Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File:                     jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier:          YknAj1b7h5O2CQalgFbQuKCByP2/Rrmkm9nyiwRNKYY=
Subject key identifier:   45:E0:54:4E:BA:72:D8:1D:C1:78:A9:7F:CE:FE:93:0A:33:86:11:09
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer:       /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial:       0197481E6CFEB71ED36497907AF8AB4F75C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number:          0641
Signing time:             Sat 07 Jun 2025 02:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:42 +0000
Files and hashes:         1: 1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa (hash: YcdvazhIm7zqYM8zJdIALjmfMmrTX/mjzf4LOtTALFE=)
                          2: PeHEDW_rP1JUEqYPKxq3ZE0-zH4.roa (hash: m2+wZp8wzsLpKqeRZNklpBnfCK4breDaWRdrgO3+3ys=)
                          3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: OyD0J6s4aAbgsHEN2imdPVraNxpZlS6tsNB3sKPSspg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:6c:fe:b7:1e:d3:64:97:90:7a:f8:ab:4f:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
        Validity
            Not Before: Jun  7 02:00:42 2025 GMT
            Not After : Jun  8 02:00:42 2025 GMT
        Subject: CN=45e0544eba72d81dc178a97fcefe930a33861109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:d2:ba:57:a3:a5:7f:c4:68:2a:cf:cd:7e:
                    4f:46:4b:7c:4b:29:eb:e3:78:5a:64:34:29:d7:c1:
                    9a:a9:c5:d3:4c:9b:c5:9d:58:d9:8c:eb:eb:89:3a:
                    a2:55:9e:57:7b:03:2f:81:cb:df:9c:28:01:2d:de:
                    e7:93:14:cf:65:82:88:9b:62:02:f9:a1:1f:4a:78:
                    b2:ca:11:a3:f8:f4:48:10:9e:4f:4c:89:2e:70:a2:
                    1b:ce:26:ea:18:f1:49:c8:11:05:a2:29:44:c6:d5:
                    4b:d9:c0:03:b0:a4:c8:bf:84:37:7c:a9:d5:aa:24:
                    57:a1:1c:53:12:9c:a5:9c:8b:8e:16:c2:f8:87:ab:
                    26:f5:91:f7:7f:dd:ce:76:50:57:9b:8d:18:da:2a:
                    93:7d:0b:3d:89:f7:35:fc:f3:0f:2e:cd:1b:77:c4:
                    e0:dc:79:4d:1c:ba:a7:cb:fc:33:41:2b:6c:3b:0a:
                    12:cc:22:2c:d3:6e:8f:12:4e:af:f1:d7:c6:6a:9f:
                    12:e1:95:e2:a0:8c:15:0b:85:a5:f1:ad:0c:9b:1d:
                    b8:4d:84:8f:ad:55:84:4e:cc:e0:57:42:7c:54:3a:
                    98:85:47:5d:0c:d1:18:73:1b:bd:fc:16:c8:7f:a2:
                    b3:b3:bc:80:8d:bb:d1:ae:68:b9:23:3b:e9:58:88:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E0:54:4E:BA:72:D8:1D:C1:78:A9:7F:CE:FE:93:0A:33:86:11:09
            X509v3 Authority Key Identifier:
                keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:9d:c8:b8:b5:bf:d4:47:8f:6e:85:67:40:40:81:f8:3f:
         44:81:2e:a3:45:99:01:32:01:fc:fe:fe:11:31:2e:a9:c4:db:
         7f:16:2c:1e:33:00:6f:2f:d0:fc:fa:f3:92:09:fd:9a:94:ad:
         e7:6a:ea:82:53:7b:6c:a1:7f:b1:b3:be:04:e4:92:44:6a:c9:
         5c:1c:c3:3e:90:c7:d2:8e:a1:2f:d9:5a:fa:e7:a7:95:03:cc:
         1b:59:d4:b9:97:1e:14:ea:e5:a3:cd:3c:fa:38:d0:ff:97:03:
         55:4a:07:25:b6:4b:d7:7f:16:73:c2:f2:52:1c:33:0a:ed:87:
         29:f1:82:cc:65:75:0e:f3:3e:6a:16:13:82:5a:a1:a3:78:45:
         49:e7:05:51:55:aa:f4:79:de:bf:13:70:d8:ee:a5:6c:e2:25:
         13:c3:1d:ab:4f:97:83:93:89:a0:7a:ba:32:d5:90:4c:1a:69:
         8a:24:b1:ea:d9:d5:a3:aa:f3:73:fc:12:fc:ff:f5:54:5d:40:
         91:e9:53:c2:6e:81:38:9f:b5:ba:e3:0f:fc:df:7d:c7:95:f2:
         52:b3:51:64:84:21:0a:bd:dd:e0:c3:ee:4c:f6:04:e5:3f:37:
         34:c0:45:73:8a:c6:2c:46:bb:db:0a:44:3d:ea:77:6d:80:24:
         7b:ad:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:18 2025 by rpki-client