Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          r5r/zlLPdICkItmzybiFVfAvgS5YkqT6BrBcRyeZGH0=
Subject key identifier:   C4:A2:8A:36:21:E6:F8:3B:D4:79:86:AB:73:BC:3B:E6:8B:D7:DE:31
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       0196BA48CB1FFC7E4E7512AAD9461D0B3778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          14BA
Signing time:             Sat 10 May 2025 13:00:54 +0000
Manifest this update:     Sat 10 May 2025 13:00:54 +0000
Manifest next update:     Sun 11 May 2025 13:00:54 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=)
                          3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: gSESIkZvGGFiORXPNTORhA8LqAhxGdWbRhBKDjyLiwo=)
                          4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:cb:1f:fc:7e:4e:75:12:aa:d9:46:1d:0b:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: May 10 13:00:54 2025 GMT
            Not After : May 11 13:00:54 2025 GMT
        Subject: CN=c4a28a3621e6f83bd47986ab73bc3be68bd7de31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e4:91:41:a5:e1:4a:ce:62:e1:99:dd:56:29:
                    c3:62:74:62:38:01:39:ce:79:e1:5e:03:c1:a8:8c:
                    f5:70:0d:2b:55:cd:9e:75:35:d8:9c:26:81:dc:53:
                    9a:bf:41:db:3b:e0:d1:f1:0e:bd:4d:da:ed:73:7c:
                    be:85:c6:9b:a8:19:33:c1:6e:cf:05:a7:91:a5:a7:
                    17:73:a9:3e:21:6c:a6:d2:73:74:0b:cf:22:34:c1:
                    cd:bd:24:10:01:4c:c9:81:c8:4a:ad:ea:b6:ee:db:
                    64:df:2a:07:ff:78:29:6f:a5:7e:9e:79:9e:aa:c4:
                    1a:bc:ef:de:1a:96:1f:40:82:c6:34:72:e9:6a:49:
                    1e:d9:b3:12:5b:b9:08:e2:b4:7e:07:85:b6:9d:dc:
                    66:ab:95:82:df:16:18:09:a9:12:c8:93:f7:87:43:
                    a2:71:6a:8f:2b:5d:d5:4b:7e:e3:81:a9:5f:d8:aa:
                    a2:3c:75:ff:05:b0:8a:73:6d:8b:4f:75:b5:18:c8:
                    d9:3f:6e:6a:43:00:b1:0c:09:68:5a:6d:8e:3c:b3:
                    f7:31:d0:32:57:7d:c8:52:76:50:9f:6b:a5:cb:8f:
                    6a:d3:32:d0:ef:ed:78:1e:44:49:57:9d:cd:0a:8b:
                    2a:de:82:4b:49:46:24:bc:84:a9:e1:46:0b:ff:6a:
                    76:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A2:8A:36:21:E6:F8:3B:D4:79:86:AB:73:BC:3B:E6:8B:D7:DE:31
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fc:0a:7e:5b:28:6c:59:d9:cf:0b:32:ef:47:a0:ee:f2:d3:
         28:7f:52:7b:2f:fd:2a:e0:27:50:eb:5b:cd:8d:d6:07:6d:af:
         03:84:6d:f0:f6:24:12:fc:76:21:9d:d0:74:49:d0:7c:75:cf:
         c6:7a:60:17:ff:fe:74:10:7b:01:1f:73:66:eb:61:95:71:0b:
         75:31:5e:b2:57:07:f7:a8:62:de:db:8a:e2:af:4f:47:c9:41:
         1e:5e:2d:4b:c9:be:4b:42:37:5c:f9:8a:c6:7f:36:f8:b6:86:
         28:77:cc:d7:87:32:c3:6f:d2:19:47:ca:b5:07:e4:45:d4:a6:
         7f:00:d5:35:37:05:d5:c5:c4:e0:84:b0:e2:3a:69:a1:88:9e:
         dc:6d:80:8e:3b:c9:0e:61:ac:26:16:e0:d1:c8:2d:a5:48:9b:
         67:22:0b:b1:65:1c:43:64:29:02:f0:e4:d3:fe:25:78:7d:99:
         67:73:b0:8d:ce:09:06:16:a1:b9:07:52:07:6b:d9:a8:24:1a:
         df:e9:79:42:c0:3e:d3:47:57:cd:a0:b0:61:9c:1e:df:99:94:
         e8:01:78:f9:6a:3e:81:0f:59:da:43:40:80:05:56:de:59:c7:
         fb:30:da:75:43:b9:fb:16:dd:79:09:cd:6b:9c:31:a2:5a:27:
         d0:3b:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:29:33 2025 by rpki-client