Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          oT9tGXeQE2A7Uis0yy08ywfA3Ka2IPPKKYi61RvvfNU=
Subject key identifier:   89:DE:D0:AD:BB:89:4A:05:2A:7A:52:95:6A:EE:80:07:38:81:B8:1A
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       0196C494EEF74A092514C3FBD0CE2867A15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 13:00:16 +0000
Manifest this update:     Mon 12 May 2025 13:00:16 +0000
Manifest next update:     Tue 13 May 2025 13:00:16 +0000
Files and hashes:         1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: mvlPsoGQT5esCyrAxebJNChNsnUbt+kDTUAkfd3xkhU=)
                          2: vQVKTwJT4leI6HjT4PX8aITkP18.roa (hash: SnTX0BqmORDuYska7e4pXGhwX58LZGJ25QrHzIMD1lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:94:ee:f7:4a:09:25:14:c3:fb:d0:ce:28:67:a1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: May 12 13:00:16 2025 GMT
            Not After : May 13 13:00:16 2025 GMT
        Subject: CN=89ded0adbb894a052a7a52956aee80073881b81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:0f:59:62:6e:b3:90:45:25:0c:5b:82:04:
                    38:56:0a:2c:68:01:fa:14:dc:59:34:1f:61:5d:c0:
                    1a:81:2e:79:e7:6b:af:73:42:a1:ba:83:c6:6f:ec:
                    95:c8:77:89:d4:4d:5e:0f:1e:55:cd:b0:fd:85:9c:
                    cd:09:6b:6f:54:44:b1:c0:98:b9:59:87:20:1d:65:
                    57:f7:74:6f:6d:0e:5b:b0:fc:5e:40:93:c6:5e:3c:
                    6a:31:49:c4:52:d0:10:c5:15:cb:f3:84:16:d9:02:
                    3b:f4:7e:48:02:f4:c2:8c:0e:88:be:1d:93:7c:86:
                    00:a9:5f:dd:c6:47:5d:6d:8a:40:35:72:92:7d:f4:
                    c6:e9:51:1d:bb:8a:9d:01:a3:4b:b9:75:02:03:eb:
                    e9:3c:3a:bf:1c:37:da:a1:1e:98:de:5c:35:98:59:
                    4f:b4:64:77:f0:67:fc:5c:e5:69:94:ed:ea:32:ce:
                    cd:2b:67:11:1f:34:49:34:45:81:80:33:fb:12:8f:
                    7e:c3:2e:10:50:d6:4a:7c:d5:93:3c:25:46:14:9b:
                    cd:6d:79:f8:52:03:08:eb:8a:0a:71:50:83:c9:98:
                    d9:68:ca:6e:b1:ce:37:b4:23:32:58:e7:e7:db:94:
                    a9:0b:ca:1a:27:78:71:16:6f:60:94:e7:ba:77:72:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DE:D0:AD:BB:89:4A:05:2A:7A:52:95:6A:EE:80:07:38:81:B8:1A
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:70:58:60:c9:cf:2a:ab:d9:61:7c:ee:1c:b8:c5:69:a6:84:
         b0:0d:ca:b7:96:1b:8c:60:69:d0:1c:66:d5:b6:1f:be:42:41:
         8b:3a:46:10:ac:52:6a:a5:2f:51:47:b2:36:e6:c1:ab:ee:fa:
         5e:34:b8:22:28:c9:da:ae:c0:7c:09:53:b8:a9:a0:33:d3:f0:
         04:b0:2e:5d:db:a5:05:27:8b:d8:f7:15:15:9a:30:74:1f:ff:
         2f:13:84:35:09:0a:7d:08:c9:4d:fb:9c:1e:8d:20:60:70:69:
         33:09:32:9d:0e:b0:8d:8f:ac:16:09:c0:66:bc:c0:81:3e:4b:
         08:c2:2b:33:e1:bf:14:9b:b0:2b:ea:7a:e8:a1:a6:53:c7:a9:
         eb:58:09:1c:7f:3b:61:b9:15:61:19:b4:ed:ed:c7:02:9e:c2:
         e3:d1:3b:b0:c2:da:60:88:03:f2:a8:e6:71:06:0a:71:46:3c:
         1f:7c:31:83:0d:b0:b7:61:43:cf:8e:d2:1c:e4:1e:2a:ef:ec:
         39:8f:60:b6:48:62:e4:26:5f:f6:aa:51:04:82:c6:cf:2d:5d:
         9c:4a:fc:ca:69:b7:60:0a:fc:99:54:35:74:35:03:b8:7b:af:
         62:87:27:16:0b:85:5e:38:97:a9:2e:ee:e6:a6:f4:6d:b6:19:
         28:4e:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:10:03 2025 by rpki-client