Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File:                     jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier:          6iv9k96PqrlpkrIxp9UXxm2oBTzEECW3cpyquySxu+E=
Subject key identifier:   9A:FC:A4:FF:BC:B8:8D:F5:B6:8B:8E:1A:E9:AC:C0:B6:08:08:28:D7
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer:       /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial:       01977151200597E8BF550CFECD8719D7F2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number:          1594
Signing time:             Sun 15 Jun 2025 02:00:31 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:31 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:31 +0000
Files and hashes:         1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
                          2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: A1Pc+V6YNPSv2v0qmUsn+9DKWMK5SQJ8dCja7dEmndA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:20:05:97:e8:bf:55:0c:fe:cd:87:19:d7:f2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
        Validity
            Not Before: Jun 15 02:00:31 2025 GMT
            Not After : Jun 16 02:00:31 2025 GMT
        Subject: CN=9afca4ffbcb88df5b68b8e1ae9acc0b6080828d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:75:9e:e0:1f:90:19:29:d9:0b:bd:f8:41:
                    1b:7c:06:33:d4:03:e3:31:b6:19:20:f4:94:33:ba:
                    4d:ba:75:68:b7:25:80:ba:08:82:23:58:24:ed:64:
                    41:b4:7b:7c:49:2e:51:b1:34:4d:5a:fa:00:9f:80:
                    dc:df:e1:52:27:38:61:99:08:fb:86:09:2d:b7:c3:
                    e9:8c:da:40:03:dc:35:d3:e6:97:75:0c:40:a3:61:
                    ca:e3:e4:11:9d:a8:bc:c9:10:c2:a6:32:30:ae:78:
                    68:cf:7b:48:49:89:35:0b:0d:81:c4:46:35:e4:e0:
                    2b:f8:b2:22:da:7b:8a:81:eb:ac:23:6f:b8:20:a2:
                    23:26:88:bf:56:f5:71:3e:7d:31:fa:6f:8e:42:ab:
                    95:42:e1:91:02:82:37:86:5d:e1:a2:05:35:63:34:
                    bc:d5:42:8c:15:18:6e:47:21:78:fa:67:0d:2b:ec:
                    81:ad:54:ea:e1:2e:1c:1b:d1:fc:d6:14:fa:40:e9:
                    26:2e:5b:e2:14:9d:c7:3a:4f:df:95:51:80:c9:8c:
                    a0:e8:c3:ba:63:ca:96:87:72:de:31:f7:85:69:a8:
                    38:2a:f8:d2:ca:dd:ba:0e:9f:5c:1f:97:a1:2b:5f:
                    11:f2:5b:f7:39:ba:1a:6f:39:13:25:6a:ee:4b:e8:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:A4:FF:BC:B8:8D:F5:B6:8B:8E:1A:E9:AC:C0:B6:08:08:28:D7
            X509v3 Authority Key Identifier:
                keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a0:bb:70:1e:4c:61:16:9b:05:53:e7:69:7a:27:74:e4:e1:
         dc:12:2a:a2:e9:a3:e1:02:e3:f1:9d:1d:18:3c:d2:71:fc:be:
         64:5d:9a:9c:d9:a3:0d:e5:12:09:cd:81:77:32:82:76:f5:63:
         67:ca:14:f4:6b:d4:f1:62:3e:92:56:56:9e:e3:0f:13:e4:c1:
         0b:cb:01:80:89:a8:d6:23:a0:0d:c9:fd:3f:27:e6:b0:1c:f9:
         80:21:00:0f:22:f4:34:57:c1:34:b5:58:23:23:04:2e:0c:f5:
         d5:ce:5e:ec:1f:04:b2:ea:d7:8d:8b:f0:ab:de:02:75:1b:28:
         22:3d:bb:ea:9a:ae:92:86:42:f1:13:49:4d:51:26:0b:73:00:
         42:48:32:a8:bc:58:49:6e:d4:b9:5d:4c:d6:b7:c1:95:1e:59:
         dd:88:dd:0b:d6:80:71:35:67:8e:b7:c8:15:1a:26:a2:c9:87:
         e6:32:44:a0:ea:f2:c1:42:d7:44:ed:0b:14:ca:af:75:d5:e9:
         75:ef:b7:ac:d9:1a:15:38:9e:59:1e:0b:c4:e8:51:e6:bf:8b:
         fc:b3:4a:d6:22:61:d7:64:a3:d7:c9:e1:7e:7f:3f:5b:59:fe:
         29:75:00:7f:10:08:c1:9d:81:9e:5d:60:1e:75:7e:a6:00:ce:
         18:97:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:24 2025 by rpki-client