Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File:                     JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier:          GLcYCWoH2ztObjQuq+8UPn21MSA1WBStzt1/9JGNKow=
Subject key identifier:   AA:C4:73:F6:A6:5C:EB:F8:00:ED:9E:80:48:0F:02:7D:36:FE:4E:AD
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       01960D8D091D569892413F43CFFC472A3297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number:          13A5
Signing time:             Mon 07 Apr 2025 00:01:08 +0000
Manifest this update:     Mon 07 Apr 2025 00:01:08 +0000
Manifest next update:     Tue 08 Apr 2025 00:01:08 +0000
Files and hashes:         1: CbuZAj1dPAfXmlzci4IedDRYdI4.roa (hash: lbGR/KQd69NrN+4ngJ+jL//5VrHPvFUw0sXDB1VBPiU=)
                          2: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: tQ4BshXQtsoi7znghAtYALjBwlHy+nDHPO+Jh+rcHkE=)
                          3: ROYXGQwHkQLzalc37wqmEqdk5r8.roa (hash: 6H17V6BaUBP9V1noyPTAKFgtV/u7+FyrrmOepW3UQcI=)
                          4: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=)
                          5: aJRJmc9Tlf3JWJYKXvh0vDxc1LA.roa (hash: hgfUPkMG26dk9GrdhtkfCBFdtiBPxmoVKLstEH5RqAo=)
                          6: oCM0PQPAQTFeZjH_bur3wGsBnfY.roa (hash: zpqsOKB5HhYA51pMtIuoRoqUM3ZnFM9ulXRkOtcM4VE=)
                          7: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0d:8d:09:1d:56:98:92:41:3f:43:cf:fc:47:2a:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Apr  7 00:01:08 2025 GMT
            Not After : Apr  8 00:01:08 2025 GMT
        Subject: CN=aac473f6a65cebf800ed9e80480f027d36fe4ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:b2:e2:61:e1:9c:c9:a5:72:a3:98:11:04:
                    fe:80:61:34:6e:77:45:61:be:03:dc:97:47:60:41:
                    94:a0:c1:79:16:e1:10:8a:7e:03:71:87:ce:eb:cd:
                    57:16:8a:ae:d6:ed:76:91:46:25:a3:a8:f7:c1:cd:
                    91:4d:e1:02:d7:c6:ef:90:16:a5:16:6e:09:12:f8:
                    91:35:be:21:81:b0:c0:52:4c:2b:f6:e9:5b:4a:71:
                    e6:42:6a:3b:2a:6f:c6:7b:03:68:eb:a9:13:11:27:
                    49:e0:ff:94:15:8f:27:5f:57:47:be:36:a1:92:ce:
                    3a:e0:c8:67:d1:57:59:67:e5:68:7c:74:06:29:d8:
                    b4:84:c8:09:2c:13:d2:01:c5:63:e2:44:e4:64:c3:
                    c9:fe:50:98:5e:01:51:26:80:53:33:54:70:74:38:
                    8d:ff:0e:5a:4a:2b:77:01:ea:43:29:38:d8:64:20:
                    f5:de:58:84:5f:9d:3d:ce:2a:d9:e9:35:93:c9:38:
                    0b:83:fd:83:12:cb:51:5f:14:3e:3c:34:81:20:2e:
                    57:a3:ee:33:f1:5c:5a:d7:2d:ef:a1:27:05:46:16:
                    cd:39:69:3e:41:d8:83:ee:ea:fc:f0:7f:8d:2e:b4:
                    a9:cd:b8:5e:77:d5:72:aa:69:16:d9:b0:2c:34:cc:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C4:73:F6:A6:5C:EB:F8:00:ED:9E:80:48:0F:02:7D:36:FE:4E:AD
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:16:2a:c1:65:96:90:b0:d3:ba:d5:cd:db:7e:b3:ca:b8:e2:
         aa:ff:f4:1e:c0:20:f4:07:50:8f:7b:e4:7d:d1:bc:ca:c4:49:
         71:df:93:50:d8:45:e9:cb:49:2f:29:04:af:2f:33:76:b0:c3:
         38:3c:08:1c:35:ed:6b:80:38:26:04:4f:d6:a3:b2:68:77:9e:
         18:04:ee:08:92:04:d3:ca:f4:d7:1a:7a:dc:1e:b2:71:29:b3:
         ea:52:10:f7:83:1b:42:93:71:26:06:78:e3:77:5a:27:0d:db:
         bd:88:c7:9c:7b:50:8b:b8:f2:9d:cf:ec:10:3e:71:4a:91:22:
         1e:1e:79:c8:a5:b1:4a:eb:e4:90:c1:b5:d2:2d:96:fe:dd:84:
         85:bf:92:3d:92:6f:fb:a7:ee:e1:5f:88:7b:59:53:19:34:80:
         99:40:34:0a:ca:64:d9:d1:0a:f6:b9:ea:0a:75:a4:61:2f:90:
         e3:9d:a2:b2:96:58:c4:31:59:4c:80:00:26:3f:65:66:7f:91:
         35:f7:72:07:a7:8a:71:52:d2:f7:f6:1c:e6:46:d9:f3:9b:dc:
         76:d4:cc:c3:34:d4:38:98:ec:f7:90:78:c8:98:19:ed:6a:0d:
         cf:c4:a5:17:e5:bb:31:5c:98:0b:af:6c:01:11:ed:ba:30:55:
         e6:1b:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:57:53 2025 by rpki-client