Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          PKbc+xiKzLCWTGfGIkIBQ+rBRK3vhVxtfTcXr1o8lds=
Subject key identifier:   F3:D9:36:91:9D:23:A7:BE:F6:FB:AD:35:A5:72:53:E3:73:0B:A6:2A
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       01960C4365E1878E91D70C796C6E8528780E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          150C
Signing time:             Sun 06 Apr 2025 18:01:05 +0000
Manifest this update:     Sun 06 Apr 2025 18:01:05 +0000
Manifest next update:     Mon 07 Apr 2025 18:01:05 +0000
Files and hashes:         1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=)
                          2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=)
                          3: 2sZWzmP4jcGE7Pa4efqWfw9IU60.roa (hash: gUtbnusOf662l8whAzqSEqeD8Bk4DCjq3EznrZO972g=)
                          4: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=)
                          5: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=)
                          6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=)
                          7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: lmMUFxXJ+HDvCf3ubAIj0f/jlc6UAjAJS9MUzUEjRtY=)
                          8: Mo2Yxg7E21ifTL9q1N5-J92Xwoc.roa (hash: TkwVa0SYaV5hBeXyQJUfV73qt/zpkvlDBmt4dTIf2cM=)
                          9: R1MyqdNbJMXA2B9hCOoJVtEYSAo.roa (hash: Oyl4OLft0GlbGZgUB6suVirp+SJlYsYQ9M9olwoUBhU=)
                          10: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=)
                          11: ZKvHQby0NQ22M7VFCjQ_KqulEx8.roa (hash: ivLBRNaqrPZubBjRNX4dYKOMZvwYNsaC4yTeWqcGhaw=)
                          12: d3dV-F9i1Br6ldDDQ9My5gk4FEk.roa (hash: D5hjHITpq2OuWGDqz/F3KXiZU9mjTm6pBy0ZexAzEsE=)
                          13: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=)
                          14: kYicqWZAzu8hiJozc5PHShhEq-E.roa (hash: OYwB+H/kkij7RR6F2kmOg8GEEkzDZp7ZZQMM62pUIGk=)
                          15: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=)
                          16: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=)
                          17: rGuulbHd9kRPQ-Vjw-QiFUOKt_A.roa (hash: B7yPzOPI+uMdkQOcYQEtalAjsrTFRRTxVc7BxeoQZ2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0c:43:65:e1:87:8e:91:d7:0c:79:6c:6e:85:28:78:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Apr  6 18:01:05 2025 GMT
            Not After : Apr  7 18:01:05 2025 GMT
        Subject: CN=f3d936919d23a7bef6fbad35a57253e3730ba62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:71:ed:09:9e:da:11:4d:3f:c5:5d:fd:d7:
                    46:11:b7:e2:bf:cd:17:14:c9:ac:c1:15:80:a8:24:
                    97:96:e1:6b:a2:a3:06:95:6d:54:5b:dc:50:65:01:
                    8a:34:70:49:9f:bc:ea:5a:a5:77:c2:9e:73:3a:fc:
                    22:6a:43:3a:44:b1:f4:9f:9e:4f:b7:6d:bd:39:e3:
                    51:8a:5c:a1:39:e4:7c:2d:c8:ca:23:f2:3e:30:86:
                    dd:1a:cb:98:d0:e5:bc:0e:f0:2e:60:57:48:f3:4e:
                    1e:38:be:72:49:a3:fd:51:af:c9:e3:86:5f:ba:e3:
                    4c:88:0f:65:14:d4:ff:eb:97:51:f8:10:fe:b1:75:
                    cc:90:e5:b8:57:16:93:bf:83:c8:c1:74:f7:9f:47:
                    a9:2f:f6:4b:4c:18:c9:b2:eb:1f:53:8d:97:f2:a4:
                    0f:09:fa:24:28:4d:73:f6:83:ab:8c:c1:0e:3a:4f:
                    87:00:39:ca:b2:06:84:f5:d1:e7:67:6b:0a:8a:52:
                    3d:10:ae:e8:ac:38:14:95:c2:13:7a:4b:61:b6:69:
                    d8:9d:32:03:92:b0:70:79:e3:76:65:de:65:7d:06:
                    01:9c:0a:bd:77:71:da:21:c2:9c:e0:7b:29:86:f6:
                    b6:07:f3:92:2f:c7:64:48:4b:a0:16:4e:01:67:3c:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:36:91:9D:23:A7:BE:F6:FB:AD:35:A5:72:53:E3:73:0B:A6:2A
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:ce:bb:a4:8f:fa:77:1f:4a:f5:d2:41:ca:b9:3b:62:33:
         ce:56:14:97:f3:e9:e9:2e:83:61:02:5d:5a:49:b9:f2:3f:20:
         62:63:0f:49:ac:ad:d0:5b:66:bd:0c:5a:be:ea:4e:7c:92:e3:
         28:dc:a8:17:95:e5:de:00:73:b4:e4:ee:da:08:fb:1d:99:ee:
         88:ef:d5:47:bb:c7:8a:82:6e:a8:4f:42:a6:a9:1d:70:82:5b:
         d5:06:d1:c0:b5:80:88:c4:a8:37:84:c2:14:0e:27:d5:97:34:
         c4:35:6e:79:05:16:10:24:9e:ff:1c:ff:47:e0:5c:02:51:e9:
         9b:0d:7c:fe:99:08:80:45:8d:c1:83:5a:b7:35:01:9b:39:c5:
         9a:7c:ad:4e:7c:fc:ec:31:db:f9:dc:91:51:2b:20:87:df:34:
         54:71:9b:53:d0:4c:cf:10:16:ac:79:95:ad:5f:d9:32:fe:0b:
         37:0d:91:4d:d4:b2:5a:1c:b4:be:e2:2a:4a:e9:c4:42:b0:7d:
         a0:31:7b:dd:54:2c:29:01:89:bb:99:9c:93:cf:7a:c9:d4:41:
         1f:78:98:cb:af:b7:a9:55:9b:1c:77:36:46:43:ac:f9:4b:72:
         3e:d7:9f:17:d9:11:f6:18:75:36:e0:30:b1:89:fe:aa:59:59:
         0f:e8:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:57 2025 by rpki-client