27:0a:e3:b6:7c:6d:8a:33:71:98:32:f9:47:9c:
                    53:bf:a4:a9:e7:80:28:1d:7e:0a:81:91:1d:c9:5f:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:4D:92:0B:8C:71:2A:0C:59:65:46:B2:A1:CC:ED:AE:2A:5F:85
            X509v3 Authority Key Identifier:
                keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:34:33:90:11:0a:71:b8:d6:5d:46:8f:f6:a2:cf:e0:2a:5f:
         82:6a:f3:e7:ee:ee:74:8a:65:8a:da:25:86:25:2e:ef:aa:ea:
         56:02:18:0c:21:44:ca:c1:4b:c6:39:20:05:dc:b7:31:d6:47:
         8b:65:d9:0a:7e:bb:44:18:25:97:3c:3f:e6:64:d6:d3:38:db:
         9f:67:f3:7e:d2:ef:92:53:5d:ed:8a:d4:2a:40:52:92:16:06:
         b7:86:6c:aa:f4:98:d5:89:68:5a:70:31:7c:77:e7:49:08:2b:
         62:ef:fd:2c:96:28:51:22:1a:06:80:a3:26:a0:d0:81:3a:b8:
         a5:f3:ca:47:cf:f3:07:74:4d:5d:2c:7c:d8:fb:b7:f1:34:bf:
         9b:4e:eb:1a:fd:42:b6:19:ce:36:ed:72:43:9b:b1:06:2c:0f:
         95:58:6c:7d:c0:5c:70:5e:63:c0:26:c0:ef:75:ed:42:67:e0:
         49:b7:a3:e4:a6:01:d6:28:b8:ea:5a:f8:85:85:2f:cc:2d:ae:
         2d:4c:b7:ed:0f:1a:e9:dd:04:da:4c:48:40:15:57:dc:f8:6a:
         1a:ff:53:c3:64:23:03:f3:c3:8d:53:6b:6c:68:a0:37:9b:c6:
         20:37:1e:46:7f:90:a1:f5:78:5d:d5:57:2a:91:7c:ac:f6:3e:
         46:12:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:41:23 2025 by rpki-client