Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File:                     JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier:          z3Xf+cT2ZrIHwQuX+xIYE0iSTtW9MhpimTQ2Hvzvmk4=
Subject key identifier:   D4:F8:60:AC:6D:6A:5E:29:09:70:C0:F2:C7:BE:68:77:9D:ED:7B:91
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer:       /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial:       0196B6D94CEA8713B159CFE6A1A4E98870E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number:          0281
Signing time:             Fri 09 May 2025 21:00:16 +0000
Manifest this update:     Fri 09 May 2025 21:00:16 +0000
Manifest next update:     Sat 10 May 2025 21:00:16 +0000
Files and hashes:         1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: gcb4R99GHBBhfWp1v/Nytc7ET0BXDzd/ET2ZUpHAhos=)
                          2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 21:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:4c:ea:87:13:b1:59:cf:e6:a1:a4:e9:88:70:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
        Validity
            Not Before: May  9 21:00:16 2025 GMT
            Not After : May 10 21:00:16 2025 GMT
        Subject: CN=d4f860ac6d6a5e290970c0f2c7be68779ded7b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:2b:af:a1:10:3a:93:d9:9c:7e:8e:88:4b:
                    5d:45:9a:9f:68:b3:ad:c7:7c:51:fa:21:c3:85:62:
                    9b:4d:57:66:be:78:26:d1:fe:6e:78:08:fc:a8:02:
                    ed:a9:9b:2f:c5:6f:4d:a9:6f:4a:88:b8:a4:eb:5e:
                    2e:9d:57:04:cb:3c:cb:99:89:91:67:c7:72:f8:aa:
                    39:71:92:12:ff:43:63:13:9c:fd:24:1d:94:ed:7e:
                    b1:a7:e8:cd:bc:f2:23:84:10:0a:fd:68:53:e1:87:
                    a5:28:0e:de:a7:2a:fb:7f:a2:5c:b0:6a:36:ea:44:
                    23:9c:28:4a:e0:1e:67:c1:ce:00:79:1d:fc:9b:e5:
                    85:5e:d4:45:56:f4:16:f2:7b:b1:3a:37:67:6f:50:
                    c4:9f:a7:6b:f5:07:47:39:60:95:f0:71:9c:c6:2e:
                    f4:de:30:9c:21:6c:f6:fe:82:dd:89:08:ef:e3:fd:
                    1a:af:fe:a5:fc:ac:b1:94:76:ac:57:49:a2:b5:6d:
                    4f:6d:c4:85:f2:a7:35:47:2b:74:a3:d6:88:a8:00:
                    11:b5:19:42:c2:1a:2f:10:a5:07:d7:86:4e:78:fb:
                    b7:11:f4:9f:3f:5e:71:e8:ba:bd:9d:ea:84:6f:bb:
                    1c:f0:02:ff:7a:9e:a8:04:c2:f1:be:1e:8d:c1:99:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F8:60:AC:6D:6A:5E:29:09:70:C0:F2:C7:BE:68:77:9D:ED:7B:91
            X509v3 Authority Key Identifier:
                keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:05:0d:8a:d8:12:f0:de:32:33:dd:b2:3f:6e:25:22:65:c5:
         f2:1a:cb:27:8c:fe:34:0b:72:e3:aa:10:68:46:d9:f7:a8:a9:
         0d:6f:0c:16:64:25:d4:0e:c6:ec:0f:d4:5e:50:bc:f6:01:52:
         2e:27:f0:27:b4:8f:97:87:18:e5:29:f2:17:ff:4b:39:be:79:
         c2:f1:6c:d4:27:72:ad:4d:70:25:6f:27:04:24:7e:f9:8d:88:
         b1:ec:ed:a7:cd:1c:30:79:9f:c6:11:bd:a5:5a:f7:02:0d:74:
         7a:5e:1b:07:cf:04:3b:58:87:a6:01:19:0d:5d:c8:ef:51:15:
         d0:35:be:a0:95:52:00:11:74:b9:31:bc:d5:12:e6:8d:1f:d2:
         f1:03:0f:4a:65:be:88:7f:00:2c:fa:ea:84:a2:55:9c:85:14:
         ca:82:6f:dd:16:79:1a:ca:21:f1:87:1a:c1:8b:cb:e8:96:73:
         08:9c:3d:b2:5a:5d:72:cf:d6:cf:56:18:5b:f6:b4:da:72:58:
         5e:15:a5:52:70:48:8e:dc:02:67:44:96:ad:d1:0a:e4:f3:0d:
         63:78:a9:11:6f:43:1f:98:60:c6:83:05:75:f1:ca:17:28:32:
         18:d6:6f:39:04:15:94:c6:e2:0a:a3:98:f5:ae:e3:f4:75:ed:
         2e:a6:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:48:10 2025 by rpki-client