Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File:                     JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier:          ZJGQqDIwwcZ7Bizp2ygWgH80zfveZfHEorMCZzCmiDM=
Subject key identifier:   54:EF:3E:50:AA:C6:35:CE:E7:8B:DE:EA:D8:B1:13:9E:E8:1F:75:81
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       01958B8487891F2BC2B3F33AFF77E7BD5B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number:          116C
Signing time:             Wed 12 Mar 2025 18:01:13 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:13 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:13 +0000
Files and hashes:         1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
                          2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: teIwvWrik/QeYwfQkruChsq4bE6EeSB3f/h90DGtqoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:87:89:1f:2b:c2:b3:f3:3a:ff:77:e7:bd:5b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: Mar 12 18:01:13 2025 GMT
            Not After : Mar 13 18:01:13 2025 GMT
        Subject: CN=54ef3e50aac635cee78bdeead8b1139ee81f7581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:fb:9e:d0:d4:6d:8c:98:65:3a:0a:f4:ff:
                    e1:27:d9:ca:a3:3a:e7:70:b3:1c:2c:b8:df:5a:a7:
                    93:50:a3:51:52:c2:ae:df:d9:8e:bd:8f:a3:c7:33:
                    07:a9:55:3c:0b:12:4e:73:13:02:0f:ae:0b:3c:a5:
                    dc:73:57:ad:da:93:d2:c5:d5:1b:63:34:ab:a5:1f:
                    54:c0:2a:2f:43:f4:fa:92:60:07:5b:87:a6:50:dc:
                    89:41:73:80:b8:e2:3b:7b:db:b5:7b:25:d4:73:b9:
                    47:96:8c:a7:a5:17:e4:56:52:92:13:36:ca:81:1f:
                    78:7f:2c:10:de:a0:6e:25:9d:42:8c:69:0b:20:f2:
                    1f:b2:1d:24:c0:75:0d:76:3a:63:e1:4e:e2:2a:34:
                    bd:0b:30:76:0f:93:55:d5:bc:53:76:15:a2:17:3d:
                    eb:2f:5d:e7:72:bb:7c:14:19:d8:f9:ca:d0:36:45:
                    99:14:53:e1:06:64:1b:f1:6e:00:ec:4a:33:95:69:
                    bd:6c:f7:22:ea:4c:28:56:6b:5a:19:b9:30:40:35:
                    89:b5:1a:4e:59:97:dd:1a:e9:92:97:e2:be:07:8c:
                    2b:24:1a:5b:fe:cd:3a:f6:42:62:7f:c3:54:dd:34:
                    09:0a:17:8e:b6:3f:28:00:dd:b7:8f:2d:bd:8a:89:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EF:3E:50:AA:C6:35:CE:E7:8B:DE:EA:D8:B1:13:9E:E8:1F:75:81
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:e1:50:9b:0c:46:af:1f:d8:d0:85:41:14:2f:73:b6:57:
         f9:c6:cf:54:11:7f:67:b9:84:10:27:1b:5c:c0:03:74:59:38:
         b0:0e:04:fe:4b:21:f4:ed:53:5f:27:ed:f7:f1:46:07:e1:e2:
         77:bb:37:53:f8:f9:fa:97:83:aa:89:c3:4a:6a:f6:91:05:0f:
         14:fb:ab:9d:8f:98:ab:bc:1f:9f:09:10:bf:f1:3e:39:74:ac:
         92:55:70:24:c6:f7:20:06:24:9f:83:2d:b9:13:14:af:af:99:
         aa:57:5b:51:4e:0e:ad:81:0d:92:d5:a9:4b:bc:1f:80:f2:f0:
         53:ba:60:fa:d8:8a:ae:b7:bd:0b:d6:61:71:d2:ce:46:bb:25:
         bd:04:1a:e7:40:0c:f4:95:50:bf:4d:fd:8f:fd:4b:53:b4:33:
         98:0a:15:45:62:39:69:e3:39:48:16:ab:aa:83:fa:8f:4e:f5:
         0b:a8:b5:2b:3f:1e:6b:66:e7:35:02:93:ee:14:87:6f:df:3a:
         12:c4:13:5c:b2:94:d2:9b:a3:d1:6d:b6:9a:ba:cf:f1:14:22:
         5e:3e:57:3a:f5:a3:7d:c4:da:31:4f:f5:7a:fc:33:f7:b3:cb:
         f5:5b:d8:d6:04:03:9f:62:f3:4d:3b:31:a0:38:74:08:62:ec:
         f1:d5:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:20 2025 by rpki-client