Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          trjnyhJnYigL4eF1hwMeZPNJutv+jpJnJ2QCyxg/iWI=
Subject key identifier:   76:70:CE:E4:61:58:7F:51:E9:9C:97:30:51:88:F0:FD:10:7D:E5:5F
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       0196488F39889ECD48910350A349C64A296F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          14F9
Signing time:             Fri 18 Apr 2025 11:01:07 +0000
Manifest this update:     Fri 18 Apr 2025 11:01:07 +0000
Manifest next update:     Sat 19 Apr 2025 11:01:07 +0000
Files and hashes:         1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
                          2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: AOJQz4dPLtrKoE5MV6tfysGQ1J6UKmtXg+GEZ1O+pRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:8f:39:88:9e:cd:48:91:03:50:a3:49:c6:4a:29:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Apr 18 11:01:07 2025 GMT
            Not After : Apr 19 11:01:07 2025 GMT
        Subject: CN=7670cee461587f51e99c97305188f0fd107de55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:77:31:f9:6f:a5:04:49:ca:ff:10:b1:4e:
                    7b:1e:7f:c5:5e:22:c6:69:a7:f9:5d:1f:aa:92:8a:
                    4c:f6:90:ae:6b:4d:b2:b8:6b:69:f0:35:b7:da:6a:
                    71:d4:a9:99:69:82:60:17:50:50:58:65:7f:0e:16:
                    79:13:8e:71:b1:00:18:90:c5:75:34:14:2d:e6:f5:
                    46:62:ec:0c:f3:0e:a5:6f:30:c9:a9:32:c1:56:35:
                    1b:b0:2a:a2:7e:fe:b8:40:3c:57:96:9c:56:e6:60:
                    58:7b:a3:50:80:2d:d6:9e:6e:a0:1e:0f:6e:6b:9f:
                    da:77:60:f7:19:d4:01:7d:e3:4f:10:94:77:1c:a5:
                    15:d6:1b:78:14:1c:24:30:2d:61:cf:47:9c:02:92:
                    7c:c1:fb:06:f8:ea:48:22:ee:c1:26:ad:22:2d:7e:
                    c8:87:ac:f1:1d:8c:e8:2d:5b:9a:33:b3:25:00:44:
                    1a:9a:0a:8c:f7:6b:29:35:ae:a7:82:cd:d9:49:3e:
                    36:c3:51:e4:4c:f3:58:cd:ac:7d:97:89:1d:a4:f3:
                    fa:bd:f0:e0:43:8c:df:a0:38:7d:b1:a1:12:22:59:
                    4f:cd:90:45:5e:fd:b9:41:4b:53:a2:4f:e5:79:f4:
                    3e:27:0e:bc:f6:7d:cc:1d:80:f5:17:98:a9:6c:3b:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:70:CE:E4:61:58:7F:51:E9:9C:97:30:51:88:F0:FD:10:7D:E5:5F
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:35:d6:14:d8:28:98:29:cb:9f:62:1a:cb:85:20:7d:3a:9a:
         d3:b5:64:29:b5:6c:7d:41:22:e1:1f:03:45:44:d0:26:fa:8f:
         d1:ae:9d:70:de:b2:ee:3d:3a:60:2f:44:6b:f3:51:75:59:b6:
         4c:6d:c4:91:a2:32:27:7c:41:e6:3c:fd:8f:4b:83:4d:61:d7:
         38:d6:c8:0e:ac:89:ed:a4:03:44:cb:39:ba:52:1b:2a:7c:cb:
         7a:ec:6a:b6:bb:68:69:c2:83:29:2d:e2:13:dd:50:b4:cc:92:
         12:b3:aa:c8:af:cf:a7:28:e2:0b:2c:a0:a2:96:68:4c:f1:af:
         21:98:75:70:5b:4e:e5:ae:21:42:41:b6:94:a2:5f:6d:ea:05:
         48:c6:7c:4e:7e:4f:2d:48:37:d1:ed:47:9b:8b:c8:4f:84:85:
         b0:c8:c3:ff:51:26:50:f6:34:d2:5d:ce:7c:4f:b9:b9:3b:a6:
         72:05:aa:59:66:28:f5:9e:3a:b3:16:54:b7:1f:34:da:0e:17:
         8f:94:d6:d7:78:5e:7f:4a:bb:a8:bc:2d:c2:ce:d0:19:d9:87:
         9a:34:a2:cd:ed:bb:47:af:c6:a3:71:0c:e8:0d:a4:15:24:72:
         d7:41:57:8a:23:0b:76:32:e8:1c:95:48:f6:a5:9d:b9:dc:76:
         8c:60:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:06 2025 by rpki-client