Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          d3vIKweVB/I0hQ//SOKryiaeLqpnHamVn5vWMygHiLk=
Subject key identifier:   5C:45:4E:AB:EE:8C:59:92:7C:B6:20:E5:75:3F:65:39:2B:6F:37:49
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       019651C8E2EE0684E58A058333130C729130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          022B
Signing time:             Sun 20 Apr 2025 06:00:41 +0000
Manifest this update:     Sun 20 Apr 2025 06:00:41 +0000
Manifest next update:     Mon 21 Apr 2025 06:00:41 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: Xaczyq/wvh6xBduzsdxL0zvStPYi0ii8xXP2UQKe5c4=)
                          2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c8:e2:ee:06:84:e5:8a:05:83:33:13:0c:72:91:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: Apr 20 06:00:41 2025 GMT
            Not After : Apr 21 06:00:41 2025 GMT
        Subject: CN=5c454eabee8c59927cb620e5753f65392b6f3749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:17:c6:5d:b2:28:0e:a8:2e:fc:32:38:89:
                    c3:4a:fb:c3:dd:dc:50:22:c6:46:52:4f:fa:aa:7b:
                    cf:ae:2b:16:02:ae:29:07:d9:89:bf:f4:d9:b6:b5:
                    55:a5:2e:8e:ef:f0:ce:26:05:d1:ee:09:f0:da:73:
                    5d:99:a0:d6:66:42:80:b4:84:2b:09:13:4e:09:97:
                    d2:f8:2f:6d:22:f2:97:17:8a:3f:35:c4:3a:75:60:
                    6e:47:06:84:11:13:d1:11:30:c0:f8:e1:db:f3:e6:
                    84:b7:2e:01:b7:e9:d8:a8:f7:7d:24:f0:98:39:f6:
                    f2:37:37:19:08:aa:bf:11:91:bb:ae:8d:60:cf:90:
                    7f:0f:47:6a:ff:ef:d9:56:67:99:45:2a:ef:8b:ce:
                    90:d7:4f:d8:34:13:00:ad:2b:52:98:8a:43:e7:40:
                    81:f5:4d:c5:1d:0e:a5:58:ae:3f:87:38:e2:cc:7f:
                    aa:7d:c3:22:97:0d:e5:4b:22:30:14:34:c3:63:ba:
                    d9:5f:6b:a8:3e:36:c8:eb:2f:9e:c4:53:50:93:2a:
                    e8:62:e3:1f:07:3f:63:9f:52:38:c6:e3:15:18:eb:
                    61:55:c7:f5:a9:b5:09:9b:cc:6e:4b:c6:07:99:c2:
                    93:cc:3c:66:52:76:61:c1:04:41:4b:d3:fe:7a:0a:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:45:4E:AB:EE:8C:59:92:7C:B6:20:E5:75:3F:65:39:2B:6F:37:49
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:45:43:c3:20:cb:06:f5:ca:64:bf:50:92:41:8a:79:78:c4:
         df:5e:fa:3e:51:70:cb:21:cd:5b:7f:4f:2b:bc:60:f8:d9:7a:
         5a:13:57:f6:ae:3d:e2:90:da:d1:53:66:a5:b8:8a:ca:f4:70:
         39:c9:a6:98:37:75:46:fc:1e:97:1a:05:40:a7:c6:a2:ce:6e:
         9c:4b:cd:a5:6b:88:59:ef:10:ea:61:3b:9d:b3:69:f4:3c:d3:
         f7:13:5b:a0:d2:ab:ef:58:fd:df:e9:5e:41:5c:fe:12:8f:ce:
         58:96:b9:1e:7f:5f:61:36:0a:44:fa:d5:12:60:0f:4a:70:74:
         ac:f6:7e:45:7e:d2:62:8d:3a:54:0a:e4:62:e4:14:ae:19:83:
         f8:d0:ed:5d:6f:28:6e:08:e9:bf:9f:50:4b:c8:a8:f1:d3:e2:
         0d:e5:02:db:3f:19:46:50:73:54:fd:e5:a5:3d:7c:5f:96:0a:
         2c:7d:33:e4:c8:6d:cc:d4:c1:cc:65:bb:d1:6f:e9:eb:52:cf:
         53:bb:4f:46:56:91:d4:5a:59:85:ee:07:db:45:46:6b:e2:e3:
         e0:3e:ae:f7:9b:b8:0c:19:77:34:56:fb:07:49:98:48:f6:e9:
         99:92:7f:bf:43:90:01:16:34:d5:b2:ab:e3:4b:40:cb:d1:bd:
         4f:3b:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:13 2025 by rpki-client