Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File:                     J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier:          LC7ItW7S+IRmg6q01fBONeW8iUWjFVZwNMmlFxrriWo=
Subject key identifier:   D7:41:B1:F2:EE:0E:45:89:E5:F2:9E:7D:9C:8B:08:1D:47:E7:D0:7E
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer:       /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial:       0196496AA0B2DB17CA8C88F7198F59F17376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number:          0BEE
Signing time:             Fri 18 Apr 2025 15:00:46 +0000
Manifest this update:     Fri 18 Apr 2025 15:00:46 +0000
Manifest next update:     Sat 19 Apr 2025 15:00:46 +0000
Files and hashes:         1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: FK7ZSgTjhl86AVO4s/PTkECcuidigBOzICD77isOm1g=)
                          2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:6a:a0:b2:db:17:ca:8c:88:f7:19:8f:59:f1:73:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
        Validity
            Not Before: Apr 18 15:00:46 2025 GMT
            Not After : Apr 19 15:00:46 2025 GMT
        Subject: CN=d741b1f2ee0e4589e5f29e7d9c8b081d47e7d07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:ef:da:c3:c5:9d:48:3e:80:85:e8:fd:6c:
                    c0:7d:40:50:dd:19:ac:68:b9:5d:09:dc:eb:bd:95:
                    8d:80:ac:f6:a2:4f:9c:e9:c8:57:80:01:02:bc:4d:
                    29:39:1e:ed:2b:53:77:69:3c:5c:ae:aa:a5:fd:e0:
                    68:c4:23:2f:6f:7d:27:22:cc:c7:bc:b7:d3:ba:19:
                    95:58:91:bb:ec:04:81:48:16:21:fa:27:f7:19:00:
                    57:20:d5:cd:93:ec:91:ba:cd:7e:a9:ce:16:ac:43:
                    dd:f0:d0:0f:50:e7:7f:b3:bd:e6:24:08:f5:a2:cf:
                    ef:70:4e:48:14:30:62:b6:f3:75:ab:d1:f1:9d:55:
                    2b:9f:73:92:94:00:fa:1e:d4:74:39:81:f8:d6:45:
                    aa:82:2e:60:a2:2a:15:dd:e7:91:97:1d:74:6e:e4:
                    ee:01:bf:12:3a:6f:15:38:f6:8e:ec:a2:30:2d:55:
                    24:f7:5d:6b:ef:f3:d6:6e:d7:f1:53:58:2b:54:c9:
                    89:d0:8b:40:f5:6f:c6:6d:34:01:32:5e:9a:0a:7f:
                    89:2f:db:6e:a5:de:1d:18:94:df:14:00:0e:a7:59:
                    13:07:b0:b2:42:3a:7b:87:57:b3:53:31:e8:f2:7a:
                    84:d0:7f:ca:30:d0:c9:1e:11:76:04:4e:37:ef:04:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:41:B1:F2:EE:0E:45:89:E5:F2:9E:7D:9C:8B:08:1D:47:E7:D0:7E
            X509v3 Authority Key Identifier:
                keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d8:f5:4f:0f:db:34:e2:6b:39:2f:fc:e2:e5:57:a2:f3:90:
         b4:bc:4f:91:50:ef:2b:00:8d:ec:9a:ac:0b:0b:5b:e6:48:9c:
         e3:ba:26:39:2b:f3:39:bd:81:23:7d:fa:a0:da:a8:17:ca:7b:
         3e:bf:ba:14:a8:af:1c:57:4e:c4:58:c8:10:4c:ee:3e:d2:f5:
         79:50:53:fc:8b:1c:7c:81:49:e9:33:01:b1:e1:d8:c5:ba:39:
         d0:73:74:65:8d:bd:5b:bc:bf:a4:1d:57:04:33:f8:89:78:cc:
         f2:39:99:a5:ad:86:e7:c7:c2:69:9b:5b:13:fb:b6:93:ef:c9:
         fb:e2:8e:63:64:28:3d:db:3b:56:f8:ec:b3:e8:6b:ad:c6:77:
         ad:2c:06:d1:fe:cb:60:2d:3a:06:26:43:ec:eb:7b:e7:98:a9:
         3a:af:7e:61:33:68:fa:2a:58:d5:c5:2d:bf:4f:6d:38:8e:75:
         26:5b:5b:3c:ff:97:32:ce:7d:1f:bc:fc:23:d7:33:6d:1c:66:
         cb:fa:3d:68:76:6d:32:6a:f6:6f:51:96:4a:d3:e1:be:7b:15:
         37:69:77:3d:92:71:c8:32:29:83:76:1d:56:27:d7:7f:44:ff:
         25:ef:bc:f7:85:01:5e:7c:01:f2:5b:36:34:e3:56:8b:63:3a:
         0c:66:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:45 2025 by rpki-client