Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          2Uvc4AXDsvcNE40JPyrP9cFxZR6WnRQ+4sBkJdIVnic=
Subject key identifier:   1F:17:2B:CF:0C:2C:E1:55:E9:4C:36:A0:47:96:A2:E3:D9:DA:6A:BA
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       0196C5A7F3B1346813D14C11C1D3CBBE804A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          153C
Signing time:             Mon 12 May 2025 18:00:40 +0000
Manifest this update:     Mon 12 May 2025 18:00:40 +0000
Manifest next update:     Tue 13 May 2025 18:00:40 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          3: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          4: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: XvgQTP4Iy3N22pnuTacdiq/dRdbBhiwNXhnjlmmUj2I=)
                          5: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          6: myo0lOXlik6455mDWNn0s-P-G5c.roa (hash: GWM9iq3advWBN0WarVLZ14po4AhHo2qPitRczQuVb+0=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:f3:b1:34:68:13:d1:4c:11:c1:d3:cb:be:80:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: May 12 18:00:40 2025 GMT
            Not After : May 13 18:00:40 2025 GMT
        Subject: CN=1f172bcf0c2ce155e94c36a04796a2e3d9da6aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:d0:79:1a:93:6c:ad:02:38:b1:27:5f:8d:
                    0e:5d:12:19:1f:81:14:37:ec:d6:74:41:09:ba:f3:
                    2c:04:0c:78:9e:31:39:2d:13:4b:87:0c:3e:43:33:
                    cd:72:3f:57:2a:dd:e5:3a:6a:4b:f9:74:cc:3a:96:
                    d4:21:82:22:95:fd:1d:c4:b6:61:06:2e:ae:01:57:
                    fc:38:17:1e:20:6d:05:7d:04:dd:38:4c:61:14:c0:
                    d7:c1:d1:9a:60:b7:5c:00:f8:20:46:65:b9:ce:13:
                    4f:ff:b6:25:0e:75:49:50:66:a3:e8:e4:73:8b:32:
                    39:00:83:c2:a5:2e:8c:4a:64:9c:72:12:ce:c7:1b:
                    ee:53:26:bf:9b:a7:ec:64:29:ad:e0:76:44:b0:89:
                    fa:5e:3e:b1:a1:e7:14:3c:15:2f:3a:ae:bb:5b:9b:
                    37:e8:8b:9d:4d:04:0f:92:cc:bb:61:df:1c:fd:16:
                    8a:9f:cd:d4:1b:bc:d1:b7:c8:24:5e:75:db:b2:7b:
                    ce:79:72:cc:2b:b2:d4:8f:89:2a:af:2c:f1:eb:da:
                    fe:fb:ec:b8:68:c5:eb:38:52:8f:d8:90:c9:cf:47:
                    98:66:53:71:c7:cc:04:de:69:ba:79:66:6a:95:8a:
                    aa:65:96:88:55:92:65:8d:ba:3d:68:84:e8:f2:ef:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:17:2B:CF:0C:2C:E1:55:E9:4C:36:A0:47:96:A2:E3:D9:DA:6A:BA
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:2c:6e:5b:57:e6:e6:3f:85:04:29:f9:d4:07:eb:e9:95:
         84:1b:bc:50:0e:c8:91:cc:ab:ab:d1:e1:08:6c:af:37:ca:12:
         75:4c:f6:a2:3c:87:d1:ba:de:0d:72:ff:31:36:b8:a5:aa:1d:
         c8:1e:e6:ac:a7:8c:c6:28:c0:7c:0b:c5:7e:81:48:b9:d2:56:
         ff:ff:18:85:54:b2:cb:0e:17:45:42:01:65:b4:27:8d:21:b0:
         df:9a:1d:94:a1:00:f0:82:5e:2c:d6:d5:85:02:a3:63:f7:69:
         cc:71:08:58:73:81:64:9a:d5:a9:5c:62:c5:62:e7:f4:bb:7c:
         9f:c8:08:44:a3:5d:40:39:0e:24:29:a7:99:c3:52:98:b3:a4:
         77:da:bb:0e:d2:21:d3:8f:41:99:cd:81:ad:c8:e6:d3:0b:be:
         d2:92:fd:f9:fa:3b:75:56:53:70:58:e7:85:35:58:b4:94:02:
         07:e4:eb:81:11:70:cb:80:ac:ca:a3:bf:67:51:6a:e6:87:db:
         98:fa:e5:f1:d4:48:c2:9d:eb:3d:cc:c8:fc:85:a2:f4:5e:18:
         96:80:23:b8:20:49:47:8c:dd:94:12:34:f4:e9:f1:1b:72:5f:
         65:ea:30:48:2d:c5:47:f4:52:21:87:3a:c8:30:5d:ff:26:86:
         e7:8e:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:00:05 2025 by rpki-client