Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File:                     jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier:          ENtZb6sQV+xQwmuI3kYE2B1/9ZvUsiEaGxIWwSRKXEI=
Subject key identifier:   9D:E2:F8:14:BB:28:CA:58:80:FF:81:1D:B3:51:C8:F0:40:8E:61:A9
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer:       /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial:       019649D8000719008522BBFE406A6FDE6B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number:          1266
Signing time:             Fri 18 Apr 2025 17:00:14 +0000
Manifest this update:     Fri 18 Apr 2025 17:00:14 +0000
Manifest next update:     Sat 19 Apr 2025 17:00:14 +0000
Files and hashes:         1: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (hash: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=)
                          2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: BFXKa0TVkDcohNxCzh5V5vjHljByANAyqq+39a/nvDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:d8:00:07:19:00:85:22:bb:fe:40:6a:6f:de:6b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
        Validity
            Not Before: Apr 18 17:00:14 2025 GMT
            Not After : Apr 19 17:00:14 2025 GMT
        Subject: CN=9de2f814bb28ca5880ff811db351c8f0408e61a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:61:35:b7:4e:00:93:9c:2b:4a:4f:f5:38:
                    f1:d6:4d:3c:54:0b:d1:9b:3f:69:6c:51:23:37:ae:
                    25:51:d0:f8:8b:66:7b:db:85:d6:2a:53:d1:07:40:
                    22:34:e3:99:26:72:93:06:7d:f3:a3:3a:9b:7d:b2:
                    6b:1e:fb:cf:2d:68:fd:e3:7b:3c:d7:e7:e4:96:08:
                    3a:f9:36:9c:74:07:fa:2a:c2:f7:b4:4f:51:6e:8f:
                    8e:02:fc:41:46:37:71:ab:c7:9d:e4:2c:f9:93:dd:
                    3d:ec:e5:46:41:07:9c:86:04:c5:3b:2b:c2:5c:68:
                    cb:ac:96:ed:d8:83:3c:8e:39:e4:ba:66:39:13:e4:
                    1c:14:6f:ab:5f:2c:68:0e:c8:0b:d5:0c:89:b8:0d:
                    39:d8:4f:05:89:bf:15:fb:b7:5a:c7:ce:55:b8:7e:
                    ce:87:99:42:53:2a:99:a2:bc:c9:ea:13:a2:11:c4:
                    b6:cc:94:9f:1c:fc:c0:f9:f2:25:40:bd:aa:e9:f4:
                    8b:46:fe:8b:82:ff:f6:f9:b9:a3:33:40:fd:bd:b0:
                    24:17:79:67:58:01:43:7c:0a:70:89:1b:c4:e1:65:
                    5d:1d:64:f5:ca:b2:60:8f:cd:3f:79:0e:ec:c2:2f:
                    c2:ac:5b:aa:1f:9a:30:3e:82:d7:71:0b:2c:50:14:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E2:F8:14:BB:28:CA:58:80:FF:81:1D:B3:51:C8:F0:40:8E:61:A9
            X509v3 Authority Key Identifier:
                keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:b8:d0:14:1f:6d:5c:1c:19:28:5e:b0:12:4e:24:0e:4b:
         d6:d3:da:67:6c:d4:2b:4f:db:56:81:c8:57:f3:42:f4:d8:91:
         53:17:dd:ee:8f:64:f1:59:ce:0d:86:05:09:0b:ee:25:0f:f2:
         cf:34:f9:53:eb:7c:bd:17:e1:2a:81:70:df:9a:d8:cb:14:d9:
         4f:f6:6d:a3:ec:21:d5:9e:94:ae:9f:94:54:f2:d7:e9:ec:eb:
         a1:38:23:f8:a2:05:a8:dc:28:a0:d7:80:9f:54:0f:83:07:8d:
         36:99:c8:3a:3b:cf:ad:92:f5:c9:93:5e:b0:de:1f:11:bb:dc:
         04:72:16:36:07:ed:99:8d:b9:33:cc:bf:cf:eb:fa:73:f3:d4:
         5f:dc:c6:42:ee:9d:0a:c0:cb:a7:cf:7c:af:96:b2:b0:2f:45:
         a9:da:72:41:b5:b5:8a:0d:8a:3b:45:f7:6b:f7:79:47:5c:11:
         e3:e6:d9:30:59:e4:5a:b1:d8:8e:95:b8:29:2c:fa:75:70:70:
         47:61:a3:3f:1f:b2:94:cd:4c:20:d6:f8:4c:f7:bb:f5:28:8f:
         d0:ad:9b:b9:1c:6d:54:31:f2:71:f5:46:fb:da:df:d9:00:ab:
         15:a8:53:65:e5:bc:be:8d:e9:eb:ec:44:70:fd:2c:3c:41:42:
         5d:8a:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:31:54 2025 by rpki-client