Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File:                     JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier:          XakDIYLDixOPbQ5VlLvCpcFuM+Zq546279D6p7xDfX4=
Subject key identifier:   0D:FB:8F:57:A3:FB:5C:AC:DD:85:FA:78:06:09:BD:1D:C6:EE:D1:67
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer:       /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial:       019660CEDABC437D69BA88ABAA6C21B5AB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number:          14FB
Signing time:             Wed 23 Apr 2025 04:01:31 +0000
Manifest this update:     Wed 23 Apr 2025 04:01:31 +0000
Manifest next update:     Thu 24 Apr 2025 04:01:31 +0000
Files and hashes:         1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=)
                          2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: Sah8tcocDBQktQJegdyd+xykLtNZUgj+7Xn1XP5g+90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:60:ce:da:bc:43:7d:69:ba:88:ab:aa:6c:21:b5:ab:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
        Validity
            Not Before: Apr 23 04:01:31 2025 GMT
            Not After : Apr 24 04:01:31 2025 GMT
        Subject: CN=0dfb8f57a3fb5cacdd85fa780609bd1dc6eed167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:16:f7:c0:50:1c:c8:f0:a2:73:8e:8e:4e:
                    7e:0b:1d:fd:cc:5f:1f:32:20:c2:b1:98:49:02:44:
                    52:32:4b:22:17:57:f4:0a:c3:5f:38:7c:ea:13:ed:
                    72:37:12:0b:8e:77:45:11:76:3f:86:c7:e4:65:7c:
                    16:5f:d3:2b:c4:f8:b7:f3:06:ba:d2:7e:3f:e8:f2:
                    ca:83:d2:e7:c8:8b:28:fc:34:f9:51:fe:65:eb:d0:
                    74:ef:8f:35:56:a2:2d:e5:05:f8:a3:85:0c:81:6f:
                    d0:59:09:b3:ff:3e:c6:01:0b:d6:da:3e:16:6d:06:
                    70:16:51:7d:79:23:6e:6e:4b:f4:84:c2:26:db:e3:
                    f8:aa:64:36:19:23:7a:fb:c4:a7:eb:67:5f:5c:20:
                    23:7e:c4:b0:79:66:2f:5b:49:bc:02:a8:77:5f:87:
                    fb:d1:f5:16:df:29:4e:4f:9f:0a:9e:4d:03:d6:6f:
                    13:7e:9c:6a:ad:04:63:61:f1:30:fc:40:7c:3c:c3:
                    d4:40:12:2a:c3:77:a4:ca:33:b2:83:1a:e5:8d:1e:
                    52:74:33:44:ec:87:59:07:28:62:a4:63:af:1a:10:
                    a9:a2:f2:31:67:dd:dd:2f:54:fb:9c:4a:06:0e:97:
                    20:7a:9f:07:92:dd:d7:49:e4:a3:62:86:9b:3a:6d:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FB:8F:57:A3:FB:5C:AC:DD:85:FA:78:06:09:BD:1D:C6:EE:D1:67
            X509v3 Authority Key Identifier:
                keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:63:47:e0:fd:88:9f:45:45:7d:13:05:a7:73:38:2c:7e:
         51:5a:db:0a:75:b9:8b:d3:b1:1b:19:cf:fd:2b:bd:97:c2:81:
         3e:91:85:02:26:1c:b3:64:8e:25:be:a2:1d:64:8d:5b:0a:ec:
         6d:3a:3c:6a:0f:36:7d:d2:d9:76:e2:7f:63:5c:75:8b:be:d2:
         f9:11:16:a5:c5:c3:9f:a7:32:97:02:86:8b:25:6b:c3:aa:90:
         b9:59:de:26:dd:36:2a:76:4b:cf:e6:d7:af:cb:ad:ed:f7:84:
         e0:92:01:78:ff:58:7a:e6:f7:ea:dd:bf:dc:b0:33:36:9f:0e:
         54:8d:1b:24:ca:be:23:13:88:87:7e:1e:07:e4:c4:69:1b:04:
         1b:ac:72:a6:ea:af:bb:72:42:56:6b:18:1f:ce:75:f9:29:7b:
         51:37:a5:33:f8:a0:6b:c7:65:87:6d:27:b4:aa:5d:c3:d1:0b:
         cd:76:9f:1e:87:e7:ac:5f:c5:cd:6c:da:65:a7:60:12:c6:37:
         f9:b8:2c:07:f1:b5:c5:8f:02:62:40:c7:5a:d1:19:71:df:b9:
         e4:68:ad:1d:f4:78:53:22:4f:2c:92:0e:5d:e9:93:5c:f2:6f:
         f8:ac:b2:32:c3:00:24:6b:05:56:44:02:bd:47:87:aa:0e:79:
         b2:6f:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:01:49 2025 by rpki-client