Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          owgffSd/RxvU7fEw1HAeBJfpWt2kokcvpE1DI/OgNVk=
Subject key identifier:   2D:89:96:A2:C9:32:8B:51:F8:3E:8C:BA:26:97:D3:A0:44:CC:80:87
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       019645FB33299706484BA4D9D845A0D30C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0508
Signing time:             Thu 17 Apr 2025 23:00:12 +0000
Manifest this update:     Thu 17 Apr 2025 23:00:12 +0000
Manifest next update:     Fri 18 Apr 2025 23:00:12 +0000
Files and hashes:         1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: GZ3EbbLe6eNlkfi9Uz/NYu33y3+wQpw5oLV8zH0gj1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:fb:33:29:97:06:48:4b:a4:d9:d8:45:a0:d3:0c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Apr 17 23:00:12 2025 GMT
            Not After : Apr 18 23:00:12 2025 GMT
        Subject: CN=2d8996a2c9328b51f83e8cba2697d3a044cc8087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:e0:54:b4:53:c5:07:b5:b3:f4:a4:5f:15:
                    09:62:32:b2:b0:33:fd:c6:43:21:9c:e3:6a:6f:c0:
                    e1:a4:d6:41:df:a8:6b:50:16:df:30:e3:a6:21:3d:
                    44:4b:4c:e4:f8:8a:16:68:dd:60:64:31:39:98:02:
                    cd:b3:df:f5:f8:c4:1f:3e:80:49:51:09:d9:ed:f0:
                    34:96:3b:5b:63:1f:1d:ca:96:6f:28:82:1a:ea:dc:
                    fa:f6:3b:8d:30:4a:09:6f:46:6e:1a:5d:2b:71:82:
                    c7:cb:f6:a7:06:ac:05:94:e9:ad:9e:30:80:a4:b9:
                    c0:02:38:e8:0a:96:0f:01:17:b5:9b:f0:95:b6:80:
                    29:ac:fe:61:de:64:ca:b0:42:e0:a2:88:9b:dd:be:
                    12:0b:21:53:17:c1:11:ba:ac:50:e4:b1:cb:7b:51:
                    c0:67:20:d7:1a:4b:7a:0c:33:86:a3:a9:9b:79:23:
                    5a:98:d8:ba:d9:3c:09:6e:d2:2d:3d:3f:e6:6e:cc:
                    69:51:ad:fe:0e:0d:bd:09:91:75:27:79:8d:e7:a9:
                    e9:96:f5:98:65:c9:68:70:cb:54:86:3e:8a:d0:2f:
                    b3:e2:ce:90:18:0c:cf:79:2a:07:84:ef:18:25:b7:
                    08:f4:44:12:01:3c:bf:12:5a:e0:33:1b:ca:05:8c:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:89:96:A2:C9:32:8B:51:F8:3E:8C:BA:26:97:D3:A0:44:CC:80:87
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:58:96:49:03:b8:3b:a2:8d:13:9f:e8:99:94:22:16:f0:fd:
         5a:f8:fc:e6:14:c4:5d:00:e5:fc:d0:14:8c:f1:47:02:83:17:
         12:25:13:56:88:b5:df:67:ec:1d:49:4e:95:3d:1e:a8:6f:fd:
         78:f7:b9:2f:6e:21:41:2c:d5:96:52:9f:fd:db:37:5b:7c:2c:
         ab:df:d6:9d:45:d5:38:71:d3:7e:4e:2d:d6:69:21:e0:67:eb:
         6d:98:17:c7:20:5e:99:6e:dc:e0:53:3d:3d:2f:64:49:4d:5f:
         1d:3b:41:bd:a7:2a:6e:6e:f3:b1:aa:2a:d4:b2:e7:55:19:54:
         df:eb:f8:f8:30:23:c0:94:e7:68:60:e4:59:f3:da:38:86:8f:
         f7:8d:ea:66:d7:a0:9f:33:7f:c1:73:74:0d:b7:62:04:38:cf:
         1b:85:96:65:74:0e:0f:8b:b3:66:dc:c2:1f:d2:2d:52:70:c3:
         98:b3:3d:89:6c:9b:69:da:ac:60:96:60:3e:c0:ff:bb:1e:11:
         40:1a:45:d4:21:f9:2a:f4:2c:b7:a0:56:84:0b:96:3b:9b:6f:
         84:9c:b1:67:d6:83:c5:37:ab:11:fc:1c:d6:25:ec:e4:e3:ca:
         c6:09:72:6b:f5:dc:33:21:63:a0:0f:26:c7:a3:2b:71:fd:8e:
         db:c8:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:13:53 2025 by rpki-client