Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File:                     j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier:          NOEnPBS61DnaXT9oe7lUxBwZgLSeek7UpKmWFWu3T5M=
Subject key identifier:   D3:1D:E1:3D:38:73:90:29:66:B5:DF:34:93:AD:14:D2:51:6A:BB:18
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer:       /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial:       0196A68A86652B2DE9D3930611E56E7DF767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number:          1203
Signing time:             Tue 06 May 2025 17:00:17 +0000
Manifest this update:     Tue 06 May 2025 17:00:17 +0000
Manifest next update:     Wed 07 May 2025 17:00:17 +0000
Files and hashes:         1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
                          2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: flcFz9MiYIL2GH/RmBvjEo0T8o6EEQ+2ssUo8LyLIsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:86:65:2b:2d:e9:d3:93:06:11:e5:6e:7d:f7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
        Validity
            Not Before: May  6 17:00:17 2025 GMT
            Not After : May  7 17:00:17 2025 GMT
        Subject: CN=d31de13d3873902966b5df3493ad14d2516abb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:52:cf:1f:7f:f4:54:74:8e:da:e4:4c:86:
                    c6:20:48:c2:2c:52:23:23:40:5f:57:8c:ba:42:a1:
                    cd:43:d4:bd:28:44:b5:cf:c2:05:ee:11:aa:5f:7b:
                    4a:25:f3:8c:42:78:b7:d5:fc:ac:20:5c:8d:4b:57:
                    34:26:66:08:eb:dc:7a:de:d0:89:a9:b6:1e:21:c7:
                    36:bf:1f:ad:80:33:84:eb:62:e9:fc:56:86:43:40:
                    8b:42:60:10:58:ac:16:70:03:2d:ae:4c:2f:e0:5b:
                    8d:f5:ae:aa:4d:39:36:40:79:49:86:cd:43:ce:e8:
                    86:76:71:51:ec:05:bb:12:8b:ef:60:d6:05:f4:a9:
                    7f:81:a0:ee:22:b7:52:78:1a:88:44:05:5d:18:21:
                    e1:86:43:ac:8b:cc:9f:6f:2c:d4:11:08:3e:bc:fd:
                    0f:c6:61:6d:2f:c7:de:22:ab:d1:00:cd:a5:11:87:
                    3b:e5:fc:a3:67:cc:f7:1e:78:35:f4:7d:76:a7:28:
                    f9:4e:31:c9:c4:9d:71:fa:6d:5e:d0:f8:c8:2b:24:
                    29:53:27:d8:83:31:8b:a8:d1:56:40:b0:5b:77:46:
                    92:af:10:e2:92:87:73:74:e0:c3:f8:4b:4e:59:fd:
                    4c:3a:af:b0:68:5c:24:bd:34:8f:9e:ea:cd:35:80:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1D:E1:3D:38:73:90:29:66:B5:DF:34:93:AD:14:D2:51:6A:BB:18
            X509v3 Authority Key Identifier:
                keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:66:0e:c0:8a:0d:0b:10:45:c3:fa:bc:c2:b5:5a:58:67:7c:
         ae:55:4f:f1:dd:50:c3:18:27:98:bf:5b:a5:76:3e:ba:b6:f6:
         d6:3d:de:a9:ec:27:8a:86:72:a1:05:47:59:cf:ab:0d:21:32:
         ea:24:13:2f:8b:89:57:fd:4c:a1:71:07:d1:10:48:4e:ae:b0:
         d4:55:0d:a9:e7:8b:b2:f2:6c:2d:3a:90:13:22:e5:12:2e:25:
         05:51:ee:7e:21:62:b3:6c:9b:b9:60:42:38:99:f6:19:63:65:
         c3:e4:fc:40:f8:ea:d4:d2:c3:a5:13:7b:0b:f2:45:f4:78:e6:
         f3:d9:30:0e:29:e1:07:fb:f0:f2:c8:72:fb:05:44:20:50:a8:
         2b:9c:6d:d4:b3:87:79:cc:36:3e:68:46:88:9f:6f:40:0c:8f:
         14:d1:bf:e8:41:76:ff:35:63:ae:d7:65:c0:58:2b:24:b3:c8:
         41:a7:ca:d9:86:dc:9d:e0:50:df:d5:f8:80:d0:d8:69:c5:80:
         10:24:8b:7c:98:c1:a1:7c:05:b6:d3:ce:1a:78:c4:f6:79:63:
         67:75:0e:4f:b8:23:26:82:3a:4d:a9:89:76:c5:ae:92:db:60:
         b2:13:6c:64:bc:05:7a:e3:2c:c2:12:0b:93:45:9c:b1:0a:b6:
         64:40:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:14:57 2025 by rpki-client