Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          39ZFaUvcZ2O+i+/t4SS6Bbqyta8Cop8PewMz4oRnTS4=
Subject key identifier:   E3:9F:05:50:C9:E8:8B:50:84:6F:17:EE:94:C8:90:DC:9B:5C:F4:D1
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       0196741DD6B61C2E3AA19DA5E7E542CF636A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          10F8
Signing time:             Sat 26 Apr 2025 22:00:34 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:34 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:34 +0000
Files and hashes:         1: 54maDBwwKTxHdkusWjL9_Ovz-qw.roa (hash: K+6mHC5B4TYfPyOtC0Ws3X1xogH31t6cVYvGSG2+010=)
                          2: GpJsbUU7ynXwevk6zegWgWclf9Y.roa (hash: Gj5/c+xCgDWNgWsyAfXPaCh0mgF3UrEUlCabtiae4lk=)
                          3: QKYFwfEUtIsE2zwk360KHQOdATU.roa (hash: J7RPiiX3svZf1ggdl8vvm2b4xvCEOydrVgV6jBu1CtA=)
                          4: baMjsDY94eZSoK-AIzqEOHNRACk.roa (hash: SLAiqx14sHLSHfAF2Lauw4go5jjzGTP4a1xj8l/WroY=)
                          5: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: Tm5n8G1wgfiKi2ApS/6SxueBKZLl79TqMdp3YNw8xks=)
                          6: nbxUHEZP7nLPsSWUzZlv-6zoI8E.roa (hash: b2RlxLzrg3Jt5vsvNFiprNhu9Bg/P/h2jB1aLvcyUR4=)
                          7: prOxBQFXKQHVMxFfWuCKBN6cC28.roa (hash: KQkvvBw6H6mLNvuqMCwSPUrSIm6c/c/LV/GGLcSdkGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:d6:b6:1c:2e:3a:a1:9d:a5:e7:e5:42:cf:63:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Apr 26 22:00:34 2025 GMT
            Not After : Apr 27 22:00:34 2025 GMT
        Subject: CN=e39f0550c9e88b50846f17ee94c890dc9b5cf4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:46:76:e9:c0:b9:ae:f4:fe:30:6d:e5:f6:
                    54:ff:f6:d5:b0:2c:22:34:bc:a8:b3:cd:e1:07:c5:
                    e6:a3:cc:7a:c7:aa:31:00:21:15:29:eb:5e:17:7f:
                    3d:8b:f8:99:49:c3:f1:6b:98:ae:0b:90:d4:55:f1:
                    c0:70:6a:9d:f7:1b:79:2f:f6:55:fd:06:9c:c1:92:
                    76:1b:d2:0b:86:f0:6f:39:79:54:16:36:89:5a:97:
                    9a:45:35:f7:1d:72:62:3c:27:6e:cb:88:42:b5:d2:
                    2b:27:3c:af:62:79:8b:8f:16:e2:06:00:c6:10:62:
                    48:41:7e:03:a3:5f:34:c9:02:07:2f:0a:c4:f2:23:
                    91:bb:6f:a3:8c:5f:dc:f5:f2:45:cf:b3:16:8f:6c:
                    d6:a8:f2:6a:d3:ec:08:d4:17:10:38:4b:5c:55:74:
                    7a:f2:9b:bc:d8:d4:f2:0d:8a:89:7a:08:4c:ba:f7:
                    c7:ea:f4:04:a8:20:6a:9b:e5:9c:26:9a:a6:f7:53:
                    ef:df:13:f4:f4:91:0c:60:25:8d:d4:a6:a8:3b:cb:
                    f6:43:91:54:40:7a:0b:72:6d:55:e5:db:f4:fc:60:
                    a3:39:12:5d:a5:9f:e4:60:d5:13:b8:0d:b3:13:74:
                    54:12:9f:64:7b:4f:68:5d:29:ae:17:4e:0a:5a:ed:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:05:50:C9:E8:8B:50:84:6F:17:EE:94:C8:90:DC:9B:5C:F4:D1
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:af:2e:6e:22:35:e2:9f:a0:79:d6:94:0a:ad:1e:8e:ec:08:
         0d:31:a1:0c:ee:da:00:81:d2:10:c6:56:1c:3f:da:53:b6:31:
         29:67:99:1a:bb:2e:44:36:3f:98:5d:53:32:62:53:60:83:95:
         85:37:6c:83:67:f6:63:21:bc:2f:ac:ec:f7:51:68:a4:82:40:
         0f:bc:b8:86:1d:d4:cc:1b:2a:11:e1:42:be:a1:0e:ee:d3:75:
         d0:f8:05:2d:cb:05:ef:84:d3:0a:a3:6c:c7:72:96:ed:70:8e:
         f5:6a:c2:8d:cf:18:77:ed:8e:95:ab:5b:48:5a:ae:f5:3f:ff:
         b4:7c:d5:ec:4e:a9:d5:bc:dd:b3:16:46:28:d0:9e:81:5b:94:
         18:4c:b8:d8:d1:f5:55:63:8a:44:57:10:30:d1:a9:16:98:05:
         48:b5:4f:cc:6f:2e:51:2f:01:3f:df:0e:1a:e7:9b:a8:12:ed:
         39:05:cd:fd:6c:6c:27:b2:e9:0b:1e:fa:b7:83:f7:2d:7c:02:
         9c:79:27:2e:68:39:11:d4:c0:7a:af:a2:3e:ca:8a:6a:ea:42:
         9a:4a:a1:e9:1b:b8:30:3d:a4:d8:c2:5e:1c:2b:e6:66:d5:64:
         9e:96:fa:8c:37:d9:5e:17:aa:68:26:69:15:71:d5:ea:e4:1c:
         0f:0a:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:18:07 2025 by rpki-client