Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File:                     1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier:          jY/peV9lJuM+cGB0baq4Cljvj3Idq0DueD17B7Ls374=
Subject key identifier:   44:CA:4E:22:57:2D:F2:27:FB:E3:82:5B:C6:04:23:98:40:47:ED:1A
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer:       /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial:       01962ABCA8BDFA457CB818E8149FBAFCD298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number:          14E5
Signing time:             Sat 12 Apr 2025 16:02:09 +0000
Manifest this update:     Sat 12 Apr 2025 16:02:09 +0000
Manifest next update:     Sun 13 Apr 2025 16:02:09 +0000
Files and hashes:         1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: zrIZ7Z78XYS1z4pd0nN9BE399IybXBdPFF8ldUDyzXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:bc:a8:bd:fa:45:7c:b8:18:e8:14:9f:ba:fc:d2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
        Validity
            Not Before: Apr 12 16:02:09 2025 GMT
            Not After : Apr 13 16:02:09 2025 GMT
        Subject: CN=44ca4e22572df227fbe3825bc60423984047ed1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:40:fb:88:c6:a8:fb:e1:38:03:e6:b4:e4:8b:
                    72:c9:fa:42:e7:e4:16:1d:5a:e0:0b:20:d3:ee:fe:
                    48:45:e4:06:45:18:a3:a3:de:28:bc:e6:59:66:0c:
                    1a:47:87:19:c6:0f:b1:62:a3:24:93:9f:ce:21:fd:
                    ef:a6:ee:da:fe:76:64:cc:fb:91:6b:14:0a:24:98:
                    58:6d:7e:ae:47:72:c0:43:42:ce:dd:24:0a:ee:d0:
                    e2:23:fd:22:21:ae:6a:c7:70:72:0d:ee:6a:c8:82:
                    40:4f:a3:9e:fe:28:93:17:d4:a6:cf:fa:13:9c:84:
                    e7:e3:49:58:b9:63:41:34:4a:ae:31:ae:6a:0e:72:
                    a9:61:81:30:3a:91:13:0b:24:5c:29:f0:46:d1:6d:
                    dc:88:a9:be:c5:83:ae:20:5b:83:76:e5:e5:3f:fa:
                    cd:bf:58:73:f4:42:37:d2:b8:32:2d:f1:fe:33:8e:
                    7c:e5:31:a5:0a:7d:17:80:ae:42:a7:40:5e:92:dc:
                    12:d1:bb:11:8b:9a:92:5e:ec:9a:2f:e3:80:93:23:
                    a0:c8:f0:4d:ed:91:d3:57:1c:8b:fa:49:7f:01:6a:
                    4e:db:b1:b9:e7:24:e9:29:02:73:1f:92:f8:20:7d:
                    d1:c7:4e:69:19:58:ff:2b:48:92:ec:53:33:82:1e:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:4E:22:57:2D:F2:27:FB:E3:82:5B:C6:04:23:98:40:47:ED:1A
            X509v3 Authority Key Identifier:
                keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:15:c1:17:ac:0b:15:f0:5c:e3:9f:58:8f:41:c2:fc:75:9e:
         b2:c1:5c:38:62:33:5c:6f:0e:44:12:a1:6d:63:88:fa:3e:f3:
         63:50:29:38:cd:65:04:15:a4:39:53:59:29:65:a0:b8:fa:d2:
         78:ae:69:e3:59:33:c5:51:96:64:7a:26:73:b6:c8:47:88:ba:
         2b:16:e0:39:3c:9a:81:bb:b4:c3:89:fb:f7:4a:4a:4c:3b:87:
         9e:76:f9:b8:70:46:cb:11:d7:d7:bf:e7:38:36:f0:67:ef:b6:
         cc:2b:7e:93:51:d4:81:38:a7:5f:37:e9:a3:b5:2b:01:b5:4b:
         62:d1:d1:5c:c7:bc:fe:f6:a0:fa:6d:3f:f0:ae:fa:04:96:9d:
         fb:ba:68:68:ff:c4:f9:4e:2f:73:e8:dd:51:e0:3f:8d:8a:cf:
         b5:45:18:6b:60:71:38:ee:a4:a6:fc:50:83:41:5d:9a:27:ce:
         e3:a8:98:5a:5f:2a:c9:0d:85:14:97:ee:68:44:61:a9:41:2f:
         b0:82:21:98:40:51:2b:e6:f0:5f:3e:b3:8a:3f:42:63:74:67:
         38:d7:24:1d:78:27:b8:ea:8d:a8:2a:19:30:1e:1f:83:df:a7:
         af:de:f8:04:77:b9:ee:c9:52:43:a0:bd:9c:5f:cc:3e:53:a3:
         5c:3b:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:46:18 2025 by rpki-client