Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File:                     JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier:          jWf0XwDpcjZzUls2362lD2s2j9QSuT1wl+B4QY7ARPo=
Subject key identifier:   0C:3D:DD:50:81:70:B7:9D:EA:87:D2:C8:03:56:EB:71:55:CF:E0:F4
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       019645C47110FB72AAA9045B7B0C5A3A183F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number:          14FB
Signing time:             Thu 17 Apr 2025 22:00:23 +0000
Manifest this update:     Thu 17 Apr 2025 22:00:23 +0000
Manifest next update:     Fri 18 Apr 2025 22:00:23 +0000
Files and hashes:         1: 2ilYjSsUyg0i-EOl5hfGDwVlKj4.roa (hash: p8QjhotvBCdHOmxF54vBU0ccs9eUkA9Pdd1QgMIFymw=)
                          2: 7qLq7aTWNHbxDovy4cDmNUB81ok.roa (hash: 45Whc0u7xWoUwZs881UVCIUC5K/sXDTJpbpU9JZ3Gm0=)
                          3: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: CA7kO/lyeHIdseeKeksQYimZip80Xrf/HEXfSNyDQtg=)
                          4: Jf85FwwWGAMm_y1gyBMRf8ZylY8.roa (hash: hqLNtg3bR55HcspgRfJxtmFSYZlPqsuiPGUD5+xKsFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:c4:71:10:fb:72:aa:a9:04:5b:7b:0c:5a:3a:18:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Apr 17 22:00:23 2025 GMT
            Not After : Apr 18 22:00:23 2025 GMT
        Subject: CN=0c3ddd508170b79dea87d2c80356eb7155cfe0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:eb:56:80:fc:40:b8:8c:e3:2d:97:0e:8a:
                    a4:c2:c9:f4:44:90:af:10:c5:10:7e:8a:f8:84:48:
                    7d:bf:1c:42:ce:de:11:e1:75:3a:3d:a9:bd:a1:a1:
                    74:76:db:b7:35:71:10:19:11:78:36:3f:a5:ec:d6:
                    9c:4e:c9:73:24:64:c0:60:51:37:aa:d4:31:6b:4e:
                    7c:eb:50:da:fb:d1:be:9d:75:f7:49:d1:64:4d:c5:
                    5b:b1:db:93:02:9e:ab:4b:d4:51:3f:4a:c9:7b:c5:
                    90:2f:b2:07:c8:19:63:58:48:4c:23:fd:05:e1:a7:
                    5f:7c:89:42:73:04:a1:c3:1b:22:b2:36:a3:51:23:
                    99:eb:9d:68:d6:ff:17:99:b5:f0:c5:90:aa:1c:3e:
                    41:fd:08:88:5f:2e:fa:5a:f5:90:75:c6:4b:8f:05:
                    49:a0:a5:90:a8:37:41:22:cc:ae:3b:0d:9a:b9:bd:
                    c1:b5:75:06:c6:ec:92:52:4e:da:0b:cc:80:8c:87:
                    aa:3a:5b:e9:00:75:93:5d:a5:70:27:15:c5:59:f1:
                    a8:2e:b9:23:d2:ab:25:62:fc:c7:eb:b8:81:ec:e9:
                    90:60:be:30:f3:99:2e:21:42:39:42:23:13:72:3a:
                    b9:40:c5:55:14:af:48:e0:12:fa:02:c0:71:b0:f1:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3D:DD:50:81:70:B7:9D:EA:87:D2:C8:03:56:EB:71:55:CF:E0:F4
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:c6:fc:58:4d:b3:c5:5b:ad:7b:b0:14:c3:74:f7:b9:4f:
         c3:9e:ff:1f:d3:0a:73:d1:f9:6e:b1:1c:b6:f5:5a:5d:c3:fc:
         cb:1a:ee:3a:95:d2:31:1d:0c:fc:31:a0:6a:21:d6:a1:95:1d:
         d5:24:3c:a2:1f:0c:cf:85:24:9e:3e:a8:5b:8f:38:9c:b0:c8:
         18:32:cc:81:ec:86:d4:e1:7a:6b:51:83:0a:17:84:81:03:27:
         25:4f:13:31:58:b4:95:e2:1b:41:19:6f:ff:52:d4:dd:f3:3b:
         4d:7d:0e:b0:4a:ab:f3:91:25:02:b7:55:19:23:ff:c6:b4:41:
         b4:91:ec:d3:13:78:99:68:11:71:f1:d7:13:85:55:1b:00:2f:
         d3:25:48:3d:03:db:5a:0a:5c:a9:9e:1d:35:3e:9a:f1:d7:28:
         ca:18:fd:1c:31:4a:f0:49:c9:ab:d3:02:e1:45:0c:74:8e:34:
         51:4b:7f:ba:d3:4e:d6:f1:75:b8:85:29:e8:c3:42:32:c5:93:
         3c:c4:a3:d6:81:5a:db:f8:9c:e9:97:ae:85:c0:d6:46:c4:c6:
         9f:8d:9b:f5:97:b5:14:bc:be:e6:0f:36:2c:4d:8e:4d:d6:cd:
         c3:82:69:54:93:e7:fa:02:fd:4f:93:ea:d2:0e:0d:5c:56:ab:
         8b:49:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:39:46 2025 by rpki-client