Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          mE+pXLSmr33zcuo3c5aSbfeQWTyYA2e1kIgOPIRjPoA=
Subject key identifier:   C0:B0:DA:91:43:E3:90:61:C1:A7:BB:4D:93:DD:1B:F1:A6:0B:8F:EE
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       0197B6A0A58D4D39980F05FA049A00E730A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          0298
Signing time:             Sat 28 Jun 2025 13:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:10 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: CTRgE9hW1Qm+YewJr5Zr5OTXB5Hl9WmKaesVde8w8OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:a5:8d:4d:39:98:0f:05:fa:04:9a:00:e7:30:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Jun 28 13:01:10 2025 GMT
            Not After : Jun 29 13:01:10 2025 GMT
        Subject: CN=c0b0da9143e39061c1a7bb4d93dd1bf1a60b8fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:4b:4c:7c:73:59:f2:77:13:1e:2a:52:91:
                    0a:95:8c:0d:f4:f5:70:f6:43:48:5f:ff:77:31:60:
                    03:c1:30:b6:06:63:f5:7d:ac:ea:25:96:51:c1:a7:
                    c9:8d:cd:d3:d8:f6:7f:bd:ea:d9:a6:e0:e0:99:98:
                    f4:32:fb:3a:83:ae:c3:99:fb:4f:ed:e1:ae:26:f8:
                    35:fe:4a:90:73:f5:17:81:52:b9:24:8a:04:5c:00:
                    b7:b9:b2:9f:04:67:fd:4e:b2:88:9d:bd:c1:12:ec:
                    c1:5c:13:c2:1d:bd:4e:23:b0:f3:2a:64:92:00:28:
                    47:ef:84:1e:c1:36:e7:10:dc:da:b5:9a:a7:4a:03:
                    31:8f:89:a1:81:08:24:7f:72:f4:86:b4:82:1b:5d:
                    8a:a0:6d:f7:d6:ea:08:48:9b:8b:3a:6c:05:ef:9f:
                    46:16:7c:00:1f:37:38:0f:af:06:1c:85:4a:51:80:
                    0a:7a:f4:64:be:e9:3c:06:12:1d:42:85:6e:30:90:
                    1a:73:6d:9e:fe:5d:75:aa:80:86:fb:af:a3:d1:ce:
                    1b:00:06:2e:fd:d0:27:e0:7f:40:0b:89:9f:9a:a4:
                    c3:0f:8c:e9:2e:0e:37:fa:f8:cc:73:51:a1:9f:c3:
                    47:40:ec:ad:85:7d:7a:d1:05:15:e5:86:7a:38:04:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:DA:91:43:E3:90:61:C1:A7:BB:4D:93:DD:1B:F1:A6:0B:8F:EE
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:66:25:41:62:b2:48:fa:79:66:1d:7a:30:f7:90:94:ff:a1:
         bc:cd:36:b4:c2:53:ef:e6:cc:35:07:df:ea:a3:ba:b5:e5:43:
         d7:9f:e8:d1:9a:c3:c0:e2:d6:06:77:01:92:b5:eb:d9:aa:72:
         ee:12:bc:71:7a:fe:af:78:14:fc:19:1d:1b:82:dd:b3:3c:75:
         65:a7:00:b2:2b:13:17:70:90:98:be:4e:e4:16:d6:7a:61:6e:
         6f:f0:b1:40:68:85:22:1c:9a:95:44:7e:28:82:fb:66:4b:6c:
         6c:00:65:4f:b7:08:bf:00:4f:e5:d2:d9:a7:17:dd:f4:09:5e:
         a4:b8:b2:35:3d:1c:d0:5b:dc:d0:81:51:06:99:6d:0b:d9:24:
         60:33:50:9e:70:88:a6:13:09:0a:aa:1f:65:ad:12:01:0c:7e:
         c4:e2:ea:e6:04:86:b9:44:4a:98:a8:3c:bb:90:2c:0b:e7:99:
         cb:1c:bf:c7:53:91:28:a8:16:10:70:77:0d:26:64:b3:48:c3:
         bb:61:c7:bb:8c:12:2a:4e:b4:07:2c:a2:05:4a:c2:85:7a:3c:
         c2:c7:25:a6:a2:bb:65:94:9b:78:71:6f:0d:57:09:51:4f:cf:
         d9:d2:3e:ac:9e:2c:42:47:21:4c:78:f0:fe:d8:75:8e:a7:c9:
         0a:87:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:53 2025 by rpki-client