Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File:                     JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier:          gTggfNnr/5i0p5ksjmko8B5/kVdoml5C0cgl/Q5MPMc=
Subject key identifier:   80:AB:9F:68:12:D8:FD:9F:89:78:B6:33:5D:83:28:C0:11:9B:3C:34
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer:       /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial:       0196B77E8E041709593F66BD977CE36E0021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number:          017F
Signing time:             Sat 10 May 2025 00:00:46 +0000
Manifest this update:     Sat 10 May 2025 00:00:46 +0000
Manifest next update:     Sun 11 May 2025 00:00:46 +0000
Files and hashes:         1: 3T-1XN6_cwuMNW22iL1_AA25sSU.roa (hash: zx2BF5CFYR8Sr363pI6NcjPdMBZx2ThD7Wo/N06Wwyo=)
                          2: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: /nl95GaDWpEkVKdhGaqSEoAgrn5TNsO0jnn+17ghJYg=)
                          3: kB78k7d7cNChEiOEdhutVluA5Eg.roa (hash: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=)
                          4: wDk7LmI6cHqgPwoPiReork5n7TM.roa (hash: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:7e:8e:04:17:09:59:3f:66:bd:97:7c:e3:6e:00:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c672da72a34cc282adc40f282676de75117654
        Validity
            Not Before: May 10 00:00:46 2025 GMT
            Not After : May 11 00:00:46 2025 GMT
        Subject: CN=80ab9f6812d8fd9f8978b6335d8328c0119b3c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:9c:ea:a3:ad:ac:f8:f7:54:84:6f:7e:ae:
                    52:b4:f2:25:98:20:9d:7a:07:69:19:65:ec:31:81:
                    13:29:46:cd:cd:6a:86:d5:f1:f3:ec:53:79:2d:54:
                    a2:d3:59:40:8e:6b:d9:d4:25:fb:6f:82:62:35:13:
                    d4:06:8e:41:78:71:fd:f9:53:57:11:8a:4e:b1:c7:
                    93:8d:8f:b0:d8:84:0c:7a:a2:91:a4:42:60:f6:79:
                    f3:d6:13:1c:a4:11:fb:3a:d7:3a:33:6c:b0:e4:42:
                    81:27:a4:de:5a:fd:79:da:7e:b0:7a:99:c4:76:06:
                    e3:fe:3c:87:77:bf:82:bd:8d:df:f8:54:ba:95:a1:
                    a0:7f:b5:ab:5b:83:32:e3:1d:e5:5b:b6:67:24:b0:
                    91:26:4e:ba:a8:f1:d5:ab:bf:2f:a7:30:a7:08:a5:
                    87:2b:71:60:6c:fb:98:03:2b:44:b6:09:12:f1:b1:
                    c8:b8:0c:d8:28:e5:6c:e7:17:60:7c:0f:09:07:35:
                    70:cb:e1:3b:2a:93:18:66:f5:4a:04:4a:95:d2:87:
                    cc:c0:bf:6d:d2:45:d6:e7:ed:c3:22:6e:2e:a2:0b:
                    09:17:8e:a8:75:9b:63:19:1a:b5:4b:11:fc:ee:2d:
                    90:34:b5:94:3c:75:24:d5:6e:3d:2e:a9:60:6e:ea:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AB:9F:68:12:D8:FD:9F:89:78:B6:33:5D:83:28:C0:11:9B:3C:34
            X509v3 Authority Key Identifier:
                keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:b7:5b:5f:2c:a7:5b:d7:85:ce:4f:03:f7:32:46:23:b4:
         86:17:d4:17:6f:49:4f:d0:d1:27:25:d0:1f:54:3d:60:9e:34:
         25:74:47:d7:94:64:a1:a8:38:e1:ac:a6:95:43:5f:41:24:7e:
         70:50:80:56:d8:cf:b9:8f:2a:52:18:08:70:e0:36:bc:75:c3:
         6b:b5:d1:fd:cb:3a:f8:64:e3:84:20:20:d6:79:e3:7d:c6:d2:
         c4:57:9e:c4:77:e2:4d:17:d2:55:33:46:8c:0b:67:6a:d0:40:
         d8:f9:85:03:7f:b3:f0:b2:a2:a2:57:a6:85:a3:2f:4a:09:e6:
         13:2a:e0:ed:bb:b7:2d:6f:87:41:7a:ff:cc:9b:a6:86:df:a0:
         0c:1a:d0:18:8a:45:8c:e1:23:7b:1a:c5:d0:86:e9:ed:3c:53:
         d7:7d:fa:48:30:99:81:50:d3:5d:88:72:85:38:c0:c3:c6:a1:
         24:72:ec:4b:fb:7b:6c:f0:c9:6f:06:31:2a:05:95:a2:9c:9a:
         ca:f7:a7:7b:0d:5b:fe:f8:b8:a5:03:f0:77:a7:1b:f6:2f:59:
         43:bc:b7:3e:a3:98:b4:21:f9:fe:f0:b1:f1:c8:02:b0:aa:90:
         fa:7f:c6:c2:f2:6d:dd:bc:d5:3b:e2:c3:b8:42:29:cf:61:b1:
         5f:18:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:29:12 2025 by rpki-client