Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File:                     jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier:          at8u/lSf9RpnrTmBxCw6G/JKFyrEpvoDr5tLGAGs680=
Subject key identifier:   40:41:0E:87:DD:7C:B9:75:D9:05:48:5E:E2:0C:16:1E:34:D2:61:F8
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer:       /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial:       01977F44057FF78B0E137EB576424B43E7AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number:          1282
Signing time:             Tue 17 Jun 2025 19:00:53 +0000
Manifest this update:     Tue 17 Jun 2025 19:00:53 +0000
Manifest next update:     Wed 18 Jun 2025 19:00:53 +0000
Files and hashes:         1: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (hash: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=)
                          2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: 9cBwDb4EYjshlGQfBj2LR4rI1HbRW4lVIEzanjD3Y8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:44:05:7f:f7:8b:0e:13:7e:b5:76:42:4b:43:e7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
        Validity
            Not Before: Jun 17 19:00:53 2025 GMT
            Not After : Jun 18 19:00:53 2025 GMT
        Subject: CN=40410e87dd7cb975d905485ee20c161e34d261f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:80:b8:cd:12:ef:b8:82:78:11:be:d9:d7:
                    6c:fd:6a:45:91:d2:50:de:ba:6b:44:5b:e5:98:2f:
                    cd:a7:51:46:bd:57:0f:94:87:72:95:e8:77:83:4a:
                    e5:34:0a:24:54:a2:9a:15:e2:1d:60:8e:05:90:c4:
                    0f:32:e8:0e:8a:e8:a8:bd:27:6d:32:1f:66:60:66:
                    4b:83:4b:ae:1a:f4:63:79:88:03:43:1c:e8:68:fb:
                    cd:8c:2e:e9:88:22:aa:ca:d2:30:07:42:d7:20:a3:
                    a2:04:23:b1:7a:39:ee:0a:62:b1:7e:ed:13:73:9d:
                    70:10:ed:53:91:2b:72:f2:8f:1c:0c:0d:40:3a:30:
                    37:0f:78:60:5c:52:65:24:97:72:b9:57:be:7f:3b:
                    92:f1:94:8d:c6:df:20:3e:65:fa:26:c6:35:2a:1a:
                    15:d4:c2:8f:d4:2c:13:d2:fb:46:31:29:c0:e0:ef:
                    3d:f1:3c:02:83:ad:b6:06:8f:0b:07:33:55:65:ca:
                    d2:4a:14:f0:0d:6f:f9:e2:35:51:49:99:9d:b0:e1:
                    77:ba:81:42:f6:6c:25:bb:e1:3a:d5:70:9a:2d:a1:
                    06:e3:c6:49:53:f5:ae:38:0e:60:45:9d:3b:0c:4d:
                    69:99:5f:c6:dd:3f:d1:d2:a4:0b:67:4e:5a:42:42:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:0E:87:DD:7C:B9:75:D9:05:48:5E:E2:0C:16:1E:34:D2:61:F8
            X509v3 Authority Key Identifier:
                keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:59:3f:10:1f:9b:df:aa:b2:07:15:25:87:aa:d7:e2:1f:
         53:a9:83:13:65:f1:81:87:f4:bd:67:56:4b:cf:01:e8:01:5d:
         b8:56:5c:0d:ed:49:93:d7:cd:67:2d:36:e7:76:62:56:5e:d0:
         90:85:5d:89:87:08:d4:94:27:06:37:5b:ce:8e:30:9d:f4:ae:
         f2:58:b3:14:26:2a:d4:c8:19:8e:73:07:9c:f6:68:84:f3:8c:
         0d:0f:28:13:42:04:17:03:d8:73:bf:3a:62:b3:e4:38:ea:b2:
         6c:b2:a6:b7:6f:35:09:a7:b2:59:77:e7:89:ac:d8:fb:5d:3e:
         63:29:3f:58:cc:f6:9d:b9:df:18:8f:bc:68:08:a0:ac:0c:52:
         17:12:ab:30:9e:12:2b:73:60:2c:fb:92:7c:0f:a1:9f:37:dc:
         76:5e:3b:0e:0c:e0:7f:cc:55:50:39:cf:2c:e2:62:c6:0a:97:
         c4:c0:c0:81:6d:ea:a6:80:d0:db:1c:88:78:53:2a:01:87:96:
         f3:4f:ce:15:7e:78:bd:7e:66:99:c9:54:6e:1a:b7:ed:93:9d:
         d9:20:d1:bc:a8:76:f4:22:15:47:d2:d6:ff:fb:da:0c:c9:99:
         cb:4b:8e:2e:74:9b:61:31:38:51:3b:9e:01:68:11:97:06:90:
         50:b1:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:28:53 2025 by rpki-client