Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File:                     _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier:          jzeiGlPGz/9kMUn8uUrbKGwu8iZkTqKb1pIchdO5Wt0=
Subject key identifier:   2B:E9:8F:8B:F9:94:2C:0A:CB:E4:0E:14:B2:B0:52:38:E7:5A:CD:70
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer:       /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial:       01964BFD8E577D2999FC77F3174EACFC7EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number:          148C
Signing time:             Sat 19 Apr 2025 03:00:30 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:30 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:30 +0000
Files and hashes:         1: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: K6vivkLXqoR4VmYozWIqM1oH2aSy57vIq8Ng6rap6TU=)
                          2: c19V5yQN4hQJXG1HEKFTsTlUGYc.roa (hash: LxQCTalyFAq3yyk0zwyqgHCvSE1O+q8WDWzWwj0pBzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:8e:57:7d:29:99:fc:77:f3:17:4e:ac:fc:7e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
        Validity
            Not Before: Apr 19 03:00:30 2025 GMT
            Not After : Apr 20 03:00:30 2025 GMT
        Subject: CN=2be98f8bf9942c0acbe40e14b2b05238e75acd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:2e:24:0d:d7:21:47:1a:0a:42:e1:52:4f:
                    62:22:f9:1b:1e:25:ed:b7:8b:e9:53:e7:e5:c1:79:
                    36:06:70:c1:11:34:db:e7:9d:9c:07:c4:57:2b:eb:
                    5a:7d:d4:a9:d6:e6:5f:a8:4b:87:48:af:94:1b:fd:
                    8c:eb:2c:dc:5f:85:41:b9:1c:ed:97:35:27:03:04:
                    98:7f:90:80:71:80:1b:1f:20:04:42:02:95:51:60:
                    fb:d5:d1:a4:0a:d2:02:f4:8b:11:3f:b9:de:33:ff:
                    2d:45:c5:35:a2:11:25:3b:c4:08:ac:90:ad:11:60:
                    9a:b4:cf:63:3f:1e:03:62:26:7c:fc:a2:4c:3d:58:
                    4c:fe:91:05:01:26:bb:64:df:89:c4:cf:d8:be:96:
                    7f:96:a6:72:99:21:50:04:12:71:f9:b2:f9:8d:2f:
                    92:fa:4f:dd:96:d8:5d:0f:02:6e:bd:f7:fb:5e:c8:
                    be:e4:d8:52:d9:1b:8b:36:2b:ed:d5:ae:64:12:e8:
                    8f:96:1e:e6:af:b3:1e:d2:71:5c:26:02:2c:46:f2:
                    13:c3:8b:06:6b:5f:3e:0c:b4:3e:a8:40:4a:c5:2c:
                    b7:6a:7d:c5:c9:a4:ec:47:01:56:76:dd:ae:ce:b2:
                    58:3c:a5:74:80:a6:6d:d1:54:03:15:23:b7:6d:68:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:8F:8B:F9:94:2C:0A:CB:E4:0E:14:B2:B0:52:38:E7:5A:CD:70
            X509v3 Authority Key Identifier:
                keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:09:fb:ef:83:e5:3d:cf:cf:97:c3:28:a4:5e:90:23:f3:0e:
         f8:3e:12:2c:be:15:d2:b1:ec:9a:72:31:37:ab:34:1c:8c:5a:
         5f:54:ab:32:25:2d:4c:db:56:c9:ea:39:ad:6c:a1:48:93:d7:
         04:19:28:6e:f8:43:7d:da:ad:eb:c2:b3:d4:83:e0:1c:c8:13:
         60:06:07:44:48:e4:fa:b1:a1:11:58:3c:cb:9a:c3:9c:cc:ad:
         4f:1e:bd:d5:a0:4d:5c:f0:d4:51:f5:4a:51:10:5a:0f:64:69:
         45:15:75:a7:ea:b0:ec:e7:ee:8a:d8:13:96:3b:09:76:a1:bf:
         06:24:29:07:82:1e:25:d8:70:6c:2a:12:9e:42:9b:13:9a:62:
         f0:26:8a:56:cc:37:48:89:8a:87:a1:80:d5:2d:6f:2a:85:d3:
         7d:cb:66:10:77:38:b3:5f:57:6c:2e:1d:d7:17:50:a6:df:d2:
         66:2a:ba:b6:ec:2d:ef:4b:c2:23:21:57:fb:5d:58:1f:9c:13:
         85:ab:70:d9:8a:ec:16:13:69:83:d9:af:5b:64:b0:62:66:76:
         d1:fb:5f:bd:88:cd:d1:e1:8e:e9:60:d8:a4:f0:74:61:eb:8a:
         94:cc:35:c7:a6:e8:4d:bd:00:34:99:c0:06:f2:df:f7:43:74:
         b0:7d:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:54 2025 by rpki-client