Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File:                     J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier:          iAtp40awW0MTO0GmgeAlHo+o6StHAmMbBBciAg8loUw=
Subject key identifier:   DF:90:3C:8C:8B:BC:04:B7:62:EB:DF:AE:29:5C:2C:EB:97:C9:B0:67
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer:       /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial:       0196B06983FE819D129B81C7A6C3A609CD81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number:          78
Signing time:             Thu 08 May 2025 15:00:27 +0000
Manifest this update:     Thu 08 May 2025 15:00:27 +0000
Manifest next update:     Fri 09 May 2025 15:00:27 +0000
Files and hashes:         1: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: pkVwMO4wgVKl4+RR6TkOsNTYF1BRzdmDktv5IXPGqyY=)
                          2: dDAgjd5fwQ3cte1EAxZ7pLJLl0U.roa (hash: 2txr4+GD0XgpxhSLLq5aM5yNR187eckG+kO4tKZmm3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:83:fe:81:9d:12:9b:81:c7:a6:c3:a6:09:cd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
        Validity
            Not Before: May  8 15:00:27 2025 GMT
            Not After : May  9 15:00:27 2025 GMT
        Subject: CN=df903c8c8bbc04b762ebdfae295c2ceb97c9b067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:a0:4a:f8:3f:0e:4d:4b:32:2f:02:c6:d1:
                    c2:3b:ac:78:1b:ff:7c:e5:d5:ed:2f:65:a1:8f:78:
                    10:66:32:8d:23:77:4c:59:8e:78:c4:cc:9c:c2:8e:
                    e9:f0:ff:69:37:22:47:2c:cb:61:56:f1:48:eb:46:
                    da:9f:f1:fc:b6:20:a4:27:d2:0b:60:f7:82:8c:0e:
                    6a:a0:25:04:7b:5b:37:5a:cf:40:01:cb:7b:2c:72:
                    19:33:a5:60:7a:da:87:d7:a1:13:1b:21:5f:d6:2f:
                    75:40:84:dd:c0:eb:54:01:89:79:d7:8f:35:aa:36:
                    ad:22:6b:fa:1c:21:fd:77:b1:24:06:ce:aa:9d:ce:
                    ed:c8:db:1a:94:72:71:e0:21:b6:6b:b0:20:3d:ca:
                    bb:78:00:db:03:45:b8:2e:96:08:e8:fb:2c:30:40:
                    07:bd:89:35:46:ca:f1:b7:34:81:49:f1:70:d2:d7:
                    aa:e8:28:ea:f8:e7:88:a1:a0:9f:52:85:dd:8c:72:
                    cc:67:99:83:79:06:51:df:43:c6:e0:18:c7:19:b3:
                    97:63:fc:43:13:9d:ab:bb:81:45:f8:99:cc:82:ce:
                    d4:ba:cd:c7:9b:61:41:fe:b1:4f:10:48:b6:08:99:
                    2d:5a:c7:fd:c2:8c:7a:c0:f7:48:43:1b:38:1b:d9:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:90:3C:8C:8B:BC:04:B7:62:EB:DF:AE:29:5C:2C:EB:97:C9:B0:67
            X509v3 Authority Key Identifier:
                keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:42:e0:24:d1:45:d7:58:65:5f:e5:41:c8:92:8a:e9:84:4c:
         3f:ed:68:ed:20:47:07:48:d4:77:ce:ec:43:cc:75:44:4e:1b:
         71:c4:8d:48:c0:9f:84:fe:72:aa:23:de:e9:de:c8:a3:16:a8:
         00:d4:06:85:17:03:64:f5:08:c2:ca:b7:2d:3f:3b:c3:43:46:
         02:bf:43:b1:a0:3e:1b:22:2a:4e:58:69:52:59:a9:d4:30:1d:
         92:20:a4:b4:1a:89:af:7f:d1:20:44:22:78:56:1b:10:86:46:
         b2:4b:72:d9:bd:91:ba:c3:3f:08:3f:6e:52:a1:d1:a0:ec:85:
         4f:27:c9:e2:58:09:91:a1:da:0f:1b:7f:b0:67:c5:b8:dc:60:
         a6:52:f6:76:12:1f:e9:9f:f8:69:68:18:88:71:f7:87:b1:5c:
         fb:1d:9d:cf:ee:2b:83:65:54:e5:07:f1:96:1c:d8:62:df:8b:
         32:84:8a:70:48:5f:33:d7:1f:98:3b:1f:11:54:6f:86:af:69:
         fa:8a:c7:2f:f7:a5:36:be:4a:6a:2f:30:a5:7c:8a:dd:c2:82:
         7a:23:79:93:70:ee:97:a3:06:11:ed:ee:9d:c4:4a:b3:fa:8b:
         36:88:9f:ad:0b:50:1f:13:08:f6:7c:04:28:a9:0a:1e:71:ea:
         1e:43:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:38:35 2025 by rpki-client