Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File:                     JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier:          Z5vidJbyD6J8JRnSJUoGnNaaoZipbvwor8RhqE60KYE=
Subject key identifier:   7A:D6:1B:EC:02:E9:19:3F:AE:D7:BA:08:AD:3F:EF:38:27:CA:B4:57
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer:       /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial:       0196CB060AABDE49C722F69AC9996E684426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number:          1532
Signing time:             Tue 13 May 2025 19:01:32 +0000
Manifest this update:     Tue 13 May 2025 19:01:32 +0000
Manifest next update:     Wed 14 May 2025 19:01:32 +0000
Files and hashes:         1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=)
                          2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: ze6yQ/NYRXQ4nFQvgVFMmyPUNDCK5E7rl+E5inq0rkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:06:0a:ab:de:49:c7:22:f6:9a:c9:99:6e:68:44:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
        Validity
            Not Before: May 13 19:01:32 2025 GMT
            Not After : May 14 19:01:32 2025 GMT
        Subject: CN=7ad61bec02e9193faed7ba08ad3fef3827cab457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:fa:7a:cd:1d:82:eb:03:c2:d3:b9:c8:19:
                    f8:99:c3:62:11:8b:90:72:b3:93:27:17:ec:5b:d9:
                    48:ea:3a:d3:81:24:f3:3a:18:91:4d:3f:7b:63:eb:
                    56:aa:5e:5c:39:09:27:8c:d6:c4:3c:f0:77:a1:e2:
                    b4:f6:2c:14:81:86:27:9e:52:22:d7:f6:68:dc:27:
                    3c:90:5b:c8:f4:20:1f:96:f1:44:af:91:e2:95:82:
                    1c:a2:22:23:e2:37:da:35:ef:1c:40:81:8c:04:83:
                    c5:e2:32:ea:a3:80:19:22:ce:94:33:d3:c8:86:00:
                    c6:65:5b:0e:09:9e:be:55:26:48:f9:44:94:8c:2b:
                    72:b6:ac:02:59:ce:3e:8c:3c:31:d9:c0:1c:03:fa:
                    0c:22:eb:9c:de:f3:4e:64:41:07:9b:29:fa:e6:75:
                    50:13:96:33:f0:74:11:ed:84:0d:44:45:a2:23:ff:
                    aa:a6:84:11:06:5c:c1:02:75:dc:fd:77:19:7d:2f:
                    c1:04:d1:b5:99:de:34:1c:62:bd:93:84:be:38:ad:
                    74:60:d6:3f:d0:83:a7:e5:81:b4:3a:da:ff:20:99:
                    73:65:4d:72:0f:d2:5a:8e:4a:4a:88:31:19:3f:9e:
                    cc:fc:49:ba:6c:e1:3e:8c:3a:74:cc:43:54:d0:52:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:1B:EC:02:E9:19:3F:AE:D7:BA:08:AD:3F:EF:38:27:CA:B4:57
            X509v3 Authority Key Identifier:
                keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:32:a1:73:37:e2:55:f5:5a:2a:a8:89:8f:8a:e2:0b:e9:41:
         4a:2b:19:0b:06:59:eb:d2:d2:b6:fb:29:85:25:7a:1d:23:ee:
         a1:cd:5b:55:92:72:bc:12:7a:bb:b3:96:97:83:13:18:fc:02:
         72:b1:b5:64:59:69:c1:4a:da:dd:5d:ad:69:4e:e9:2c:db:ad:
         a9:01:d8:c7:5e:57:b4:a4:1c:1a:9f:97:f4:16:5f:eb:76:41:
         68:80:57:4f:d6:ec:e6:b9:dd:92:68:fa:90:90:3f:f4:31:c2:
         1c:cd:f0:00:f8:fc:2a:7c:93:20:56:5d:a4:09:00:22:84:b0:
         8d:99:3a:23:74:93:a1:36:d8:e2:4d:14:3c:ff:17:89:da:6c:
         48:27:97:86:3e:f1:23:06:ed:3b:fc:d1:15:21:be:58:38:79:
         12:a0:2a:b2:29:08:c5:84:39:94:1d:6a:7e:25:e5:59:19:6c:
         ca:73:11:17:b0:e5:08:90:c1:ca:10:71:30:bc:68:bc:0b:cc:
         a9:1d:8d:46:e1:7f:5d:88:d0:8b:79:89:63:32:e7:3e:ab:16:
         a1:76:55:9a:ec:8b:d2:ab:d8:11:ca:c3:94:b2:15:c1:1b:d7:
         37:ee:ef:73:2c:d2:d3:79:5c:2e:e0:88:db:72:d9:d2:9a:33:
         72:cf:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:39:57 2025 by rpki-client