Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          MGTwZQkIMBCaksOWktl/jEeqQCB9VGCWERdR43MLs4U=
Subject key identifier:   F9:1D:5D:63:8E:CB:D7:90:30:C5:BA:AA:43:DE:E0:8C:B4:D4:AA:6F
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       01966850949E4B0FD6F5095C9E510DD3F295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          155E
Signing time:             Thu 24 Apr 2025 15:00:33 +0000
Manifest this update:     Thu 24 Apr 2025 15:00:33 +0000
Manifest next update:     Fri 25 Apr 2025 15:00:33 +0000
Files and hashes:         1: 3I4C6Ngc7fDqENlrP9MQ3movJoI.roa (hash: CozQlTp6j6rye5pcJ/4KWGyOSARgztmDQg7ndMeU3mw=)
                          2: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: x9UOoY6KfzicwbMcMq2+7X1ZBS14oGap8uDg0NwZJf8=)
                          3: gzLs6Xol47tKfjPqLr4RNwy_8T0.roa (hash: l9a7Iax1Z9uUS5+rKaniwvZo+UX2Ws1F66M5mMABVgA=)
                          4: ltEaGqqR5V2agcdgtn5kLPvvV_A.roa (hash: BED/AkYprzbIKWuZ2W+MpRKCzn0PaiCI62eNClbW8Bc=)
                          5: mLsh4sGtoHIqeKrfN3jXMMLu4k0.roa (hash: m/Mvmk/5mQxCIOXX60XJtwJ8Xe1PRKwFBcukoCDP1Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Apr 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:68:50:94:9e:4b:0f:d6:f5:09:5c:9e:51:0d:d3:f2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Apr 24 15:00:33 2025 GMT
            Not After : Apr 25 15:00:33 2025 GMT
        Subject: CN=f91d5d638ecbd79030c5baaa43dee08cb4d4aa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:37:e4:b3:22:0f:a5:8b:70:f4:a9:a8:16:
                    e0:5b:cb:c4:d1:52:9f:5a:da:b1:e3:9f:57:17:80:
                    8a:1a:46:d4:22:26:88:fe:5e:ae:4f:6a:2d:7c:a7:
                    93:0e:e8:f3:73:80:76:d3:01:00:c6:5d:18:53:5e:
                    54:63:c7:a8:9e:cb:25:e1:ae:67:a8:61:81:ad:7a:
                    1f:e2:90:88:2d:a7:80:09:f2:7b:45:fc:6f:b3:8d:
                    e2:29:3c:48:dd:1b:0d:71:40:3d:de:89:89:fb:27:
                    ea:11:ac:71:9a:e4:0a:1f:c2:ce:fc:8b:cf:55:92:
                    95:73:0e:33:7e:d7:b2:70:7d:92:9d:48:ae:eb:57:
                    1c:b0:7c:91:85:e5:ba:cb:71:2c:13:ba:8b:34:d7:
                    5c:54:6c:6d:c8:1b:7b:3c:8b:2b:d0:8e:3f:d2:a2:
                    b5:0f:0b:ba:12:c9:3a:46:be:e1:c6:97:f0:37:73:
                    4a:30:55:b3:69:71:9a:c9:a6:f6:1d:42:6c:52:57:
                    04:8b:e2:42:48:f3:9b:6b:e6:17:f8:aa:d4:95:78:
                    68:5f:29:3d:cf:ec:f5:60:6b:04:7a:9b:29:64:11:
                    d2:af:bb:47:7e:63:03:4d:59:88:15:36:ee:33:a9:
                    df:2b:34:bd:44:17:9b:ab:60:14:69:4f:e0:92:db:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:5D:63:8E:CB:D7:90:30:C5:BA:AA:43:DE:E0:8C:B4:D4:AA:6F
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:55:2e:c2:f5:06:23:9f:e8:2e:f4:59:c3:e0:9f:00:50:3a:
         39:a2:a1:d2:11:27:8c:aa:13:36:fd:4d:83:03:65:fd:2c:7e:
         f5:f9:f0:33:c9:91:62:c6:60:33:90:33:1d:76:22:f4:03:89:
         36:62:3a:40:45:a7:13:a6:52:50:8b:b3:39:a7:c2:e0:99:e1:
         fc:e1:c8:ec:64:5e:a2:4c:a3:38:a4:a7:30:49:59:54:a9:fb:
         1d:bc:01:0d:ae:1c:ef:1d:04:5f:2d:d2:7a:5a:e2:94:a4:3e:
         8b:49:c5:53:fb:d0:93:14:c1:4d:74:4d:e6:2e:43:b1:6a:84:
         de:3d:72:89:5b:fd:6e:5e:a8:57:fd:19:47:d1:1d:21:a7:09:
         9f:e8:a6:72:49:a0:19:96:07:9e:57:33:15:f8:eb:0c:30:34:
         50:0e:2b:b2:98:87:45:79:42:63:7a:14:a2:5d:fb:49:11:f6:
         2f:b3:40:35:da:ef:fa:b3:b7:08:60:35:18:bc:ca:ba:b4:70:
         b7:80:0d:71:92:55:f4:26:54:fc:4f:db:b5:55:44:86:16:18:
         2a:c1:41:7a:66:cf:3c:a4:dd:ae:22:e0:54:4e:77:79:c4:4b:
         14:d2:a2:97:2c:4b:2e:ee:28:7c:09:b8:83:c4:32:7b:89:03:
         e2:4e:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:04:18 2025 by rpki-client