Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File:                     j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier:          Tly74lnq+EdWXopgrFsttK7mh/RCNI/qVjW2gM4/g7E=
Subject key identifier:   29:EC:1A:24:BE:CC:78:14:84:30:81:80:82:7B:9D:0E:6B:A1:8D:BF
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer:       /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial:       01962CE16964AB3402B4B730268D58ADC61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number:          030F
Signing time:             Sun 13 Apr 2025 02:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 02:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 02:01:32 +0000
Files and hashes:         1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
                          2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: Zu/+SoQmxWtQ3rRMGTbEsWuRrZy73iSiomcioVwOqiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:e1:69:64:ab:34:02:b4:b7:30:26:8d:58:ad:c6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
        Validity
            Not Before: Apr 13 02:01:32 2025 GMT
            Not After : Apr 14 02:01:32 2025 GMT
        Subject: CN=29ec1a24becc781484308180827b9d0e6ba18dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:15:62:44:77:f8:4a:82:e4:f9:e4:27:55:
                    d8:8b:70:b3:92:85:b5:2d:7e:c2:28:c9:24:cd:8a:
                    7c:3c:c4:7c:16:a1:ff:ff:df:0b:b1:fa:31:32:82:
                    14:29:88:c3:98:37:bf:2f:45:6b:3d:f1:29:35:86:
                    5c:0e:7a:36:6e:f9:84:6f:10:31:32:19:1c:35:37:
                    59:6d:24:af:56:49:40:40:d8:bf:58:b8:09:63:21:
                    5a:2f:6f:8c:72:0a:92:e3:07:9f:92:ab:87:4e:c3:
                    90:ad:28:da:17:9f:dc:e0:e0:6f:7d:56:79:90:d7:
                    2c:0b:ca:52:7c:21:51:e2:81:a9:63:f2:3f:0d:31:
                    53:90:12:6e:ef:bb:d5:6b:6b:fd:f4:b4:5c:65:91:
                    8d:e3:54:db:bc:37:e6:38:29:bc:d6:b2:5f:3a:2d:
                    97:0f:54:1a:c5:7c:78:6d:f2:66:4c:68:2c:f2:b3:
                    c9:6f:5e:d1:6a:e6:2b:27:1b:1d:d1:8f:6b:50:9e:
                    e4:cd:c3:5f:47:24:d1:57:64:07:99:d5:5d:ff:0b:
                    b9:74:72:6b:3d:27:53:dc:db:cf:f1:1c:02:35:15:
                    ad:7f:a4:f7:d5:ee:2a:5b:da:6c:86:50:bf:f8:a3:
                    0c:0f:7a:19:fb:79:d3:ce:df:76:b0:20:44:d5:6c:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EC:1A:24:BE:CC:78:14:84:30:81:80:82:7B:9D:0E:6B:A1:8D:BF
            X509v3 Authority Key Identifier:
                keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9c:47:8d:bd:7d:c9:44:c9:05:0b:c3:36:02:a0:70:9c:13:
         f8:df:2c:06:57:b7:93:03:06:31:31:8d:60:b8:00:28:68:15:
         6e:14:92:a2:4a:f1:f7:e5:a6:b6:00:47:c7:bb:e6:6c:76:5f:
         dd:5f:cb:a4:63:df:70:fe:37:7d:17:30:1e:f6:09:11:ff:b5:
         6e:25:e0:c4:f3:34:85:e6:5f:32:cb:97:1a:92:a5:fa:6c:62:
         5e:9e:77:d0:09:49:36:7b:a4:27:29:f6:80:ff:ff:2e:ec:ea:
         09:77:87:3b:55:75:ae:83:0d:4c:81:c0:16:ec:86:e6:15:41:
         e4:4e:f2:b1:25:8f:31:97:76:61:a6:f3:14:62:1a:77:d5:f8:
         13:11:ed:3d:2b:5c:62:f9:de:ec:fc:f6:a8:c6:46:e4:7d:8e:
         f3:fa:e9:53:1d:c3:b3:f5:b2:8e:4e:0b:af:2a:07:92:d8:e0:
         31:76:6e:8a:ec:94:65:0b:97:9e:fa:40:00:a4:64:37:69:bc:
         b2:7c:44:92:33:95:5c:49:77:b5:a3:34:8e:e8:df:62:0c:68:
         96:d0:cc:bb:b8:24:95:18:01:55:0a:a7:fc:3b:08:1d:9b:41:
         45:e9:dd:58:84:0f:94:81:d7:9f:c9:61:33:02:b9:64:66:c0:
         54:94:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:22:55 2025 by rpki-client