Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
File:                     JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json)
Hash identifier:          jmsTdjtLyEhjQ72f/XaRAbg5/Y+6+XTOORAYR3U2LPw=
Subject key identifier:   43:D9:28:09:D0:FD:6E:30:F3:13:AC:9E:9C:D2:08:B8:25:24:AC:11
Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
Certificate issuer:       /CN=25a3f511d0095606a525084ae460836dc5d24397
Certificate serial:       0196A4D3117B31ED26AC5B65A2EA42B6F15D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 09:00:18 +0000
Manifest this update:     Tue 06 May 2025 09:00:18 +0000
Manifest next update:     Wed 07 May 2025 09:00:18 +0000
Files and hashes:         1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: kc7q7NJBljpEr8CX1C98o8BrAYGRP4poAFadrm6ibyg=)
                          2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 09:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:d3:11:7b:31:ed:26:ac:5b:65:a2:ea:42:b6:f1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397
        Validity
            Not Before: May  6 09:00:18 2025 GMT
            Not After : May  7 09:00:18 2025 GMT
        Subject: CN=43d92809d0fd6e30f313ac9e9cd208b82524ac11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:7e:c8:36:ae:b5:3a:76:cd:6c:94:19:6c:
                    c0:d4:6b:66:61:aa:0f:17:eb:3b:d7:ac:de:9e:34:
                    70:16:18:a4:0e:99:25:01:88:97:9b:54:e9:d4:5a:
                    44:59:44:37:0a:fe:73:fd:26:e7:1f:de:88:24:b8:
                    a5:46:40:d2:7b:45:01:d4:36:45:de:17:2e:41:82:
                    1a:0c:92:1c:af:03:37:26:37:d6:70:0e:a7:c2:85:
                    8b:b8:f8:ad:74:c7:c7:f5:3c:52:ae:71:eb:92:e5:
                    19:20:f7:9d:b5:99:82:ab:c8:c5:af:5f:df:d4:ae:
                    f3:fc:ae:8e:b5:1e:e4:37:0b:c7:99:83:b4:0d:1a:
                    1f:2c:4c:51:3e:5c:d9:2f:83:b7:15:48:9a:04:6d:
                    5e:67:7d:8b:bd:de:25:93:1e:93:48:e7:50:d2:c1:
                    8c:f9:c6:7f:47:0d:53:0a:06:5f:2e:95:61:13:21:
                    9b:20:c0:e1:c5:b9:18:1c:21:38:32:69:ee:8c:cf:
                    98:1b:c4:3a:de:fa:3e:2c:37:f0:75:d5:59:6b:d9:
                    2b:a6:32:17:6a:b7:cb:65:5c:d5:fd:39:89:14:ef:
                    23:7f:82:d2:fa:82:ed:1b:53:ff:de:00:42:58:fc:
                    d7:8f:ab:4a:f5:1f:f7:b0:dc:a7:b3:7d:f9:f3:47:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:28:09:D0:FD:6E:30:F3:13:AC:9E:9C:D2:08:B8:25:24:AC:11
            X509v3 Authority Key Identifier:
                keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:33:dc:90:5c:9a:f5:d9:e2:74:c3:2a:1c:9e:e8:05:fb:
         77:44:f8:8f:45:a4:bb:ac:39:ae:26:ec:9a:bd:8b:d8:08:e6:
         83:10:d5:a2:a2:9d:d1:b6:b9:a9:ca:fc:b2:41:55:de:e6:4f:
         b0:04:8d:57:f2:1f:5d:28:25:47:a4:f9:d3:a5:29:d7:a5:c5:
         a6:d5:eb:69:82:c0:f9:80:98:40:d5:72:0b:9d:57:f8:b3:0e:
         1b:23:dc:6c:2a:38:1a:6f:16:d6:89:ae:57:8d:26:99:7d:de:
         9d:ca:51:71:7c:10:c7:7a:c2:18:7e:bc:fd:6d:0e:d9:ae:29:
         4e:c4:e3:ee:5c:5d:76:19:5b:22:f0:20:96:94:f5:88:89:59:
         75:fd:31:39:b5:3a:6a:c4:46:6e:f4:4e:ac:25:16:36:50:29:
         03:2d:e2:61:2f:b8:2c:51:fa:c4:4f:fb:29:44:6c:dd:78:91:
         42:8b:28:6b:b0:75:ff:e6:aa:8c:bf:72:6b:75:5a:39:f1:43:
         cf:d4:4c:36:df:27:df:47:16:1e:fc:fc:73:de:ff:70:ea:f9:
         81:a8:a7:f8:1b:f6:58:bf:b5:85:fb:1d:3b:2f:0d:92:c1:12:
         dc:ff:be:d1:3c:94:7c:0f:20:83:7b:07:7b:23:69:c7:c9:fa:
         55:71:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:54:14 2025 by rpki-client