Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          znymARN+DAJOV8C/Ou/Bcnf1Z85QgT1VP6MGdxLlzhY=
Subject key identifier:   E5:E9:A7:5B:FA:11:29:EF:20:5F:0A:88:36:1F:D7:0A:85:0F:BB:E1
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       0196538016E2F3D3C161C4D3F0D5C3169D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0CBB
Signing time:             Sun 20 Apr 2025 14:00:25 +0000
Manifest this update:     Sun 20 Apr 2025 14:00:25 +0000
Manifest next update:     Mon 21 Apr 2025 14:00:25 +0000
Files and hashes:         1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
                          2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: OBTCYIFdnwvsaIOByUlX/o+VacFAyY8SSO8e081Ezgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:80:16:e2:f3:d3:c1:61:c4:d3:f0:d5:c3:16:9d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Apr 20 14:00:25 2025 GMT
            Not After : Apr 21 14:00:25 2025 GMT
        Subject: CN=e5e9a75bfa1129ef205f0a88361fd70a850fbbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:55:22:96:85:cc:8d:09:6c:a6:c0:a3:9f:
                    6e:99:97:30:9c:6c:6a:68:1b:7c:ae:22:b5:71:8f:
                    21:2e:e5:ab:1a:2b:7c:b8:9c:f2:1e:ed:20:7d:6c:
                    c0:54:2a:c7:ef:a9:d1:f7:79:ac:b0:18:8e:5d:2f:
                    90:a8:7a:ef:70:a9:eb:b3:08:36:20:f2:19:76:3c:
                    d6:34:40:e0:2b:6b:62:51:c2:16:c4:e0:b7:d2:07:
                    a2:ef:ff:c1:ac:19:34:5e:ee:9c:52:9a:94:17:fa:
                    f5:d2:d4:ed:37:64:3e:06:d8:6b:8a:b7:36:70:1c:
                    e2:02:91:16:88:ac:13:c5:b2:6f:09:25:9e:4e:2d:
                    3f:0b:cd:5c:96:e3:9e:3a:80:fa:1f:bb:8e:54:b4:
                    7d:68:f7:88:21:1c:49:11:0c:d0:08:78:4a:93:4c:
                    55:5e:ac:6c:72:e7:7d:fb:0a:95:c7:f2:73:b9:63:
                    8a:c6:ed:6d:92:50:ad:82:20:a3:3c:de:e2:ac:3c:
                    b5:97:5a:83:d8:26:d4:10:45:66:19:90:0e:44:23:
                    30:f9:b0:94:e3:9b:69:e3:ad:0b:44:38:a6:57:ad:
                    f2:3d:a0:90:80:05:18:d8:8c:b0:3f:e1:ee:1d:65:
                    4b:21:e6:d1:53:86:a7:d9:bb:e5:d0:5c:09:e2:b4:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:A7:5B:FA:11:29:EF:20:5F:0A:88:36:1F:D7:0A:85:0F:BB:E1
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:81:68:49:b9:d0:0b:ee:c8:88:db:04:12:90:cb:af:56:fd:
         b9:1d:8b:b2:43:fb:2b:63:bf:5c:b5:2e:7f:27:0d:7e:d4:aa:
         0a:e2:95:5f:6e:9a:28:b4:d2:8a:3b:65:b0:d2:dd:ff:a9:5d:
         e7:ca:eb:dc:f6:33:2c:7a:fd:69:09:c2:86:9f:a7:7c:a2:7d:
         17:3c:8b:09:c5:b3:f2:8d:f4:ec:4a:3d:80:3a:58:79:17:40:
         d2:55:f6:0f:48:87:49:6a:01:df:fa:e1:de:9c:ea:c1:a1:bf:
         39:e9:bf:81:80:84:01:52:f1:44:a1:fc:12:f2:77:c7:f3:40:
         8a:21:a5:ab:98:2d:9f:ab:64:a9:33:be:09:58:03:60:c2:6f:
         72:ec:95:a0:22:ce:bc:00:2b:e5:99:c3:f6:73:a3:f3:75:70:
         f3:7b:f9:2a:55:5b:a4:32:ae:ed:ff:73:0b:8e:d4:6d:d7:9b:
         4b:5e:4a:5e:e4:7d:85:ba:ac:af:1e:b6:42:50:8a:f2:a8:4b:
         f5:0c:cc:cd:2a:b6:ab:ea:0c:70:76:6c:15:d5:2d:30:a9:66:
         1f:2b:df:c0:c9:53:3a:27:71:60:1e:9c:cb:15:b1:70:98:58:
         73:4c:dc:df:5b:70:ec:cb:38:1e:67:1c:21:71:b9:eb:70:bc:
         25:30:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:56:59 2025 by rpki-client