Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File:                     J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier:          OHMf0W4g4Ux8Roo7XeQTAiR+bkKlF5ucbRGLRY8Ful0=
Subject key identifier:   55:88:59:9A:A7:3C:91:C6:C9:28:6E:62:E3:20:33:26:76:C8:88:A0
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer:       /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial:       0196D1AC81CCCDAD215F24F21AF1E2D84EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number:          EB
Signing time:             Thu 15 May 2025 02:01:05 +0000
Manifest this update:     Thu 15 May 2025 02:01:05 +0000
Manifest next update:     Fri 16 May 2025 02:01:05 +0000
Files and hashes:         1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: Vj9bL2JG6AVs3WLRfKarIqP4RXW2wMFjm19hSyOzuh8=)
                          2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 02:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:ac:81:cc:cd:ad:21:5f:24:f2:1a:f1:e2:d8:4e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
        Validity
            Not Before: May 15 02:01:05 2025 GMT
            Not After : May 16 02:01:05 2025 GMT
        Subject: CN=5588599aa73c91c6c9286e62e320332676c888a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:a0:33:1b:96:e5:db:97:74:a8:bd:2f:6d:
                    c2:70:33:db:90:a2:17:d6:27:87:6b:6e:6c:e4:da:
                    ce:2c:42:6b:6d:46:75:ac:58:b0:73:17:d4:0f:d8:
                    84:0e:c9:f5:38:cc:95:4d:68:f0:62:9f:f7:69:b0:
                    0b:eb:80:7f:1f:ad:dd:9a:b9:15:4d:a9:0e:47:ff:
                    69:dd:d3:03:36:e3:ba:f0:21:1c:6f:3a:f5:d2:cc:
                    44:e7:15:58:78:f0:35:13:ab:9b:7e:3f:98:dd:61:
                    20:62:df:56:45:da:b8:5b:9d:84:af:6b:f3:9c:8d:
                    c0:51:84:0b:c3:5c:ad:41:5d:e4:c5:13:b4:e9:61:
                    d4:fd:1f:15:8b:75:6e:9a:df:61:04:b5:83:50:80:
                    67:91:3e:1b:b0:45:a8:f0:29:a4:f2:e1:28:16:c9:
                    87:08:5b:e8:50:45:ce:0a:9a:0f:d4:2b:54:eb:e2:
                    7f:68:d3:af:e2:db:e4:b0:87:87:1e:ef:b8:c6:e0:
                    5d:2a:62:64:77:f2:80:c2:28:c4:98:67:7b:98:98:
                    1a:51:5a:69:cd:ce:9d:87:50:72:11:11:d2:4b:33:
                    1d:ea:e2:dd:37:47:90:8c:c0:45:90:ec:3e:0c:0d:
                    37:d1:41:ff:72:47:8e:2d:bc:f4:59:94:6c:01:7f:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:59:9A:A7:3C:91:C6:C9:28:6E:62:E3:20:33:26:76:C8:88:A0
            X509v3 Authority Key Identifier:
                keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:5c:ea:e0:6a:88:2c:82:d0:dd:ca:88:ed:16:37:cd:f4:
         3b:ec:9e:9f:db:f8:c9:f6:ba:9f:15:b2:53:46:0e:85:08:e0:
         7f:1f:e3:b5:5f:e3:c4:53:7a:39:62:e4:9c:e5:bd:87:b5:b9:
         27:0e:7f:e9:d6:36:ed:a5:55:dd:d6:6c:08:8e:cd:b6:d2:a7:
         97:86:18:f9:79:a9:a8:01:c5:60:b7:98:04:9f:54:9f:12:f6:
         d0:cd:da:ff:82:59:1d:a3:07:ad:a5:0d:9f:df:de:9c:4c:59:
         cc:3b:ac:4b:57:77:e8:59:25:bf:10:58:07:c3:1f:f1:be:7d:
         66:4a:93:4b:c3:86:6b:f6:f4:b7:41:d3:66:7a:85:f5:78:d7:
         1d:90:db:ea:2f:c1:82:09:4f:16:49:ef:ed:2e:46:b1:9f:85:
         4f:93:c9:9b:bf:45:2a:66:f6:6d:a3:51:87:b3:44:ee:90:cf:
         fa:f9:f6:85:c1:9d:bf:6c:88:c6:78:af:91:82:9d:42:4e:c3:
         4c:11:c4:35:c9:6b:da:37:ba:c0:f1:7f:8e:9b:43:cf:7a:07:
         08:68:a2:fb:c3:de:2c:f5:8b:01:0a:97:38:98:57:a0:c2:c9:
         78:ed:c0:59:fe:f2:22:3f:75:29:6a:bb:24:4c:bf:cb:16:a9:
         b3:93:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:50:27 2025 by rpki-client