Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File:                     JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier:          RrKEoJrC38l9vYyrsW/o2DZflN/uSu1sbFIrFeJCHPQ=
Subject key identifier:   84:B3:7F:8B:96:C9:0F:EA:85:33:9D:97:89:DF:EE:AB:F6:9F:C1:40
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       0196ABE84804E8A440506ACE8FF4FC2F1DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number:          13F7
Signing time:             Wed 07 May 2025 18:00:48 +0000
Manifest this update:     Wed 07 May 2025 18:00:48 +0000
Manifest next update:     Thu 08 May 2025 18:00:48 +0000
Files and hashes:         1: CbuZAj1dPAfXmlzci4IedDRYdI4.roa (hash: lbGR/KQd69NrN+4ngJ+jL//5VrHPvFUw0sXDB1VBPiU=)
                          2: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: OVDG9Vv78Cy59TDeGAxaQaYzoIWvkmoxHF8hHqobCYM=)
                          3: ROYXGQwHkQLzalc37wqmEqdk5r8.roa (hash: 6H17V6BaUBP9V1noyPTAKFgtV/u7+FyrrmOepW3UQcI=)
                          4: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=)
                          5: aJRJmc9Tlf3JWJYKXvh0vDxc1LA.roa (hash: hgfUPkMG26dk9GrdhtkfCBFdtiBPxmoVKLstEH5RqAo=)
                          6: oCM0PQPAQTFeZjH_bur3wGsBnfY.roa (hash: zpqsOKB5HhYA51pMtIuoRoqUM3ZnFM9ulXRkOtcM4VE=)
                          7: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e8:48:04:e8:a4:40:50:6a:ce:8f:f4:fc:2f:1d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: May  7 18:00:48 2025 GMT
            Not After : May  8 18:00:48 2025 GMT
        Subject: CN=84b37f8b96c90fea85339d9789dfeeabf69fc140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:15:47:f7:23:0f:82:7d:d7:e9:68:be:a7:
                    b2:2d:4a:e6:68:20:1b:a4:38:36:d3:b5:0c:d6:ed:
                    0b:4b:cf:86:83:7c:7f:61:4b:f3:75:a4:c0:42:7c:
                    73:68:09:5b:79:89:4c:24:08:05:90:5f:27:d2:4c:
                    61:cd:03:e6:f5:47:a7:32:f8:05:f6:3e:ab:0d:e9:
                    79:2e:ea:e9:0a:3b:b8:63:ec:32:04:d1:3f:24:8f:
                    68:23:66:4d:6f:e5:df:fa:86:cd:75:24:e0:9a:dc:
                    2b:23:bd:1a:f9:63:49:4a:dd:36:8b:85:b0:c9:b4:
                    ca:98:3e:4a:8c:89:2b:bb:95:17:57:fd:60:68:52:
                    ae:10:48:30:53:e3:68:48:82:fc:e2:32:2d:91:fe:
                    b3:81:22:33:2f:a1:6b:81:cd:0d:75:59:7a:5b:83:
                    ad:c3:29:02:42:1e:37:16:a3:63:90:22:0b:d0:bb:
                    d4:00:5e:a6:bb:89:8f:ca:a8:fe:2e:d6:5d:78:b4:
                    68:3c:d3:5f:d4:01:8e:3b:46:7c:97:80:02:41:d4:
                    c8:80:58:37:c6:8a:ef:9c:9d:13:55:04:29:ce:da:
                    1f:50:2b:af:34:cf:73:7d:9f:99:07:3d:df:e0:ff:
                    94:ee:9a:91:79:d8:b7:8f:56:99:08:c2:ec:ca:1d:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:7F:8B:96:C9:0F:EA:85:33:9D:97:89:DF:EE:AB:F6:9F:C1:40
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d5:5d:38:4d:17:53:78:9c:c3:5c:c7:8b:fb:90:39:0f:d9:
         85:bd:8f:1b:39:50:0c:12:fc:98:5e:64:a9:cd:a6:81:f3:fa:
         82:c2:18:a4:5c:79:94:bb:23:ca:fb:f9:ae:ac:9f:f8:14:22:
         e4:d8:de:fe:d0:6c:41:ba:45:17:87:95:5a:2e:a0:bb:a2:65:
         d2:ad:da:c9:8c:19:90:ed:a2:dc:8e:c1:77:7d:09:46:b9:02:
         bd:1d:bf:5a:63:3f:45:d0:af:81:54:35:7f:72:95:4c:1c:29:
         e5:5e:b2:34:e9:97:98:96:a0:e4:c7:e1:d1:2a:9b:7b:84:d0:
         d6:d0:32:05:90:9c:36:1e:4b:18:c4:af:0e:a1:96:10:fd:e7:
         e9:9c:ad:f5:1f:b3:73:aa:3b:4d:69:dc:68:af:7c:98:f8:f4:
         82:14:00:22:82:cb:f4:65:4f:c0:cd:9e:eb:54:13:3b:29:f8:
         a3:21:3e:ea:92:db:d2:0c:76:ac:17:7f:57:5e:62:cb:36:33:
         98:c7:b4:a1:dd:33:ae:15:fe:e8:7f:00:1c:8b:ce:23:ae:0e:
         48:c8:7f:63:66:e7:91:97:6b:3c:79:07:04:f6:65:52:21:26:
         0b:ee:ba:bb:b2:64:6e:88:e5:3c:60:6a:85:23:0c:c5:fe:6a:
         ab:7e:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:03:00 2025 by rpki-client