Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          CqPwh5RK4Dfnpx9s/RgJXYv/bZnpW+w+RJJA7t5dy5w=
Subject key identifier:   10:D8:9D:BC:3A:7E:80:F7:6D:26:15:A5:18:73:35:FA:6D:47:6A:6C
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019681A2E4EF79111100429AE8A40DD69ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          01F8
Signing time:             Tue 29 Apr 2025 13:00:58 +0000
Manifest this update:     Tue 29 Apr 2025 13:00:58 +0000
Manifest next update:     Wed 30 Apr 2025 13:00:58 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: rnG66BMrifOA7BhDroRKgZk6bJ/uwOtFccCC0NNPO0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:a2:e4:ef:79:11:11:00:42:9a:e8:a4:0d:d6:9e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Apr 29 13:00:58 2025 GMT
            Not After : Apr 30 13:00:58 2025 GMT
        Subject: CN=10d89dbc3a7e80f76d2615a5187335fa6d476a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:65:d8:ea:61:cf:89:7c:18:44:b9:f0:4a:
                    13:f7:0f:f0:9b:24:01:f4:e0:5a:5a:b5:a5:10:88:
                    99:6f:7d:07:01:72:4b:96:9d:c6:07:5d:2c:8d:64:
                    f0:de:6c:15:76:3f:fa:99:c0:9d:6f:88:9a:ce:07:
                    19:69:74:cc:c8:25:ad:ce:2d:79:0c:5c:94:a8:31:
                    df:3e:2e:86:b1:5a:e1:b3:2f:b4:3d:09:66:69:f7:
                    e1:4d:d5:7c:5a:a0:21:68:8a:53:51:96:79:37:f6:
                    e1:33:2d:01:17:65:19:9d:c9:7c:f9:75:72:5a:25:
                    4f:82:5f:dc:7a:49:af:49:78:d3:3e:02:7b:aa:51:
                    bf:99:cc:35:06:fd:5b:e0:43:22:27:7d:7b:31:6a:
                    5b:05:ba:f4:69:fd:e7:9b:dc:3b:af:4c:bd:29:41:
                    06:16:41:be:4c:5e:0b:ad:c8:0a:76:5f:41:08:42:
                    01:fe:b3:e3:02:3f:ad:35:9a:9c:1d:84:30:b4:85:
                    fd:4b:1d:f0:aa:c9:39:6a:81:c0:f8:f6:d8:86:32:
                    a3:6c:cd:a4:e5:3d:6c:98:3a:08:84:b0:85:1d:8c:
                    1d:7d:ea:04:5c:6c:2f:f4:bf:a0:fd:f5:f2:a5:a9:
                    86:1d:e5:3c:31:a1:f3:e0:52:bf:b3:d2:9d:2f:91:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D8:9D:BC:3A:7E:80:F7:6D:26:15:A5:18:73:35:FA:6D:47:6A:6C
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:30:b6:b3:7c:41:fe:99:ca:9c:15:b1:d5:7e:5a:1f:2e:
         3c:27:26:e2:d9:a9:02:21:d7:8f:aa:ca:db:52:0e:2b:76:24:
         72:fc:82:49:3f:a2:b2:30:92:11:16:f1:09:44:3d:77:cc:44:
         b3:6f:01:d4:7b:ee:47:ee:63:2f:d1:d1:ff:e7:8f:1b:58:a0:
         7e:6e:65:1b:19:97:95:91:7b:00:f9:bf:ac:6f:60:92:a1:c9:
         d9:d8:0c:f8:47:9a:ae:bf:54:0b:f7:0b:c4:a1:1a:92:ec:fb:
         7b:39:8f:72:fd:7c:a4:ac:b2:29:7a:eb:ef:e2:0c:da:68:19:
         09:91:7f:23:20:f9:f8:48:cd:eb:3d:22:23:4a:dd:ed:75:48:
         d6:55:5b:7c:4f:d8:0a:a5:c3:5a:47:ce:29:30:90:20:0b:ad:
         b1:cf:c8:c5:95:ba:cd:4b:66:99:76:c1:2b:89:9b:59:4d:8f:
         2f:ac:c6:a5:08:28:8b:bd:df:49:bf:cf:37:a1:6e:8d:38:68:
         7b:7e:c3:3f:5d:ff:d4:23:7b:47:93:2c:8d:7f:be:82:2c:41:
         f8:d9:4b:72:00:c0:ac:b5:47:3b:04:dd:f7:14:86:75:08:2b:
         34:28:76:22:54:b5:2b:bc:14:3f:57:0a:f0:ca:6a:ed:e2:a2:
         bf:54:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:16:24 2025 by rpki-client