Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File:                     j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier:          GmA331GNz4cNkJELnb1b/BLsNklJMTaeILooqKbnrEI=
Subject key identifier:   91:AD:2C:20:9F:33:38:B1:56:ED:24:4C:E4:6F:09:1B:AA:4A:2E:A0
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer:       /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial:       0196BBC8C945059551AF888A6FBE965AC9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number:          0359
Signing time:             Sat 10 May 2025 20:00:19 +0000
Manifest this update:     Sat 10 May 2025 20:00:19 +0000
Manifest next update:     Sun 11 May 2025 20:00:19 +0000
Files and hashes:         1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
                          2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: kx+NHneBzCGWFXcETBf3XUmRJM7v1iJeTiM8Cfz1/6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:c8:c9:45:05:95:51:af:88:8a:6f:be:96:5a:c9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
        Validity
            Not Before: May 10 20:00:19 2025 GMT
            Not After : May 11 20:00:19 2025 GMT
        Subject: CN=91ad2c209f3338b156ed244ce46f091baa4a2ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:b0:f4:c8:f4:1a:e0:91:02:39:f5:5b:01:
                    3f:9a:4a:37:be:3e:81:f7:1d:09:84:53:b6:45:02:
                    2f:43:57:1a:03:fb:b9:11:0d:95:ad:3a:5d:b8:95:
                    68:a0:f2:7b:af:69:56:d7:01:85:45:90:b6:cb:2e:
                    8d:ab:20:5f:25:fc:91:6b:4e:de:81:12:a2:46:20:
                    5c:0c:a7:fd:92:73:58:ed:d7:44:b1:6f:ab:2a:4c:
                    10:ee:55:99:61:cc:f6:50:1a:94:06:74:d4:2f:20:
                    cb:0e:95:e5:6b:a8:ae:3c:7c:5e:80:e8:c5:7f:99:
                    a6:69:71:a5:fa:a4:d5:d0:52:62:c7:64:d1:20:e6:
                    dd:fa:6f:2c:8e:7f:37:d8:d3:e3:d5:33:4b:ae:51:
                    7c:92:f0:f1:07:06:80:b7:07:fc:20:6e:44:83:bd:
                    53:9e:59:12:cb:8a:e2:cf:90:27:27:7d:d4:b4:f7:
                    12:fe:9e:ec:cb:90:4d:89:08:0c:d8:3c:71:05:3e:
                    47:b6:3b:50:b4:0a:4d:2d:a2:c6:21:66:e2:51:05:
                    37:15:f5:e3:50:02:a9:11:af:f7:76:b5:c2:4e:5a:
                    1e:17:e1:35:1b:89:45:ab:bd:ed:90:29:15:54:b0:
                    23:42:ca:03:ef:be:ab:f2:e5:32:26:2f:b7:5c:48:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AD:2C:20:9F:33:38:B1:56:ED:24:4C:E4:6F:09:1B:AA:4A:2E:A0
            X509v3 Authority Key Identifier:
                keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:41:89:d9:da:ce:44:cb:62:48:2e:18:85:ea:aa:9e:58:4f:
         31:40:15:ad:44:17:70:83:11:82:ca:1f:66:1c:ed:8b:90:46:
         bf:2e:fe:67:5e:a2:43:25:da:d2:5d:7f:bc:6b:ea:52:e6:23:
         60:b1:48:75:76:76:a8:59:37:5b:df:78:68:4d:59:0c:c7:8e:
         d3:43:2d:51:40:70:1f:58:ce:49:b6:f9:4c:b3:f9:19:5f:cc:
         33:eb:82:a5:d7:ed:8f:c5:70:ea:d8:29:45:4a:50:dc:b7:dd:
         8d:60:3c:f4:ba:8a:2f:83:e0:c9:b4:d6:c6:79:c6:db:81:46:
         a6:5b:8c:b2:41:5b:e7:57:43:bb:24:bc:24:ee:f8:4e:7e:47:
         e6:54:e6:c8:b2:e1:80:c0:be:f9:8f:bf:3f:86:5a:75:72:6e:
         04:e7:2c:df:d3:4c:bd:26:52:c8:b4:38:47:95:5c:ba:d4:fe:
         97:d0:28:58:b7:d7:17:18:a5:c4:16:2e:69:38:69:f5:c3:ad:
         87:72:d9:f0:34:bf:0f:59:ec:8d:f2:7f:45:17:40:2e:c1:7f:
         85:88:6b:22:5f:7a:2a:2c:00:03:9b:35:ee:55:26:dc:b6:0e:
         ca:55:c9:ed:44:17:a0:4b:e8:f1:cc:47:36:49:3b:88:da:db:
         9d:6a:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:25:17 2025 by rpki-client