Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File:                     Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier:          rBA+53YsUKRBCMFPRY9WOXLoRy6N6OSutO29IlhvtY4=
Subject key identifier:   DA:7B:CC:A1:E5:EC:EF:1B:2C:35:36:26:8B:67:43:E3:FA:B8:60:AF
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer:       /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial:       0196C502F28E912342F38A2416459E1E4369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 15:00:26 +0000
Manifest this update:     Mon 12 May 2025 15:00:26 +0000
Manifest next update:     Tue 13 May 2025 15:00:26 +0000
Files and hashes:         1: 1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa (hash: 1p5prwmTs6v5eahIbOF3LewhliAFt44o+dPua2cwXss=)
                          2: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: CpFIdJuVTVYl17vviHCyXQkHXwM4rvkNIDVhYBnu3Tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 15:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:02:f2:8e:91:23:42:f3:8a:24:16:45:9e:1e:43:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
        Validity
            Not Before: May 12 15:00:26 2025 GMT
            Not After : May 13 15:00:26 2025 GMT
        Subject: CN=da7bcca1e5ecef1b2c3536268b6743e3fab860af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:e2:07:77:13:a1:76:28:18:6a:78:53:c9:
                    74:5e:80:7b:fc:0b:8c:4e:5a:0f:c1:4b:2a:80:f3:
                    ec:91:f5:af:7c:be:5b:2a:a1:3e:0f:fc:8a:a4:a0:
                    cb:d3:2e:5a:0b:3e:04:9e:ec:54:f2:17:f0:dd:0e:
                    0b:6c:83:d4:a3:0a:cd:70:bb:b3:7b:0d:09:4a:36:
                    77:b9:bc:69:fe:3e:5b:40:cd:0e:93:fb:ba:d9:30:
                    04:88:6a:c4:29:5b:92:70:56:d2:2f:e9:4c:4d:22:
                    f4:6e:eb:48:23:43:71:9b:81:f8:e1:58:40:4a:44:
                    89:4d:27:23:e4:01:23:bc:ab:0b:25:be:ab:f3:28:
                    0e:51:c3:0a:3b:67:0e:05:c7:88:8a:b7:32:e0:30:
                    b5:e4:ab:b4:e3:76:2d:58:1b:9b:f5:33:3e:41:99:
                    6e:eb:06:d3:48:09:32:fa:63:5c:79:0f:c8:bd:79:
                    1f:6b:6a:69:52:d6:f7:79:30:71:ef:38:c1:30:7d:
                    29:e0:44:3d:78:60:77:31:12:44:5f:c7:27:e8:85:
                    3b:83:3a:15:d7:fe:b1:54:f6:53:3d:31:79:2f:dd:
                    ae:8f:85:81:d6:b4:a1:00:33:fe:47:e0:8e:78:80:
                    60:6e:ef:87:56:9d:0a:c9:a9:3e:83:35:27:9d:f5:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:CC:A1:E5:EC:EF:1B:2C:35:36:26:8B:67:43:E3:FA:B8:60:AF
            X509v3 Authority Key Identifier:
                keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:ff:f8:3e:f3:80:6d:d4:1d:ee:90:03:5c:7f:ea:06:a1:
         e7:72:b5:ef:f2:7b:be:55:ad:ce:12:e1:e9:22:ba:fd:74:e4:
         15:be:f5:66:5e:d0:ea:4d:5f:1b:ea:e0:3c:e6:90:62:e9:ae:
         c0:ab:82:c7:6d:0b:34:b0:1b:ff:b3:40:e6:15:f5:44:4f:aa:
         e6:7d:09:61:6d:59:3c:58:c0:e5:e2:2a:d4:4d:b1:98:57:45:
         6a:25:09:70:2b:3b:6d:99:ac:79:e9:42:b7:10:fe:49:bc:9f:
         a5:57:49:16:07:0f:f0:ae:e1:5c:e8:f4:d7:d2:37:d7:ea:eb:
         c1:52:4b:f2:42:47:a6:f8:84:e9:97:37:11:04:22:b8:18:ec:
         39:d0:c0:4d:65:07:c4:f8:8c:1f:99:53:c4:b1:26:64:e3:db:
         db:e6:73:fd:75:fe:dc:f5:47:23:2a:73:58:f7:47:1e:19:2f:
         4a:f8:39:d4:cb:3c:e8:45:f9:d3:dd:ef:19:ae:d7:c4:c7:fd:
         d4:47:ae:ac:1c:bb:77:1b:4c:78:91:a7:19:65:e9:f2:41:c0:
         3b:2b:86:4c:c6:36:df:e3:be:0b:d7:4d:68:1c:eb:89:53:cb:
         44:eb:62:61:f0:b8:d8:69:a5:ae:ab:9b:71:49:bf:97:ab:8d:
         16:da:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:58:51 2025 by rpki-client