Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier:          CcxmajGkd7vlgh143qgeYnhV9MOHTubUofpUVSkhD4g=
Subject key identifier:   ED:21:F7:D3:1F:EC:EF:54:13:13:4A:8A:5F:DB:55:90:EC:2F:F1:EF
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer:       /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial:       01968E82CDA935448AA3329ACF6E480DA725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number:          1160
Signing time:             Fri 02 May 2025 01:00:58 +0000
Manifest this update:     Fri 02 May 2025 01:00:58 +0000
Manifest next update:     Sat 03 May 2025 01:00:58 +0000
Files and hashes:         1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
                          2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: aj8B7ImJ0lX3u8vG4fkMmA0zkhbg0ot9juUW+V+gggQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:82:cd:a9:35:44:8a:a3:32:9a:cf:6e:48:0d:a7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Validity
            Not Before: May  2 01:00:58 2025 GMT
            Not After : May  3 01:00:58 2025 GMT
        Subject: CN=ed21f7d31fecef5413134a8a5fdb5590ec2ff1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:b5:97:ae:5a:73:7b:16:b3:6d:d1:51:b3:
                    af:2f:55:cc:4b:a6:08:d7:f7:54:aa:50:b2:64:cb:
                    ab:e6:aa:21:dd:c8:2c:82:3a:be:64:12:a0:d7:1f:
                    4d:de:be:eb:d4:4e:4c:8b:79:75:53:25:ab:34:41:
                    a4:81:05:b6:e6:7b:20:1a:b5:b0:2a:7a:41:d9:ad:
                    83:32:82:ca:e5:c4:fc:1c:38:50:68:22:0c:1b:73:
                    43:d8:ac:ca:7c:eb:ed:5e:da:d1:02:2a:12:3c:09:
                    bc:e2:6d:6f:53:1f:48:2d:a4:8d:e8:f5:f8:f3:d5:
                    4b:b0:a6:d2:88:9a:1c:f7:9e:8a:84:8b:d3:43:b1:
                    33:14:2c:2f:cc:d3:d2:d0:62:a7:a2:88:ad:e3:97:
                    b4:6a:11:d5:ad:5b:1d:de:93:ee:ed:ca:59:d9:1d:
                    cc:bb:f8:2a:ac:55:b1:d5:aa:ee:e7:27:3c:47:26:
                    93:df:a5:34:ad:73:b0:76:79:a9:9b:c3:63:5c:53:
                    b0:7a:cc:bd:c7:e6:2b:14:4b:5e:91:d5:47:5b:aa:
                    dd:ad:64:47:18:ab:6f:96:91:ed:41:48:89:3c:df:
                    90:22:ea:6e:c9:b1:b7:72:cd:ae:36:9a:4d:e2:4e:
                    ec:0b:a5:68:cf:63:77:06:86:41:21:5e:2f:9c:10:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:21:F7:D3:1F:EC:EF:54:13:13:4A:8A:5F:DB:55:90:EC:2F:F1:EF
            X509v3 Authority Key Identifier:
                keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:0c:15:9c:ce:3e:a8:08:7f:e4:ef:cd:91:a3:10:bb:ed:
         e6:e2:14:4b:5a:cd:bf:57:bf:4a:7d:21:8d:ba:b6:a5:a8:a8:
         b3:55:f5:b3:81:bd:a0:20:9c:7f:59:9f:df:84:27:f3:79:6f:
         96:c2:da:f5:8c:0c:e2:7a:b3:69:ba:5e:ff:a1:04:75:79:01:
         bd:df:52:e7:be:26:03:c3:ed:58:58:10:98:c9:06:ca:05:b3:
         93:67:1c:ce:33:9a:3a:e7:bf:f5:04:5b:e0:ea:ff:99:19:95:
         ee:53:2a:c1:fd:d1:a2:ee:6d:dc:0e:9a:06:33:55:02:30:1d:
         8e:96:3f:98:7e:cb:d9:aa:d9:65:06:80:d2:e0:17:66:c4:b2:
         0e:60:2a:33:3a:13:00:83:ee:ee:15:ab:2f:c6:02:49:af:49:
         ae:f8:7b:18:46:0a:c9:3e:e2:2a:c9:94:2a:97:ae:51:9f:5b:
         4e:8b:05:08:32:7e:40:68:10:49:b3:36:77:90:38:4b:7a:fb:
         41:cd:51:2a:e8:25:2d:ef:f8:1f:89:db:08:88:0f:87:fd:16:
         2d:5c:5d:ea:78:22:9c:10:95:cb:ab:01:3e:f1:28:2f:81:29:
         64:87:b2:d8:64:67:89:79:d4:21:34:df:b4:f9:d2:c5:93:12:
         0c:a1:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:04:13 2025 by rpki-client