Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File:                     JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier:          HDekRk7Vobn41M3g2P4E0Dsn2U/Guo34/HZQNVLaCP0=
Subject key identifier:   9C:19:F3:A8:68:3D:5E:36:CC:9D:73:26:50:D6:EB:3D:3E:0F:66:9C
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer:       /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial:       01964EC7F112DDA21C410FB8608AA23EEFA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 16:00:48 +0000
Manifest this update:     Sat 19 Apr 2025 16:00:48 +0000
Manifest next update:     Sun 20 Apr 2025 16:00:48 +0000
Files and hashes:         1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: 6X79YmEwCvA3g2esUcOF1d0SHET7f4ahyIzV3/v9QmM=)
                          2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c7:f1:12:dd:a2:1c:41:0f:b8:60:8a:a2:3e:ef:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256be176b313e1a8a050f670af576771b655d611
        Validity
            Not Before: Apr 19 16:00:48 2025 GMT
            Not After : Apr 20 16:00:48 2025 GMT
        Subject: CN=9c19f3a8683d5e36cc9d732650d6eb3d3e0f669c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:cd:7e:7a:d1:b3:33:06:ff:ca:ad:4f:c2:
                    89:d1:d8:e6:17:fa:dd:a8:05:f6:44:95:0b:ec:62:
                    f9:32:77:01:47:dc:32:3e:fc:75:e6:96:b1:91:b8:
                    25:40:15:f2:c5:32:75:91:b5:10:7d:d3:4f:c2:bb:
                    01:29:cf:37:eb:e0:a3:28:14:97:ed:a1:e9:3d:64:
                    58:c8:67:04:45:d4:70:40:f4:8c:f5:50:dc:07:a4:
                    aa:18:2f:e0:b7:64:a9:e7:70:5d:37:c9:b8:14:d6:
                    18:34:a4:fc:da:50:e9:b4:74:b3:17:ae:f4:b7:38:
                    94:a1:bd:25:87:22:97:4d:bf:1e:b1:7d:bf:5a:ab:
                    bb:a7:87:3f:be:ce:28:49:99:50:2e:c1:07:0c:a8:
                    3c:e0:6f:c9:75:70:a1:ac:01:70:f6:01:69:23:2d:
                    3c:c6:4f:65:64:18:63:54:7c:4b:2d:44:cd:f1:d4:
                    af:33:f2:8c:d4:d2:2d:fc:4a:7f:3c:df:76:7d:94:
                    29:41:c2:0e:ef:7e:ac:75:64:d3:52:f9:96:83:52:
                    fa:fe:6b:fa:09:91:5a:b7:b2:e6:2d:0a:df:57:33:
                    f2:58:7b:df:38:46:c1:37:b8:9b:7d:2d:6f:49:4f:
                    0e:d5:4f:f6:70:85:84:f8:06:71:16:d2:dd:76:da:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:19:F3:A8:68:3D:5E:36:CC:9D:73:26:50:D6:EB:3D:3E:0F:66:9C
            X509v3 Authority Key Identifier:
                keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:12:5e:22:2e:70:05:c4:33:47:5d:01:b0:f0:af:0d:9d:
         01:e0:8e:d1:96:57:31:2b:aa:cd:b1:50:c3:58:23:d3:fe:dd:
         a2:c8:ce:ec:50:ed:ec:73:37:a1:98:c1:d2:7f:6a:e5:b1:93:
         f9:1b:04:ce:96:37:18:dd:eb:1d:68:26:22:8d:b2:49:8f:0d:
         46:12:02:83:cb:c5:39:83:1f:97:b5:1f:57:b9:a7:02:8f:a2:
         1d:42:3f:fd:17:ba:fe:72:0e:63:0e:08:4c:fc:22:83:c1:cd:
         b5:50:ff:cb:ee:e7:2c:75:5b:c8:dd:19:e2:e0:98:ca:5d:9a:
         a4:77:77:24:70:85:da:2c:23:22:c4:53:97:18:70:94:cd:10:
         95:3d:12:10:5a:0d:31:73:cd:0e:97:c2:bc:04:56:e2:4c:e0:
         38:64:bb:ec:e3:b7:a8:40:f4:f9:d7:5b:ed:d8:2a:ce:ae:28:
         33:72:94:d7:1b:eb:af:5a:ad:0e:f0:9d:b3:0b:8a:55:62:a9:
         7a:77:e0:45:90:6d:a4:9e:98:6f:5e:93:a0:a2:af:87:13:67:
         9f:48:48:e4:99:f5:a0:b0:02:f8:72:4c:a4:a7:21:c0:0e:67:
         cf:92:ac:f3:f5:e7:00:32:af:5c:28:8b:24:26:ee:4e:c3:41:
         99:26:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:54:21 2025 by rpki-client