Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File:                     J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier:          Tgy7WnLGmf/IrplCefCeiyjj4s022dIedNd2TaanDGM=
Subject key identifier:   55:A7:A9:02:06:B2:45:27:40:9C:22:20:71:12:90:A1:F2:89:E5:F4
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer:       /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial:       0196C0B88BDF34488E0C7F30AD1B6FC63645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number:          0D63
Signing time:             Sun 11 May 2025 19:00:41 +0000
Manifest this update:     Sun 11 May 2025 19:00:41 +0000
Manifest next update:     Mon 12 May 2025 19:00:41 +0000
Files and hashes:         1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: c+7GmGVeoizfCXI1D+9eNPGpXkVQA8BICz32N1TK3+8=)
                          2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
                          3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
                          4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:8b:df:34:48:8e:0c:7f:30:ad:1b:6f:c6:36:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
        Validity
            Not Before: May 11 19:00:41 2025 GMT
            Not After : May 12 19:00:41 2025 GMT
        Subject: CN=55a7a90206b24527409c2220711290a1f289e5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:93:96:f0:0d:91:8c:bb:90:6b:3d:8f:7f:
                    f1:bc:4c:2f:91:24:48:df:4d:19:5d:47:4d:bd:5a:
                    34:b5:b7:3b:f9:1b:e4:1e:41:f2:3d:a0:8f:ea:87:
                    3c:a7:7d:62:ba:44:06:56:ea:d5:f3:fa:04:14:1f:
                    e7:6d:d0:e3:fc:da:e7:1d:c2:bb:43:39:60:88:84:
                    bc:f1:b9:46:a3:c8:9e:a2:1c:7c:8c:d0:b9:0a:9d:
                    9c:9f:db:30:10:7b:b2:0b:d7:98:a6:85:c0:ff:2d:
                    e9:ee:0e:e6:30:00:c9:5b:10:92:9f:6d:19:6e:c6:
                    86:09:a0:5b:e3:ba:6b:64:a5:94:f8:0e:f4:94:86:
                    f0:8a:d3:92:c8:ed:c1:bf:8b:69:96:e8:cd:d5:e4:
                    3a:e1:e3:af:28:47:da:df:c9:11:f5:e5:85:c3:29:
                    51:f7:e7:a4:1e:4a:82:5b:33:7a:0e:88:a5:0c:b3:
                    11:c3:1a:06:80:95:11:a5:cb:a6:44:40:2e:dc:bb:
                    e2:a5:3b:df:4e:5c:f0:21:8e:a7:72:f0:f0:a9:56:
                    32:1d:b1:f2:a3:8a:40:6d:eb:90:93:00:1d:f4:b1:
                    2e:9f:4d:69:0c:56:03:05:3b:14:39:ae:7e:50:17:
                    b4:92:16:4d:9b:a0:6d:d5:c6:3f:c9:d1:dc:27:49:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:A9:02:06:B2:45:27:40:9C:22:20:71:12:90:A1:F2:89:E5:F4
            X509v3 Authority Key Identifier:
                keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:07:19:33:ac:ec:9c:e0:00:0d:98:b6:b7:3c:f2:67:e8:
         41:c4:36:c1:b9:cf:71:93:be:c7:71:19:76:3f:fe:25:c8:8f:
         95:d8:6f:5e:09:6d:f1:64:b3:02:cf:a9:dc:e4:36:e2:99:7f:
         2b:a5:61:00:d6:51:65:dd:f3:a7:a9:ab:96:1e:fc:b4:b3:9f:
         30:2b:b0:5c:a0:85:51:8b:02:4a:0f:31:31:65:fb:c2:1e:79:
         58:08:bb:48:d3:50:df:4c:e1:21:82:66:8b:a7:a9:5c:6a:d6:
         34:e5:3e:dd:48:56:df:48:76:21:a0:6d:b6:50:64:f0:56:ee:
         bb:1e:7f:4e:f3:7e:ea:98:dd:02:25:d2:51:32:65:3d:78:1f:
         72:21:9e:45:60:e7:33:d4:81:ce:71:6f:c2:99:26:33:a5:30:
         84:dc:a1:65:f3:24:4c:75:b9:38:9f:2f:c5:11:42:1f:29:08:
         0b:d5:04:d0:fa:d0:59:dd:a9:e2:89:48:4b:34:63:1d:42:1d:
         35:a4:63:77:e2:a9:78:5c:0d:2b:ad:0c:29:23:0c:97:f6:86:
         22:52:34:0e:07:1e:cf:5c:52:ce:33:c1:a6:df:76:cb:a6:88:
         aa:06:df:4b:d2:8b:43:61:6e:94:5b:70:11:2e:31:a4:65:bd:
         91:6f:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:16:21 2025 by rpki-client