Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File:                     jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier:          BUbUsgNtQVIqs3GHira9LrBBUzsTMd9ReuKIXv8Yk7c=
Subject key identifier:   54:7D:E0:65:7F:3D:DB:92:87:63:0A:8D:00:89:B0:29:02:B5:28:CD
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer:       /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial:       01963FF94F661F6CFD4FDF1BAC4461C61446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number:          0C01
Signing time:             Wed 16 Apr 2025 19:00:25 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:25 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:25 +0000
Files and hashes:         1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
                          2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: 18JhKUbi5YOsQta9Oh7yYsPM9YQIHvFDvjcHY498oKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:4f:66:1f:6c:fd:4f:df:1b:ac:44:61:c6:14:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
        Validity
            Not Before: Apr 16 19:00:25 2025 GMT
            Not After : Apr 17 19:00:25 2025 GMT
        Subject: CN=547de0657f3ddb9287630a8d0089b02902b528cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:79:6c:05:88:41:4b:aa:4e:08:ef:e3:8e:
                    42:f0:5e:e9:e8:b6:27:80:b6:46:27:5e:aa:65:24:
                    49:b2:8d:78:53:07:36:89:b3:e4:6c:4f:10:1f:61:
                    5c:0c:2a:4c:2e:02:3a:9c:22:2f:e4:79:a9:be:15:
                    23:79:13:ee:bb:53:c8:e1:9a:f9:55:9b:5b:54:fa:
                    9c:f4:17:ae:b9:d9:e3:bd:46:d5:eb:e8:b5:4a:f0:
                    42:cd:b6:6a:a1:36:38:cd:a7:54:83:96:25:bf:f6:
                    23:a1:5a:c6:0f:49:3e:5f:e5:8b:5d:4f:a6:a4:fe:
                    8d:96:7f:6f:9e:35:11:de:e8:7e:5c:ef:e9:e1:9c:
                    7d:d3:5e:95:f3:90:3e:e5:2f:34:09:e3:9c:7b:c7:
                    f7:9e:7a:85:14:bb:1a:01:77:1e:8b:44:85:73:79:
                    12:61:f7:df:0e:e6:fe:e4:bd:74:54:6b:25:82:3a:
                    6a:23:4f:7c:4d:ce:8e:7b:00:99:94:66:fe:32:fb:
                    1d:30:ac:6f:1c:98:2a:e7:33:7d:21:c7:5b:58:80:
                    8d:f8:3b:db:0f:a7:64:28:5b:1c:bc:48:40:39:3e:
                    b1:16:e8:6c:34:db:ad:b3:ee:9f:aa:e6:ff:6e:43:
                    00:3b:d3:31:d6:7f:c3:7d:1b:44:c1:6e:02:1b:44:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:E0:65:7F:3D:DB:92:87:63:0A:8D:00:89:B0:29:02:B5:28:CD
            X509v3 Authority Key Identifier:
                keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:16:ad:53:92:f6:66:9d:f9:14:e2:96:5c:97:e9:1a:5d:
         2b:d0:a9:e6:af:a7:8a:34:ff:08:30:2e:ee:50:00:52:f6:ca:
         ab:5b:5b:df:dc:ef:26:b0:0e:35:74:29:71:3b:21:64:9e:a1:
         33:f0:75:cd:87:77:c4:7f:7e:43:b4:e3:9d:92:e9:8c:be:34:
         00:76:69:5a:c6:d2:52:ad:3d:ae:03:e1:d3:1e:a2:69:06:b0:
         2b:21:e4:3d:93:ac:78:22:8e:9e:f6:e5:b2:b1:1a:86:b6:da:
         a8:2a:26:a7:43:f1:57:70:78:63:50:32:46:ef:b0:da:0c:9a:
         b5:ef:f5:b0:9b:22:25:f4:c9:93:fb:10:1f:5d:17:4b:13:59:
         83:f1:64:e3:aa:63:5e:65:d4:58:a7:6d:8f:33:cb:f8:b2:a5:
         79:3a:e3:56:9a:ed:42:d1:29:4c:5c:8a:da:e4:5a:76:fc:7d:
         79:fb:30:32:a0:7a:b3:0d:16:ee:0d:06:ce:f8:be:d0:10:e3:
         2d:c2:09:e3:96:3b:cf:a5:73:f9:ca:4f:65:45:bb:53:f4:0e:
         af:35:cb:ce:2a:b7:5b:e1:cb:7a:4e:88:a7:95:c3:c6:f7:50:
         f9:21:7f:7c:42:9f:ed:6b:28:99:c0:32:c0:d4:3f:62:5a:78:
         62:07:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:23:17 2025 by rpki-client