Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
File:                     Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft (raw, json)
Hash identifier:          d9tWY95F5ybXYOcn+crVaGQS1fOXJs8BOCr6OMrn+KM=
Subject key identifier:   03:61:5E:9A:E5:AA:81:70:77:D3:F7:4F:4C:4F:76:50:B6:81:A3:3A
Authority key identifier: 26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
Certificate issuer:       /CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Certificate serial:       0196B935E1F9166D636CE43094354EB8E4EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
Manifest number:          0202
Signing time:             Sat 10 May 2025 08:00:38 +0000
Manifest this update:     Sat 10 May 2025 08:00:38 +0000
Manifest next update:     Sun 11 May 2025 08:00:38 +0000
Files and hashes:         1: Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl (hash: wLU1e6aIsikMf3HAMK9D4zaiMiEROL/BjHZfQNVtj1Q=)
                          2: Pwru1ms3rswTdeP7mDo9T3oJ3Tc.roa (hash: CQ+EuLT6MmBG/IgV6dpFIa8pWMEUV5bK+xKWi6IuG/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:e1:f9:16:6d:63:6c:e4:30:94:35:4e:b8:e4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269dcdcae3583110e326c5ec18e9dd578febacaf
        Validity
            Not Before: May 10 08:00:38 2025 GMT
            Not After : May 11 08:00:38 2025 GMT
        Subject: CN=03615e9ae5aa817077d3f74f4c4f7650b681a33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:af:f4:2d:8c:c1:e7:8d:b9:8b:d1:f9:ab:f4:
                    80:69:47:52:88:76:0d:54:f1:78:bb:f4:72:38:16:
                    c9:da:e9:6c:ae:3b:7a:5d:cb:77:1f:21:f8:aa:b9:
                    16:05:c1:79:1a:06:61:b1:55:72:a4:ad:4f:9d:c5:
                    86:3e:28:b9:e0:55:37:80:cd:fb:e4:c3:68:68:14:
                    0c:6c:f8:aa:c0:77:af:54:93:35:c4:11:90:3b:e4:
                    2a:f2:2f:e2:b7:f9:0a:fd:18:a3:3d:69:21:64:d2:
                    c9:52:b4:84:ed:85:bb:b0:9e:68:b0:c2:92:81:3c:
                    81:89:aa:47:fb:34:d9:82:06:bd:16:f1:99:6e:86:
                    a7:27:4b:c6:91:6e:10:57:82:20:ee:1c:1e:b0:33:
                    f2:5f:a0:26:45:c0:fa:ec:00:09:1d:18:46:69:c0:
                    ec:49:d7:38:40:9e:84:d8:fe:b9:06:71:18:35:95:
                    20:19:f3:e2:fd:9c:01:de:f5:a2:07:ce:5e:a7:9c:
                    9e:d5:e8:a2:2a:6a:54:39:a2:bb:ae:9a:d5:38:06:
                    16:e4:80:65:fd:05:7c:a0:b4:e1:43:79:00:1f:c8:
                    69:e3:58:65:a0:4d:76:f5:aa:f1:af:0d:9e:4c:f3:
                    83:6c:11:24:0e:fe:39:e8:0d:f3:3d:77:22:36:c2:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:61:5E:9A:E5:AA:81:70:77:D3:F7:4F:4C:4F:76:50:B6:81:A3:3A
            X509v3 Authority Key Identifier:
                keyid:26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:1e:83:d1:08:ac:b4:56:10:c0:71:7a:64:44:e2:94:94:
         3d:01:3e:da:03:ea:f6:a1:2b:fe:f5:8f:63:38:d9:9d:33:7d:
         9f:7a:dd:ba:e7:da:43:2a:44:ec:79:f3:1c:98:4e:b2:cd:fb:
         dc:1c:61:cb:73:75:f1:03:63:73:de:fe:e0:0d:03:c8:23:9c:
         8a:51:f1:be:4e:b4:ac:50:f2:f7:f1:5d:ad:ea:59:c5:2d:86:
         68:7d:d8:5a:3f:04:cc:1f:df:d4:75:a3:41:62:31:80:71:c4:
         51:ec:b6:1c:7e:e0:c7:d0:98:b3:49:67:e5:14:ab:35:29:fa:
         1b:f6:b8:52:9e:9d:ae:6f:3f:f3:d7:9e:0b:c9:61:41:a8:0d:
         3b:83:1e:3d:9b:ac:3f:de:cd:33:8a:d2:c6:53:87:fe:78:0d:
         c7:02:4a:7f:b8:4f:87:fc:7f:bb:4e:16:99:a9:58:45:c8:2b:
         87:ba:7b:92:16:24:8d:04:da:7a:8e:0d:15:23:f1:f1:e0:c8:
         e6:81:cd:a2:de:5f:f0:7f:6f:16:87:b4:56:ce:25:df:4b:5c:
         ea:32:2e:40:3d:3a:cb:11:28:a6:ae:a1:da:69:a2:23:db:01:
         bd:20:eb:d2:e2:1e:99:66:35:1b:8c:3d:20:43:34:ce:2d:5b:
         20:f2:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:30:45 2025 by rpki-client