Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File:                     jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier:          uZ2IpZ+HZGGTauHyxpkIHgcuPN8dzzjg0jYLmGSs5do=
Subject key identifier:   79:71:AB:5C:B3:13:F9:00:04:6C:3C:B1:EC:96:4C:24:55:1C:A5:CE
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer:       /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial:       019645C55191C29D8888308ADA1ADAEA97F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number:          14F7
Signing time:             Thu 17 Apr 2025 22:01:21 +0000
Manifest this update:     Thu 17 Apr 2025 22:01:21 +0000
Manifest next update:     Fri 18 Apr 2025 22:01:21 +0000
Files and hashes:         1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: EkOxfBCKxtEO0gt3/33P+KuqtVOlkdwbiV75vLlb4aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c5:51:91:c2:9d:88:88:30:8a:da:1a:da:ea:97:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
        Validity
            Not Before: Apr 17 22:01:21 2025 GMT
            Not After : Apr 18 22:01:21 2025 GMT
        Subject: CN=7971ab5cb313f900046c3cb1ec964c24551ca5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:b7:5a:d6:8f:27:ee:6e:48:d7:28:81:ef:
                    13:90:a4:b4:df:23:4a:26:ce:06:d4:ff:e3:c3:ce:
                    83:f0:04:ea:bd:b5:16:c2:14:62:51:1e:21:b1:52:
                    ea:52:aa:0d:aa:d2:0e:93:1d:d6:ca:31:2a:74:5e:
                    a8:5c:0f:b8:70:2b:c5:85:a4:1b:95:67:ba:38:a0:
                    c0:36:53:15:43:12:fa:52:71:8c:02:ae:39:19:aa:
                    71:e5:43:68:be:86:30:53:27:13:d5:f9:fb:24:91:
                    e0:81:8a:83:42:3a:bb:cc:d4:a4:e8:23:4e:22:b5:
                    63:3a:0e:e4:0f:37:55:bb:ad:02:1e:17:12:d8:56:
                    40:eb:0d:97:86:35:ae:11:ba:a7:a7:c9:69:2c:c6:
                    75:f8:d9:be:94:0e:b6:dd:d3:ff:64:67:40:1e:22:
                    98:6d:86:83:3e:aa:f1:c3:c0:5a:1b:48:48:c7:60:
                    30:04:35:24:8c:84:1f:02:bf:b9:6e:7d:f0:37:2d:
                    da:d0:35:c8:f1:d0:af:8a:b6:c7:33:49:4b:21:96:
                    c3:54:65:77:79:11:32:50:d6:24:31:dc:ab:db:c9:
                    cf:83:b8:89:e8:b3:d2:4e:23:68:1f:b1:4a:70:d8:
                    e4:eb:cb:6b:fe:80:55:f8:55:f9:c1:f9:65:f6:64:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:AB:5C:B3:13:F9:00:04:6C:3C:B1:EC:96:4C:24:55:1C:A5:CE
            X509v3 Authority Key Identifier:
                keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:c3:3a:75:84:d2:48:3e:6d:d6:49:6a:ec:43:bb:76:9b:
         41:52:cb:77:36:3c:63:e6:03:89:39:4c:00:df:4e:d2:42:fd:
         ef:a9:09:08:60:ee:4e:ab:1c:e0:64:bd:a5:22:d8:9e:da:65:
         4c:67:b1:bb:35:38:f6:61:7d:77:21:2d:5d:f8:95:7a:18:05:
         6b:ca:29:08:ea:c4:82:e8:3d:79:f8:87:0f:7d:09:0e:d3:dc:
         55:cd:c1:3e:f2:c5:37:c9:38:6d:8a:de:dd:54:e5:96:7b:44:
         3b:7e:92:78:14:f4:f3:4a:19:aa:f3:c6:f1:a5:7d:5e:be:1e:
         7a:f4:fc:04:8e:2d:ef:d4:e7:e6:c9:5f:dd:cb:30:90:3c:2e:
         55:41:88:61:71:2f:ba:a8:38:a6:c5:95:5d:65:37:f3:c1:d0:
         e1:9e:18:17:9c:56:24:26:d1:1d:c1:fe:2f:72:3d:3b:2e:55:
         d4:1a:c6:dc:a6:7e:a5:55:54:75:07:7b:59:ad:a1:0c:52:7d:
         3d:16:74:8d:ab:0c:dc:40:14:23:56:e4:bf:b0:6b:4c:8b:6b:
         5f:8e:f1:14:37:80:bd:0d:b0:87:17:49:8c:74:2f:0b:d0:df:
         9d:f8:04:1f:2a:c9:f9:df:38:68:e5:17:75:b6:17:5a:6d:96:
         aa:04:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:03:19 2025 by rpki-client