Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
File:                     JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft (raw, json)
Hash identifier:          wsiC3Ai9t9m+0AyexN86wiWK0cY5npMmoJQA4VmfNTI=
Subject key identifier:   ED:53:9D:2F:66:4E:C4:44:6F:68:44:06:D6:78:6C:5C:C5:A6:68:75
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Certificate issuer:       /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial:       01964F6C8384B0A86382092AA14F19487646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 19:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:33 +0000
Files and hashes:         1: 6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa (hash: /Z9kWSQkfFUGliAF6HSs16rOY5YOKoilEvtZIr4dqcM=)
                          2: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl (hash: Q5U5yEhJhKwa7aVAdUB97+yUTgNn9CvbKt+VgCTlKWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:83:84:b0:a8:63:82:09:2a:a1:4f:19:48:76:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
        Validity
            Not Before: Apr 19 19:00:33 2025 GMT
            Not After : Apr 20 19:00:33 2025 GMT
        Subject: CN=ed539d2f664ec4446f684406d6786c5cc5a66875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:3f:3d:ea:9a:10:60:07:c5:f5:37:6d:50:
                    d8:ac:52:8f:8a:63:23:d7:96:6a:89:19:54:27:30:
                    d0:98:58:8f:89:70:4e:36:25:d0:7f:3a:93:31:9b:
                    8d:dd:13:a4:8c:da:09:01:8a:42:2c:ed:24:80:3f:
                    51:9b:ad:f1:e9:47:75:5b:cb:fe:d3:6e:c1:d1:80:
                    f8:9e:2a:8f:28:04:41:bd:16:6a:23:a6:f3:2a:ff:
                    ec:d4:f8:5c:dc:71:e3:f9:0b:42:08:6b:40:9b:a1:
                    1f:98:76:e4:01:f0:13:d9:fc:ec:fa:fd:74:3b:04:
                    b0:be:07:7c:01:59:99:52:a1:a0:73:b1:61:ad:68:
                    67:ec:2b:25:4c:4d:0b:01:36:2c:52:9d:23:f6:92:
                    89:96:ec:04:41:9f:95:0a:a4:f8:d0:cc:ca:9a:87:
                    dc:95:0a:a4:29:a3:aa:fc:83:51:90:a3:fc:94:40:
                    86:d0:81:c1:5e:1e:56:05:9a:29:38:86:97:6b:db:
                    32:23:9f:58:f8:8c:e4:07:c4:53:1a:ea:74:c8:61:
                    be:a6:0c:ae:74:a4:11:e5:4a:d9:9d:34:09:48:4d:
                    8b:c3:16:f6:a6:98:58:4a:89:a9:e2:2a:5f:17:12:
                    74:2e:16:a7:60:34:be:4a:68:ad:da:06:8b:81:90:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:9D:2F:66:4E:C4:44:6F:68:44:06:D6:78:6C:5C:C5:A6:68:75
            X509v3 Authority Key Identifier:
                keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:35:e1:92:f1:e9:7e:a9:99:c0:62:fd:e8:e1:77:42:3c:
         7e:34:82:31:c2:98:77:50:b6:48:7f:9f:58:40:1c:0a:a8:db:
         f4:f1:f3:06:8e:13:a7:a0:bd:ed:33:1c:5e:48:b1:61:89:b2:
         ac:b9:61:69:76:9c:c4:9d:47:f3:e8:2b:38:d3:68:1f:8d:6b:
         c5:08:94:dd:32:61:0c:05:5c:bd:49:7d:7b:e0:b0:b7:2a:31:
         be:97:fa:67:2d:30:bd:7f:37:9a:63:11:d1:a8:65:23:87:40:
         e1:55:e5:31:fb:36:78:07:f1:d2:a3:3b:b2:b4:d9:03:86:96:
         60:44:cd:86:28:0a:db:27:ce:05:3c:eb:b3:db:4f:df:63:00:
         db:95:13:fc:40:22:25:6e:36:38:6f:64:db:29:f9:06:98:90:
         28:cf:cf:24:b1:86:52:63:73:06:77:f7:7c:1b:e1:ab:f3:1b:
         38:e4:1a:3f:46:f3:b6:f5:16:a4:9c:fc:0c:b2:c1:33:4b:57:
         48:b4:f1:e7:e5:0f:6f:54:64:32:68:43:c0:a3:97:b8:32:59:
         cb:16:54:15:e7:34:b5:69:14:65:1e:6b:a9:94:e7:35:ab:26:
         6c:b2:f0:f6:e9:c3:a6:fd:ac:4b:81:ac:e6:49:04:32:73:a5:
         f3:5d:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:10 2025 by rpki-client