Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
File:                     0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft (raw, json)
Hash identifier:          MsxRt9bUMkLV39j4qev7eHkh2Scq3a1vp9jf9WUnTZw=
Subject key identifier:   38:A4:1C:9D:4D:DB:08:7C:47:01:90:A0:DE:9C:83:E6:78:59:B2:3D
Authority key identifier: D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
Certificate issuer:       /CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Certificate serial:       019658A6BAB927C0CEBB9C1D23D110BA34F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
Manifest number:          1501
Signing time:             Mon 21 Apr 2025 14:00:43 +0000
Manifest this update:     Mon 21 Apr 2025 14:00:43 +0000
Manifest next update:     Tue 22 Apr 2025 14:00:43 +0000
Files and hashes:         1: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl (hash: 3rJAgnPA3d27ASaP9206AHP9PBzXF2nllnIEVRFixMY=)
                          2: K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa (hash: WPTwJ7uNCLk7bUU9KEWKxx4fN9uRask9g0nASALMjjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:a6:ba:b9:27:c0:ce:bb:9c:1d:23:d1:10:ba:34:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
        Validity
            Not Before: Apr 21 14:00:43 2025 GMT
            Not After : Apr 22 14:00:43 2025 GMT
        Subject: CN=38a41c9d4ddb087c470190a0de9c83e67859b23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:b2:9a:2b:ab:4c:02:8a:72:38:df:b4:d9:
                    cb:c2:78:97:64:83:e2:6c:29:05:6d:14:2e:6e:39:
                    26:b4:56:8e:0f:bf:c8:f0:72:a5:09:83:cd:e8:dc:
                    dc:a9:bd:60:73:f9:d5:40:e2:5d:06:3a:59:5f:54:
                    98:27:b5:04:1b:dc:82:bc:12:72:dc:1f:d2:72:3f:
                    19:9a:cc:f8:60:f9:03:76:a0:b9:aa:60:46:fc:75:
                    32:ff:a9:6a:f4:39:84:3e:64:4e:65:0f:53:14:9e:
                    b2:e6:a1:b5:30:f3:45:2f:51:76:01:ff:a6:5a:5a:
                    5e:4e:02:68:ec:25:ea:a9:e0:59:fa:4e:7e:76:52:
                    9c:28:65:6d:18:6a:f5:81:2a:cd:82:ba:c5:6f:19:
                    d9:b4:67:31:fa:63:dc:1b:31:69:0e:9d:40:e5:72:
                    66:1c:13:9b:50:ee:98:3c:7b:00:18:96:ed:ec:3c:
                    39:96:77:e4:22:ee:db:f1:a6:b5:45:53:3c:8e:a3:
                    a3:3b:ee:89:d4:51:b3:4d:5f:00:89:cf:4b:7f:c4:
                    bc:1d:c5:6b:21:86:ad:92:b0:eb:be:ca:95:ac:22:
                    f0:ec:5e:5c:85:f0:2d:ee:50:4f:c3:62:1c:c0:1b:
                    62:05:66:a1:6b:2b:b3:42:0f:f0:01:40:f5:1c:15:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A4:1C:9D:4D:DB:08:7C:47:01:90:A0:DE:9C:83:E6:78:59:B2:3D
            X509v3 Authority Key Identifier:
                keyid:D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:2e:2e:27:09:b7:c6:97:ed:18:14:89:53:4c:35:bf:66:
         de:d9:98:f9:f7:61:ac:e4:fd:3d:b6:c8:81:39:af:5c:50:d5:
         e8:31:cc:04:07:df:0f:ab:51:cd:0f:9d:69:5b:ff:90:05:88:
         08:a8:2c:61:9f:19:0e:6a:86:ea:2b:44:7c:69:56:68:2e:e9:
         84:d9:96:36:2c:b4:24:54:6d:c0:68:db:0d:f1:f3:12:52:11:
         ef:35:88:99:4a:40:0e:51:70:f3:fb:51:5c:0e:02:b3:87:6f:
         94:56:61:2c:4c:46:e1:a6:d7:90:0d:e2:39:21:81:b1:5f:c2:
         10:c3:32:b0:32:5c:5e:32:e0:53:58:23:fb:fd:54:4d:ed:04:
         14:e7:16:df:31:58:18:01:af:89:1a:42:74:94:df:bf:ed:11:
         68:ae:20:c0:2d:cc:41:7f:a2:34:74:3c:24:92:2a:68:62:1f:
         d8:22:cb:50:da:bd:56:bf:79:f8:95:1f:15:c8:2b:5b:5e:05:
         8a:69:80:3f:48:f9:f9:07:75:9e:d1:51:52:40:51:6a:93:c0:
         75:1e:e0:4b:46:d5:e8:21:bc:2b:91:bc:fd:3f:b4:da:15:0a:
         41:8b:60:9e:09:54:56:b0:f4:26:61:38:11:77:64:b4:85:b3:
         38:1f:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:32 2025 by rpki-client