Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          DXCBr8NHahr4wl4ZQE/mhHX9sauO+6K2DjNuA17i0Zk=
Subject key identifier:   2E:6D:55:9E:6B:9C:38:73:C6:18:91:EB:F8:AD:38:61:42:A6:A4:FE
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       019643D660AEB078384B8409AEEC13FEDC50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 13:00:45 +0000
Manifest this update:     Thu 17 Apr 2025 13:00:45 +0000
Manifest next update:     Fri 18 Apr 2025 13:00:45 +0000
Files and hashes:         1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: eYoMQwnhu9H6E5TIA74pw5cVnZMcWtBddX8dk/o4uBI=)
                          2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:60:ae:b0:78:38:4b:84:09:ae:ec:13:fe:dc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: Apr 17 13:00:45 2025 GMT
            Not After : Apr 18 13:00:45 2025 GMT
        Subject: CN=2e6d559e6b9c3873c61891ebf8ad386142a6a4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:79:25:8c:da:de:c1:c6:87:0d:a5:ac:dc:0c:
                    0b:8c:47:56:8a:7f:e9:c2:e4:90:8d:8d:52:c0:d9:
                    21:23:a1:c3:7b:d4:fa:2f:f6:57:9a:d1:95:6d:db:
                    2b:35:12:63:cf:00:c3:aa:95:a3:6e:56:ad:c0:96:
                    31:fa:2c:49:3a:fc:32:55:dd:9e:ac:1d:e1:ff:66:
                    93:b0:72:82:4a:56:8e:a6:a3:9f:33:7b:85:de:89:
                    46:f8:b3:c7:99:5c:d2:be:97:39:86:30:64:85:ab:
                    b4:80:60:98:12:47:7e:f7:f1:fd:26:2f:d6:29:fe:
                    f9:15:7c:8b:45:2e:98:a0:8f:94:08:f3:c8:e3:93:
                    e1:8e:f0:a6:3f:4c:f8:84:58:fe:3e:bd:7a:58:d5:
                    36:82:4e:43:a5:1c:c1:44:cb:ed:4c:c5:d7:2b:6e:
                    f9:ac:08:ec:f6:29:db:6b:39:bf:3c:22:9e:c0:e6:
                    00:1e:0c:cc:07:4d:7d:0f:84:5c:fb:b5:84:14:3a:
                    d7:d5:16:ff:92:43:48:25:54:31:7f:da:0d:1a:f1:
                    15:d6:87:ec:f8:02:53:87:f6:f4:57:d5:e8:f1:e6:
                    9f:ef:5e:b9:e0:b9:2b:29:e7:21:fa:9b:6e:87:63:
                    11:b3:34:ae:9e:04:f9:e1:fb:91:31:30:29:2b:94:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:55:9E:6B:9C:38:73:C6:18:91:EB:F8:AD:38:61:42:A6:A4:FE
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:93:39:48:d8:23:14:e4:3c:e7:02:ed:6e:91:58:08:6d:d3:
         67:1f:66:75:14:21:19:55:04:ff:9c:d8:5f:58:ab:f4:5c:a6:
         ae:50:9e:72:7b:79:96:6f:07:8c:a6:c1:8b:d3:73:fe:49:50:
         6c:c6:d5:57:82:1d:8b:ec:d9:84:4a:61:dc:39:1d:ef:25:c0:
         a8:ff:42:96:85:b2:41:9d:28:41:c8:74:f8:b6:e6:82:da:71:
         01:dc:e9:fe:2d:ea:de:ef:9b:48:dc:d8:39:ce:c3:8b:0b:93:
         30:15:75:89:33:28:30:64:ea:38:2b:3a:8f:78:d6:ae:9a:a2:
         c3:86:7c:ce:74:8a:5d:d7:a2:8c:c7:19:77:23:b5:a0:21:ef:
         fd:15:04:38:5e:9d:4c:62:b1:7c:d5:1a:61:bf:3c:70:22:41:
         c1:dc:d0:20:72:5d:90:c1:c0:b8:d1:0c:cf:98:09:ce:e1:d7:
         89:b5:71:58:e5:c1:ae:fe:2b:7c:64:2f:77:a8:89:40:8c:35:
         fd:78:ce:0c:b3:52:79:ef:ab:ff:33:b0:04:e4:a4:56:1f:ca:
         28:5a:86:a0:0a:36:58:e8:e6:fc:9f:7b:e7:b7:27:69:f5:79:
         df:d8:23:9a:92:4f:dc:2d:d0:a3:9d:22:e7:d2:c1:51:a0:02:
         fe:f9:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:00 2025 by rpki-client