Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File:                     JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier:          U+TWzkZSTd5uQNtCi/sFluDxxWYHc13GNUJCKQ3IOyM=
Subject key identifier:   39:13:AB:3F:66:0A:5C:F5:DC:6D:FB:D0:F0:C6:B4:0C:81:DA:7D:06
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       01963763EBBA489165DBA89772D88D5CFACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number:          14EE
Signing time:             Tue 15 Apr 2025 03:00:17 +0000
Manifest this update:     Tue 15 Apr 2025 03:00:17 +0000
Manifest next update:     Wed 16 Apr 2025 03:00:17 +0000
Files and hashes:         1: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: T211msyN1EeAHySB+FBRpGAJpEasjSZQiSLu1LFBzbE=)
                          2: aBjEn09c9jlvq3tyQ6uQKbAuHow.roa (hash: k2Il8Q6rfTX6EoDV8IvCybU7+NvXuouKuK8ZTUniptc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:37:63:eb:ba:48:91:65:db:a8:97:72:d8:8d:5c:fa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Apr 15 03:00:17 2025 GMT
            Not After : Apr 16 03:00:17 2025 GMT
        Subject: CN=3913ab3f660a5cf5dc6dfbd0f0c6b40c81da7d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:de:20:86:b3:82:ab:44:28:d7:27:d5:d6:
                    2a:39:b0:c4:47:97:32:e1:8a:37:a1:8c:6a:dd:2a:
                    be:31:92:96:e9:9c:d8:11:4c:e9:9c:b2:82:91:bc:
                    76:a7:aa:cf:49:9b:19:c2:52:60:fe:34:b1:d4:55:
                    84:49:d8:58:96:ec:12:6c:b6:06:84:fd:b1:30:c0:
                    a9:c8:0f:da:18:8f:01:15:90:ab:36:8b:23:ae:e1:
                    a1:50:c1:c8:91:88:9d:e8:ff:62:88:c0:32:90:24:
                    f7:b1:51:32:1b:d9:8a:5e:b0:2b:d7:40:de:7a:c9:
                    a9:c7:73:12:a8:54:f1:7e:2f:e6:61:f4:97:26:46:
                    c9:21:8d:49:56:a6:67:71:20:d2:73:59:b2:a4:59:
                    88:43:95:ad:19:34:f9:84:5e:66:51:90:8b:71:ce:
                    7c:19:02:91:a1:8e:f8:73:7f:a6:a0:e6:5a:c4:54:
                    40:ef:59:fc:44:ef:17:95:c1:c1:22:1b:94:3d:91:
                    a5:2b:78:a5:6a:9d:ed:3f:fb:e8:d1:98:bb:2f:ef:
                    1b:29:ca:11:48:5a:42:51:f8:a7:c7:70:bc:68:1f:
                    b9:26:d4:9a:73:d0:c8:a6:0d:79:ed:e4:ab:0d:d7:
                    58:aa:74:99:af:77:e8:74:44:4b:ea:17:ca:62:37:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:AB:3F:66:0A:5C:F5:DC:6D:FB:D0:F0:C6:B4:0C:81:DA:7D:06
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:d0:3c:07:76:af:05:e6:05:12:13:7b:b5:68:6d:b3:db:
         91:a4:2c:79:0b:bc:b9:db:88:11:09:ea:d5:33:34:fe:ca:d1:
         26:68:4b:5c:3d:85:4e:36:1f:47:64:d4:b7:df:90:19:83:cb:
         db:cd:ea:75:d0:9d:be:07:76:7c:51:bf:83:85:e4:17:60:73:
         97:f4:ad:8e:ec:07:b1:21:c9:95:8b:f2:48:a1:cb:48:20:57:
         3e:62:a2:5a:ab:f5:39:05:59:26:1d:4d:93:91:24:d4:e1:6e:
         4b:e9:cf:e8:88:6a:72:bb:33:c1:16:92:b3:bf:c9:83:2e:18:
         52:84:f9:13:8d:0c:6e:21:2b:26:1e:e3:e1:9c:a8:79:59:11:
         50:85:19:ba:7b:3d:39:1b:5e:39:28:8e:f4:75:7a:45:a6:af:
         6c:97:21:80:1b:05:14:e3:76:dd:b9:3a:05:60:b8:e9:f7:89:
         aa:16:2f:0d:98:76:30:c5:f1:f9:96:07:f3:10:cd:11:17:c4:
         b1:5e:0f:95:86:8c:36:e9:fc:f1:2b:34:a5:5a:d6:a4:88:c8:
         4c:54:f2:c5:c4:07:14:be:53:40:87:91:31:d4:cf:b7:1a:90:
         65:d6:f1:5b:b8:1e:a6:0a:c9:8b:37:58:bd:e2:f9:26:80:f0:
         b9:c8:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:42:57 2025 by rpki-client