Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File:                     JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier:          dTuL/Gd26a26JE2MNPxwECw1BbXTHyXrtIF+bganlAY=
Subject key identifier:   5D:A8:04:F5:2E:AC:D8:F9:3A:48:4D:B3:3A:C4:01:9F:87:3F:9D:88
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer:       /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial:       0196BE935A90DFBCA8CA93E9D268F4D2C071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 09:00:50 +0000
Manifest this update:     Sun 11 May 2025 09:00:50 +0000
Manifest next update:     Mon 12 May 2025 09:00:50 +0000
Files and hashes:         1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: XLpOuO+TOAO8SHyXrm5JguwLfYB4FHxgY/BaYS4cryM=)
                          2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:5a:90:df:bc:a8:ca:93:e9:d2:68:f4:d2:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
        Validity
            Not Before: May 11 09:00:50 2025 GMT
            Not After : May 12 09:00:50 2025 GMT
        Subject: CN=5da804f52eacd8f93a484db33ac4019f873f9d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:3a:d4:4b:96:8f:e9:e2:44:51:b0:1b:10:
                    0c:8d:15:e7:fa:4d:da:9d:5a:ce:7c:7e:f5:73:71:
                    a0:ad:fc:ea:3f:ae:59:58:20:bb:9c:82:fe:22:b2:
                    d3:be:aa:49:de:8e:68:1d:fa:f0:6f:d1:70:48:60:
                    ea:61:78:d9:7b:49:75:63:98:61:62:75:6a:31:3b:
                    56:d2:e2:f6:9c:54:af:f0:1f:a0:ff:e7:63:c5:50:
                    36:e7:09:0f:0f:eb:ee:21:cb:68:8f:4d:5b:d6:70:
                    8c:37:7a:81:dd:c9:d2:b4:1e:07:24:17:a8:fb:25:
                    17:c0:46:57:2f:e5:bb:f3:8a:94:bf:0f:ca:4f:69:
                    cf:10:dd:ac:e7:c6:d6:97:72:40:0f:ef:a3:f3:fd:
                    aa:d3:b4:db:5b:31:7e:64:da:0a:71:8d:16:1b:c5:
                    9d:b8:c7:24:11:3b:02:fd:38:6d:f4:7c:7a:f8:7b:
                    bf:00:88:ff:50:76:e8:b3:bd:99:a2:d0:3c:4c:59:
                    5d:27:f3:06:67:8b:52:e8:7c:cc:36:a7:3a:d5:f8:
                    ce:4f:81:3e:a6:fb:e4:6d:ec:dd:02:36:a1:4e:cc:
                    5f:2c:da:22:c3:86:61:fe:f4:da:80:f9:0f:b9:06:
                    23:9a:cb:46:83:a5:90:c5:c3:10:6b:8a:28:d6:78:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:04:F5:2E:AC:D8:F9:3A:48:4D:B3:3A:C4:01:9F:87:3F:9D:88
            X509v3 Authority Key Identifier:
                keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3d:de:59:31:99:99:0a:b7:8d:26:2a:58:19:f0:9a:0e:22:
         32:27:0e:52:bb:ec:a1:cb:6f:a8:1e:6e:0a:0c:0f:43:be:45:
         b1:3d:c7:f2:f7:fa:43:f2:42:c2:53:08:ef:98:4e:e6:47:f5:
         75:72:34:30:5e:a3:59:5c:ef:83:05:71:3d:c9:9d:df:c4:e7:
         67:6f:99:00:76:7f:07:e3:e8:f5:54:56:5e:13:00:d3:c2:c1:
         af:2f:77:02:8a:57:ee:07:21:7c:61:a6:29:98:54:65:9c:d5:
         04:19:0e:27:52:14:ae:9c:6d:b2:bf:0e:88:49:c4:59:04:fd:
         99:1e:7c:ec:a4:90:28:d7:9f:75:24:a4:67:c3:bc:64:52:b9:
         63:99:99:f4:ae:d8:a9:2e:9d:20:6f:cf:da:f9:a7:86:f8:6f:
         00:c8:b3:1b:f0:3e:ef:d2:de:81:7b:2a:c3:6b:ab:18:96:5c:
         1d:9c:bd:83:e2:5b:bf:ae:8b:31:4d:8d:93:66:f0:6b:32:d0:
         38:ed:05:1d:05:8e:91:78:cf:1f:21:6d:de:2e:13:f5:55:b4:
         9b:f1:88:28:88:98:0d:48:ec:f1:f2:fe:af:05:0a:8f:3e:5f:
         7a:79:cb:7f:cb:c5:f1:ae:ad:26:06:27:54:b3:ff:10:d7:d7:
         65:70:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:38:51 2025 by rpki-client