Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File:                     jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier:          gdTt+viIfdmgyBbtkneHutd7kSwYbDlT/Yf8P1RVgFE=
Subject key identifier:   EB:DA:C4:2B:3E:00:74:17:D5:98:0D:FA:B8:56:C6:CE:63:D2:EC:77
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer:       /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial:       01965123E76FB2A0257FD3A02C9D72152191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number:          14FC
Signing time:             Sun 20 Apr 2025 03:00:29 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:29 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:29 +0000
Files and hashes:         1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=)
                          2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: xc6B/BivKy4CR8jj1rhflVBLYycWtu/tClWMQkM6P2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:23:e7:6f:b2:a0:25:7f:d3:a0:2c:9d:72:15:21:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
        Validity
            Not Before: Apr 20 03:00:29 2025 GMT
            Not After : Apr 21 03:00:29 2025 GMT
        Subject: CN=ebdac42b3e007417d5980dfab856c6ce63d2ec77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:e6:88:3b:cd:11:16:cb:c2:74:4e:70:cb:
                    4c:14:28:31:2e:1f:60:71:fb:74:01:2f:ce:b3:a8:
                    cb:e5:bd:a4:46:e8:72:e0:6a:70:a0:d3:bc:31:1e:
                    71:07:38:ce:33:09:b4:ba:7e:65:05:5b:fa:4e:15:
                    5b:20:2a:a2:47:82:4d:30:ff:3d:97:0e:74:90:33:
                    3a:5c:a3:8e:8b:f4:55:3b:23:f3:54:c1:b9:b3:0d:
                    2e:3f:38:d2:a7:cf:cc:37:e5:e6:de:4e:ff:54:55:
                    d4:58:af:ce:21:72:ad:27:5d:d3:af:59:94:e4:26:
                    49:35:7f:c7:6b:8e:c1:8e:50:db:46:a6:c3:90:72:
                    34:20:21:03:50:40:70:61:8e:80:56:51:5e:28:4a:
                    3f:2d:02:17:4a:4c:a7:0d:7d:ea:38:62:7c:5a:23:
                    a0:f1:98:9d:df:1a:ab:46:91:9c:67:83:46:11:1f:
                    11:ed:a9:d5:c5:9a:87:1a:c6:84:68:ae:e9:65:9c:
                    84:ae:24:66:a6:3a:d5:cc:70:cb:5f:ed:18:e6:82:
                    46:10:81:34:14:fc:38:a2:b1:5b:2c:7d:b3:15:02:
                    a6:95:71:3a:0e:f2:af:22:06:5d:0f:bc:8c:79:11:
                    92:28:bd:87:32:b1:db:43:ce:47:a1:a5:2c:ec:16:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:C4:2B:3E:00:74:17:D5:98:0D:FA:B8:56:C6:CE:63:D2:EC:77
            X509v3 Authority Key Identifier:
                keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:5c:12:22:23:b1:02:37:11:7c:c2:93:8a:40:0d:85:a2:
         e9:40:22:78:78:f6:f0:3d:20:76:5a:fa:aa:8c:ea:2f:fc:2c:
         7d:cd:2a:04:66:84:2e:26:0b:b7:5d:97:8d:43:bf:fd:1c:50:
         51:e8:da:38:bd:31:b6:f2:dd:7e:bd:ac:b6:13:ae:f8:59:ed:
         0c:d7:d8:ce:ce:d2:97:87:27:3d:74:79:0c:5f:33:c1:7b:b2:
         63:c5:76:af:0a:6c:62:0e:42:e4:9b:d9:8e:75:43:d4:a4:8e:
         8e:58:19:75:3d:7f:d9:2a:31:08:ce:a6:ab:48:e0:b3:c0:80:
         6e:1f:71:86:f4:6c:9b:d3:0a:36:73:40:a2:02:36:49:57:91:
         f1:e4:1e:67:35:3c:89:e4:fe:62:80:9e:47:0a:0b:98:dc:57:
         92:22:bd:5c:2f:3c:22:3b:49:b6:97:5f:1c:e7:17:05:a5:73:
         21:54:cb:50:99:2e:0a:5e:82:43:d0:5d:c5:fe:3e:63:bd:98:
         31:9e:4e:4c:50:aa:e1:a1:c2:05:55:58:61:31:4f:67:17:6d:
         93:38:78:2d:75:7a:a4:0c:34:18:03:15:9b:02:40:d1:9a:74:
         b2:e1:07:b4:09:a1:a5:e3:3f:ff:73:96:36:38:eb:83:44:b7:
         e9:27:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:07 2025 by rpki-client