Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          plY3FHc+Uo9NWedUtKDhLoHcTHpjcWLxe2XJXACxKmM=
Subject key identifier:   CF:79:39:A9:F9:09:4B:53:95:8A:B1:FA:20:D0:1E:8E:38:5A:47:F2
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       0197711A896B235B4E427A67B5B7F11A5D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          0274
Signing time:             Sun 15 Jun 2025 01:00:53 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:53 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:53 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: TXcRQrSAe0v9UAVdTM1w/hMROHMkf1SeH64XWKVa+NQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:89:6b:23:5b:4e:42:7a:67:b5:b7:f1:1a:5d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Jun 15 01:00:53 2025 GMT
            Not After : Jun 16 01:00:53 2025 GMT
        Subject: CN=cf7939a9f9094b53958ab1fa20d01e8e385a47f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:25:41:50:d5:4f:5b:1b:10:f8:2a:21:8b:
                    98:94:72:a3:0a:6a:f3:a6:e4:b1:fd:66:d9:12:10:
                    8c:8d:2c:19:50:44:df:88:2b:ab:fe:07:a1:bd:ef:
                    b3:cd:fe:8f:bb:7b:a4:db:53:2b:0a:f2:1f:d7:8b:
                    3b:83:04:13:23:05:0a:d5:64:ab:e2:2b:b5:75:75:
                    52:b4:d1:99:ed:60:7c:93:f9:d5:80:f6:35:44:e2:
                    f2:f5:e1:9d:ef:a3:13:db:53:47:6c:49:07:0f:d2:
                    86:ff:78:41:93:f3:8d:91:b3:3f:4f:6d:03:f3:38:
                    65:8e:f2:61:6f:08:4d:8c:4f:8a:5e:8f:fb:af:01:
                    0c:c2:c3:6a:be:67:a8:ba:97:45:14:95:8a:00:71:
                    c9:de:c4:f9:46:b7:0f:67:68:5b:55:7d:21:61:74:
                    e0:15:5a:69:99:21:1c:cf:cb:e4:26:db:93:87:1d:
                    c8:cc:e5:c0:a1:af:a0:22:9a:e0:53:f0:e0:31:ec:
                    56:e4:e7:e6:f6:28:2d:0e:94:5e:6b:7f:f5:05:3a:
                    22:77:61:bc:97:bb:c1:f3:c0:4b:e8:3c:e7:fd:ed:
                    55:60:b7:8a:a0:b7:2f:ca:0e:0a:01:e2:dd:43:53:
                    a1:c8:e2:3c:e6:42:17:10:d3:0f:ba:20:e7:61:87:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:39:A9:F9:09:4B:53:95:8A:B1:FA:20:D0:1E:8E:38:5A:47:F2
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:00:d5:f6:18:d9:73:1e:60:0b:ed:00:19:66:7e:b7:52:
         ae:f6:7f:ad:b8:4b:6e:5b:e2:ec:5c:aa:17:83:16:f9:a2:78:
         88:2b:b2:c4:7a:fd:91:4c:5a:2d:10:f6:cb:79:25:eb:dc:0e:
         dd:ca:e0:bb:c3:0e:04:55:79:94:16:fd:80:50:59:53:95:1a:
         b2:78:c4:f2:70:7a:be:7d:c1:5e:93:ee:43:ba:77:eb:e6:81:
         2c:58:2b:63:65:59:6b:bc:02:88:95:ed:ae:d0:44:72:41:6e:
         15:21:e3:55:48:a0:51:1d:80:27:9b:42:ea:3e:1d:a8:11:6b:
         90:d1:e6:ac:9f:ee:b6:d0:48:31:af:c6:31:ad:d1:8e:c4:90:
         73:60:3d:13:45:48:fd:9c:89:7b:34:4b:70:17:55:0c:4c:be:
         fc:28:62:f3:0d:8e:ba:6c:5a:c7:1d:d3:95:ae:cb:b8:2a:aa:
         77:40:fa:df:55:e9:e4:bc:dc:7f:27:3d:76:88:39:d3:7f:ed:
         ff:12:7d:d5:bc:fa:ba:48:b9:54:f2:b8:de:9f:fc:c7:72:37:
         d6:9c:b2:4b:87:a2:dd:cd:5f:98:eb:27:01:b0:88:b2:6b:de:
         02:3e:fb:52:97:d5:2a:5c:62:df:45:92:ba:a2:f9:d3:b7:d4:
         3c:b7:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:30 2025 by rpki-client