Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          uxvXBmSCvfSQkg1zwAwiesFl1n/f2ygEDbujMMuQ+3c=
Subject key identifier:   32:4D:4F:CB:62:B8:49:A6:33:78:14:7F:28:F4:A0:87:26:31:5B:4D
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       01964FDAB00258BFBDC52FB34BF3DB074583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          05D6
Signing time:             Sat 19 Apr 2025 21:00:54 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:54 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:54 +0000
Files and hashes:         1: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: faOdhG4qTAv1OSteLe101NwGSD8NvrEc/dK6Zryr1NU=)
                          3: rDlkyigziSazpq7KkBehs1Ktw-g.roa (hash: 0blcMDi8SQKGoP7zdqimF2o0peaDeYPg+Ie2kFh43K4=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:b0:02:58:bf:bd:c5:2f:b3:4b:f3:db:07:45:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Apr 19 21:00:54 2025 GMT
            Not After : Apr 20 21:00:54 2025 GMT
        Subject: CN=324d4fcb62b849a63378147f28f4a08726315b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:c7:33:37:8d:3a:1e:0d:e5:b4:6a:15:07:
                    1c:53:0f:2e:b3:60:48:dc:81:30:f0:4e:b5:ab:63:
                    65:3c:ac:93:f8:81:e3:6c:50:fc:3b:72:fe:d8:f6:
                    84:17:26:2a:c9:21:dd:ef:44:48:60:65:35:9f:aa:
                    46:65:73:63:24:fc:fd:f1:7b:df:a7:01:9d:88:b5:
                    46:f7:fa:f6:fe:bd:35:1b:55:dc:a2:0e:94:90:12:
                    72:01:95:81:b5:1f:ed:88:15:ef:47:c0:4c:80:5e:
                    d0:5a:75:e0:cd:29:7d:b1:2a:f0:15:ba:03:8b:f5:
                    7c:0d:39:40:23:1d:0b:a1:c6:ae:0e:e0:4f:ec:34:
                    73:0f:ad:f1:13:e0:fd:b9:67:f3:5a:e9:ed:00:58:
                    c0:c0:07:e0:15:43:ea:7f:b8:e7:28:59:d5:52:67:
                    23:f3:c9:f6:97:f9:3a:3a:74:f7:94:fa:c7:78:67:
                    f9:d2:c4:80:49:0c:44:60:7f:d9:eb:44:bb:e2:98:
                    fa:de:da:72:c2:10:b0:64:ba:f8:a0:2c:23:5a:63:
                    c6:72:aa:cf:48:3e:fc:41:f7:80:fe:37:ab:32:44:
                    5e:04:36:ad:af:98:a1:7f:09:cb:73:92:dc:72:e1:
                    3e:d4:67:0f:d1:6a:f3:68:b2:d0:53:1e:39:9b:36:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4D:4F:CB:62:B8:49:A6:33:78:14:7F:28:F4:A0:87:26:31:5B:4D
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:fb:52:f3:8b:0f:c0:7a:05:2f:c0:8f:28:77:24:d5:dc:a6:
         0e:ec:48:6b:81:10:5c:8a:4b:06:4b:a5:4f:2d:53:99:e5:40:
         8f:e0:b1:3f:05:da:47:e8:69:5d:95:a3:c9:9b:75:68:a9:23:
         18:f6:2f:aa:9d:fe:1f:02:4c:fb:c5:20:c9:6b:37:2a:06:f0:
         7e:91:da:be:4d:b9:ac:9b:13:56:05:d1:bb:28:00:2b:00:15:
         0f:b4:4f:81:c6:3e:a2:62:6e:87:68:d7:d7:80:68:e6:52:d5:
         2a:2d:9f:1d:b0:48:1a:eb:5f:b0:a3:47:8e:3d:5f:c8:7e:2d:
         cf:57:a2:03:9b:a4:32:cb:7f:7f:5f:b1:d6:3f:3a:07:d8:84:
         f5:a5:bd:0d:3a:af:62:31:56:87:55:fe:9b:cf:13:71:92:7b:
         f8:18:5b:8d:17:85:aa:b5:06:16:54:79:55:ee:61:37:2a:61:
         1c:e3:3c:18:19:89:fd:d0:d8:ad:40:e9:74:9c:56:74:50:b1:
         22:08:44:eb:3f:a6:51:51:55:2e:3f:3f:7a:ef:24:a0:d7:23:
         13:c1:85:69:ed:9f:aa:d3:30:0a:a5:4f:2d:23:63:a2:4e:d8:
         3d:5e:a4:4a:ef:77:05:a2:7b:4f:af:14:0b:51:72:b5:fb:99:
         df:7d:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:29 2025 by rpki-client