Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File:                     JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier:          wdGt8+HwrdDm6NUCtWaVsa4Pnh592OF+QNjwkNmgZE0=
Subject key identifier:   5D:C1:E4:2E:98:D0:14:8B:BA:07:83:27:B5:5B:C2:16:4E:84:1D:A1
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       01960CE81F88BEE3DD36B4EF71EA715688C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number:          14E4
Signing time:             Sun 06 Apr 2025 21:01:01 +0000
Manifest this update:     Sun 06 Apr 2025 21:01:01 +0000
Manifest next update:     Mon 07 Apr 2025 21:01:01 +0000
Files and hashes:         1: 5QHAsQaUMAZIN1n6-pxK5K91a3o.roa (hash: AkFm08Afa/vhsA4n14Vo1RO04eK70G8MZ4yY3wwGuE0=)
                          2: 8__4CSysP9ewpgBTT4RjqVsmoag.roa (hash: 6Vh8B3R0vOjHWshOtYFXsA9V6+E+ovifthcqX5LH5AY=)
                          3: H0T0W0xTBnh83HIo130u3lMx0z8.roa (hash: EnvalVHH06GgGOutMJeFEacXQsa/Sw9Z2kcRlIH1HNM=)
                          4: HUjFpkDkE9aRW0oytyocQloUy9o.roa (hash: mq8+b8jC5/4J8LuF6BxD7TMcx7W9gEcExeXo6od8rqM=)
                          5: Hsa9B01wYzQuVgyvO2-bkNj0_wY.roa (hash: DdezXk60i94ZF2OulsTAeuZBcNuFWBHgNv3S98ro9B8=)
                          6: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: WS4F/AkBBNUJC1VSRGJJmbdGxzEV1ygYbfBOfhUPRBU=)
                          7: KzhPBfzs40BMsYPfoaIPI29P5yo.roa (hash: 95zWAjg8ne0IL6qdhZTUSVplXSRiePGkqfZ93e5qlhw=)
                          8: dwkhaAERSm6uhMOz5nNpmKDQ82E.roa (hash: LJZ+/v8dXlJSBiFG/37Ys6az1iYi7KSm0TcOpKjllW4=)
                          9: uZ2FUQIy4-BglbDIW_Uj_e4ZY2c.roa (hash: cy6Tl3qgTi1iMP0dxF44E6e2zGcGBO8MstsvupGrtLU=)
                          10: wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa (hash: hbL9mJeeAk3YwSAmT6WsY7K2Gkz/S4wOy9jWJcZcNps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0c:e8:1f:88:be:e3:dd:36:b4:ef:71:ea:71:56:88:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Apr  6 21:01:01 2025 GMT
            Not After : Apr  7 21:01:01 2025 GMT
        Subject: CN=5dc1e42e98d0148bba078327b55bc2164e841da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:b3:b0:b3:25:38:c8:68:d7:12:90:a0:fd:
                    60:96:ad:1e:1a:5a:90:95:26:9d:bc:28:49:e9:8d:
                    2f:06:cf:19:90:0c:37:a8:11:dd:8b:bf:15:a3:d8:
                    ad:0b:23:ed:97:82:16:23:4f:36:31:37:04:4c:93:
                    c1:e7:07:d2:e3:1f:c9:6d:3d:62:cc:b1:d1:55:24:
                    cd:35:2d:29:fb:76:9f:04:00:aa:dc:a9:7a:3a:11:
                    39:11:64:5f:81:2f:b8:2a:1e:8a:31:98:f0:4c:e2:
                    55:1b:56:de:06:b1:60:2a:ff:1f:0f:72:e1:c3:8b:
                    28:11:59:55:e1:80:66:2b:a7:48:8a:41:56:ef:30:
                    f4:ac:2a:94:de:d0:5d:7d:54:cf:bc:3f:a7:5f:99:
                    01:bf:28:21:a4:3e:25:44:88:3e:b7:15:b8:0c:36:
                    48:cd:8c:6d:02:2d:5c:92:76:0d:40:fa:54:d6:d2:
                    e9:92:68:38:35:a5:83:26:57:25:e8:9c:85:29:f1:
                    24:84:df:0e:0a:41:61:8b:e7:d4:a6:9b:48:70:b8:
                    64:51:85:3f:5a:31:34:0e:fb:1d:4a:af:4e:b5:94:
                    e8:55:13:2a:12:f2:c8:3a:bf:d8:2e:31:c4:2a:62:
                    a0:77:d1:be:8f:86:e1:c7:c9:66:6a:db:c5:a3:93:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C1:E4:2E:98:D0:14:8B:BA:07:83:27:B5:5B:C2:16:4E:84:1D:A1
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:e2:d9:f2:dc:8e:72:92:ea:17:71:2e:0e:84:17:43:fc:
         7c:a6:d7:2b:ce:8f:12:de:69:61:82:8d:f6:d9:95:f7:f0:b8:
         2e:e0:38:ea:7b:85:5a:45:7a:7e:02:fa:ed:80:7a:28:c9:c6:
         0c:81:c7:10:aa:ec:a0:75:66:a3:c4:86:9a:9f:a1:83:3d:0e:
         8a:6b:36:23:ad:73:fd:bf:43:04:1b:e5:03:af:f4:5c:2f:98:
         3f:4a:66:0d:45:72:c0:b6:07:47:0d:46:e8:8f:eb:70:38:2d:
         33:de:30:bd:da:0d:37:b8:02:d1:60:03:31:24:a6:55:5d:13:
         98:01:71:a3:3b:fc:3b:57:a5:dd:8c:ca:5e:9d:6f:2e:b1:44:
         bb:1c:5f:b3:6c:2c:68:b4:d4:92:e4:ae:20:4f:d8:91:76:e7:
         dc:7c:a4:d3:f6:e6:38:6f:52:46:b1:26:eb:6b:61:df:19:33:
         89:3d:7d:34:35:c3:59:70:7d:8c:24:ac:ac:f9:e8:e3:92:34:
         e9:a9:a8:55:e7:cb:7b:0a:99:4a:38:60:f5:9d:e4:f0:93:61:
         6b:73:c1:fa:02:77:5e:0d:17:52:62:ac:ab:d5:6e:34:34:e4:
         f0:d9:95:10:4f:01:87:76:38:d6:cf:02:50:99:b5:43:5f:2a:
         9f:d5:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:20:37 2025 by rpki-client