Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
File:                     J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json)
Hash identifier:          ByPcZoVlZvtjYHmpfRvGlYp0JiGLkBLB4/cCObfTS9w=
Subject key identifier:   8E:F3:A6:3B:51:7D:E2:4C:7F:83:32:9D:0C:16:7B:36:74:D4:EB:3D
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Certificate issuer:       /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial:       019651C908C8DE15F2C060525BAC5E14A105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
Manifest number:          14FD
Signing time:             Sun 20 Apr 2025 06:00:51 +0000
Manifest this update:     Sun 20 Apr 2025 06:00:51 +0000
Manifest next update:     Mon 21 Apr 2025 06:00:51 +0000
Files and hashes:         1: 5K6nIVbP5K11dvspcfl4G-MfJZw.roa (hash: 1GirTU1av48FvuHpXhFOsW26MgpLG9B9BqlLOufNX8M=)
                          2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: eTL3Y78g+QAuCQJmIlda97KkbUEzH6eOKkNpZJZap3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:08:c8:de:15:f2:c0:60:52:5b:ac:5e:14:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
        Validity
            Not Before: Apr 20 06:00:51 2025 GMT
            Not After : Apr 21 06:00:51 2025 GMT
        Subject: CN=8ef3a63b517de24c7f83329d0c167b3674d4eb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b7:4d:66:73:6f:8e:df:74:51:3e:0e:ed:59:
                    66:8e:56:5c:65:12:b0:5d:dc:fe:e6:e5:25:1d:5d:
                    9f:19:6d:16:c3:2a:57:81:7e:a6:c9:9b:02:27:70:
                    7a:fd:9e:fb:fb:d1:c8:6e:bf:08:1a:69:56:9a:36:
                    31:46:f9:86:42:3e:b8:bb:fd:5c:33:de:67:4b:09:
                    d6:9a:52:1d:cf:a0:da:31:59:a5:84:bf:cc:07:85:
                    7a:b1:23:af:cf:29:a0:a7:22:bd:6a:36:36:83:86:
                    d0:1a:75:89:ef:6f:21:9f:bf:df:c4:b0:40:50:8d:
                    9d:3c:1a:43:ca:3f:07:44:f5:5a:c0:85:96:59:68:
                    4f:da:c6:8d:0c:ae:ab:c6:29:2a:6a:c6:3e:c4:30:
                    0d:55:55:a0:7b:7a:85:6c:3d:0d:84:93:7d:25:5a:
                    f4:30:d4:92:5b:b5:93:9b:1c:43:63:c6:8c:39:44:
                    69:81:e7:ef:73:6e:b4:1d:8f:13:a4:9c:aa:8a:1b:
                    24:80:c5:b1:72:22:26:52:7f:de:ee:b2:7b:93:ae:
                    48:40:07:0e:43:7d:1a:e6:db:20:8e:25:5a:21:82:
                    20:bd:36:df:34:a4:08:4f:85:44:1b:1e:41:a9:ed:
                    06:fa:5c:8d:c2:7d:11:f3:e5:e2:a7:32:e8:c4:4f:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F3:A6:3B:51:7D:E2:4C:7F:83:32:9D:0C:16:7B:36:74:D4:EB:3D
            X509v3 Authority Key Identifier:
                keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:7e:03:29:7b:b0:a3:0d:15:81:e2:58:e8:14:8c:82:3f:
         4d:f3:37:da:ef:ea:6c:b4:fc:fc:23:dc:68:49:f4:60:a8:a9:
         ef:a6:c8:ef:ef:85:d9:9e:8d:50:64:76:59:f4:d9:1b:0b:df:
         39:f5:1f:38:86:48:ed:9d:ff:66:ad:52:e9:8b:c9:ed:39:55:
         50:21:7c:18:99:db:90:5e:99:4e:ac:97:6d:bb:11:28:03:94:
         9d:81:55:ad:25:04:6e:ff:c7:85:29:42:81:c1:4d:8b:1a:b4:
         e5:f3:03:76:cf:c2:58:0f:d2:ff:31:9b:1a:b5:d1:de:37:d8:
         fd:ed:08:f2:73:f1:d1:7e:6b:77:d1:a3:9f:14:42:aa:0f:0f:
         62:7e:e3:d9:6b:37:fa:ab:1a:71:2b:ed:75:ba:0e:db:08:09:
         ac:21:ef:80:07:9a:4e:cd:e0:35:e7:8a:89:53:a6:62:88:30:
         00:ee:ad:db:32:1e:e9:ba:7f:61:f8:db:cd:82:0e:e9:92:40:
         c0:7c:b6:ce:cf:f6:3b:18:3e:d3:1b:ce:6d:cc:b3:67:c2:3c:
         f9:07:41:0b:4e:75:89:ab:45:cc:ae:c1:7f:01:63:99:1a:b4:
         19:ff:ba:b5:55:50:8c:a6:e1:0b:77:6c:8c:c5:39:c0:4e:73:
         02:44:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:27 2025 by rpki-client