Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File:                     _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier:          Iya/QRtjTwZK5oVQa7upN9wA3P3j9KG76ajuTJNfcQc=
Subject key identifier:   85:F8:1D:D0:B2:EB:4E:EF:1B:AB:D8:7B:8D:A5:64:F7:F5:B1:E7:84
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer:       /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial:       019648212955EECF730C817E300CC834C155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number:          0EF2
Signing time:             Fri 18 Apr 2025 09:00:54 +0000
Manifest this update:     Fri 18 Apr 2025 09:00:54 +0000
Manifest next update:     Sat 19 Apr 2025 09:00:54 +0000
Files and hashes:         1: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: 64AybD7ouorRF/gtCbmfAnRtxvMWMw7J9HNg2pRSVHE=)
                          2: hyHlTiMwzWbl8Nf4H5xHNXAVBxY.roa (hash: HU5uH/M7qdwsXDoyu+UBXkrcHBCx6l/8Z2W4bZISR9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:21:29:55:ee:cf:73:0c:81:7e:30:0c:c8:34:c1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
        Validity
            Not Before: Apr 18 09:00:54 2025 GMT
            Not After : Apr 19 09:00:54 2025 GMT
        Subject: CN=85f81dd0b2eb4eef1babd87b8da564f7f5b1e784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:8a:aa:b6:a4:b4:d4:51:2d:1b:58:94:df:
                    98:c3:55:77:e8:9a:54:31:87:c6:36:f8:f5:e6:d9:
                    23:42:bc:7e:8f:6b:61:ee:12:a1:a7:c4:26:f0:c6:
                    0e:62:7a:9d:aa:c1:c2:19:0e:92:58:b3:d1:62:76:
                    08:a7:3c:29:9f:d0:cf:03:d4:25:49:b8:83:f1:40:
                    28:2b:9d:8b:89:ac:60:db:90:b2:47:c8:78:b1:b5:
                    88:82:9b:f9:49:2f:c3:a5:5d:03:f8:66:3a:14:ee:
                    4a:1e:f9:75:27:55:1f:f5:a7:0c:63:1e:50:fd:3d:
                    c4:95:93:5a:3a:d7:ee:f9:40:d8:93:73:ea:65:a5:
                    86:82:96:a2:d2:1e:9b:0b:e9:3d:cf:88:c7:9b:55:
                    97:32:61:68:d7:d7:8e:19:d8:57:2a:03:67:91:e1:
                    99:37:b0:d2:67:e3:00:66:ec:8f:d6:67:ae:e8:47:
                    45:0a:0d:2c:95:3b:3d:ff:c5:8d:2b:15:b4:70:d0:
                    99:9a:c2:95:54:48:6c:06:53:58:3a:e6:70:f1:18:
                    e8:4a:5b:8a:1d:dd:68:d6:ec:76:4b:9b:e6:ff:a2:
                    24:7e:0f:b3:b2:41:ed:01:40:50:52:18:3c:71:89:
                    40:e8:05:8e:96:2d:b8:fc:b3:11:ce:5f:7a:71:85:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F8:1D:D0:B2:EB:4E:EF:1B:AB:D8:7B:8D:A5:64:F7:F5:B1:E7:84
            X509v3 Authority Key Identifier:
                keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1f:0e:5e:cd:12:52:1c:af:26:83:61:9f:40:fe:18:08:e8:
         9b:47:a7:64:f6:f9:cb:5c:82:ab:32:66:cb:08:db:49:20:6e:
         62:9d:0d:28:7f:8c:9c:07:a7:48:ca:d7:ad:93:cc:db:35:3a:
         41:eb:75:13:42:1f:a0:15:d0:01:e1:2f:87:3d:f5:91:ad:6e:
         14:13:41:b2:75:d7:a0:2e:3e:72:04:89:e6:4f:41:88:55:a3:
         d5:7e:68:e4:b3:45:50:b4:ea:fb:46:f9:2b:50:f5:b8:8a:39:
         78:93:cd:d9:62:a0:8d:86:1e:ac:80:76:58:0f:23:23:76:47:
         ff:de:72:8d:c0:c0:13:5a:14:e8:2f:ae:93:24:df:54:77:17:
         09:35:3e:4d:eb:1a:7f:c0:85:b7:6c:56:7a:14:ca:ee:f3:50:
         49:03:b3:ca:dd:21:9f:92:79:3b:58:c9:4e:6c:d6:ce:98:f5:
         f7:9c:04:18:c0:0e:2b:40:04:cb:64:7d:67:07:01:d1:78:9b:
         66:d0:e1:7e:69:79:e3:ad:93:74:6e:f5:b1:99:be:9e:f5:5c:
         ca:f5:80:c8:23:db:59:c8:b9:5d:b0:f5:fa:c1:b6:c7:76:78:
         ce:2f:8f:df:24:33:43:6a:87:b5:97:8e:b7:e6:c7:3e:1f:92:
         62:da:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:18:20 2025 by rpki-client