Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File:                     JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier:          qBIcU+3z4sUVVcLY4ecoDaae3RVz0Ejpjp2+4nTdemE=
Subject key identifier:   32:A2:85:0A:30:13:26:58:43:7B:D0:D5:12:9B:84:E0:54:F5:B6:27
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer:       /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial:       019651C946665E02F570B844D7E20066F216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number:          0BF2
Signing time:             Sun 20 Apr 2025 06:01:07 +0000
Manifest this update:     Sun 20 Apr 2025 06:01:07 +0000
Manifest next update:     Mon 21 Apr 2025 06:01:07 +0000
Files and hashes:         1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: xcd1F1+HDliezHBsmsUmLXX4D/MKA7s1rJyD3P5bJdQ=)
                          2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:46:66:5e:02:f5:70:b8:44:d7:e2:00:66:f2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
        Validity
            Not Before: Apr 20 06:01:07 2025 GMT
            Not After : Apr 21 06:01:07 2025 GMT
        Subject: CN=32a2850a30132658437bd0d5129b84e054f5b627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:1e:d2:ad:2c:38:fe:80:b9:1c:20:be:ad:
                    cd:0f:83:19:f3:46:59:76:78:bf:d4:6a:4e:ec:be:
                    87:ff:d1:fe:b6:57:62:1f:7c:93:1b:0c:d7:14:db:
                    ba:b0:a7:69:08:81:b2:32:37:05:99:42:72:77:3f:
                    a8:b5:56:1a:09:f8:10:2d:89:cb:3c:cc:91:bc:23:
                    6c:09:67:ce:af:75:cb:3f:76:b2:21:a9:0e:6f:c3:
                    84:39:15:e7:ad:53:17:12:77:0b:fd:17:af:91:b9:
                    59:9b:79:82:cd:d8:ba:60:b0:da:31:d6:3b:68:e6:
                    c4:b1:57:4a:bb:8f:81:58:14:49:3a:fa:3a:cb:fb:
                    47:12:32:1c:3b:cd:33:93:02:ab:3e:a9:72:18:93:
                    7f:22:88:04:bc:b7:7f:ee:ec:69:39:7c:2c:b7:08:
                    91:ea:71:6f:6b:43:a6:cf:e9:87:6e:e1:1f:5f:9f:
                    5c:26:25:38:5c:71:a2:06:75:60:9c:56:6a:cd:09:
                    a4:c5:36:64:12:d8:3c:f6:d0:93:ff:cb:6c:fa:2b:
                    d5:30:7d:fc:8d:02:f5:0d:1b:d0:6e:7c:23:d6:8c:
                    c5:56:62:92:b1:bf:61:c8:60:96:42:b9:77:8b:94:
                    c4:fb:e7:05:1a:be:50:d1:24:79:84:de:65:29:c7:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A2:85:0A:30:13:26:58:43:7B:D0:D5:12:9B:84:E0:54:F5:B6:27
            X509v3 Authority Key Identifier:
                keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:41:21:f5:57:8b:23:9c:f2:e8:22:54:dc:93:89:54:0d:
         c8:0b:04:35:d9:60:cd:ee:71:97:de:7e:3f:a2:61:2e:6b:cf:
         ff:b1:ce:26:b0:62:19:96:6c:f3:ef:4f:bb:28:e3:09:19:a5:
         27:c6:22:5f:d0:a0:1f:e9:09:78:f6:1f:93:25:5d:05:69:9a:
         55:d6:01:80:e5:4b:96:76:1c:75:0e:7c:be:52:8b:78:d9:06:
         99:80:d8:62:b1:da:8e:45:21:8a:aa:a3:20:69:d1:eb:e3:9e:
         d0:e6:0e:29:d3:b8:04:4b:65:6f:29:37:91:a7:c0:a7:fd:88:
         d0:fd:55:f8:73:99:57:c7:2e:a8:06:21:4d:7b:93:8b:a4:2c:
         84:2e:6b:38:70:d8:ab:1c:87:8c:84:14:9d:cd:de:5e:59:3c:
         23:c8:9a:65:15:67:2c:fc:3c:81:e3:7a:5c:16:67:f6:9a:3a:
         a1:9a:53:20:2e:eb:55:3a:83:4b:f2:b6:62:70:73:71:91:ce:
         ad:1e:a2:e1:a5:fa:00:a1:43:b0:69:10:0b:83:b7:a0:6c:44:
         7b:c7:01:a2:7c:b1:1c:ab:5f:bb:04:73:15:57:74:7c:0f:3c:
         2f:1c:22:00:ce:87:8b:33:06:42:20:5f:f5:6d:98:1c:97:02:
         da:6b:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:40 2025 by rpki-client