Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File:                     JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier:          +88NlgekeLWX83fQLT+YZNTXIwD73l83WtZ/Vrn3WHc=
Subject key identifier:   6C:D2:77:B7:E4:B1:8F:A1:27:B6:F5:A8:19:F5:C4:89:FB:FD:A8:1E
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer:       /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial:       0196A68AC058C7F94F5D8D22A797279BA701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 17:00:33 +0000
Manifest this update:     Tue 06 May 2025 17:00:33 +0000
Manifest next update:     Wed 07 May 2025 17:00:33 +0000
Files and hashes:         1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
                          2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: nTJduwzLNrG/JLnslsTRgol2DFHskmEkEXXxUw3QdXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:c0:58:c7:f9:4f:5d:8d:22:a7:97:27:9b:a7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
        Validity
            Not Before: May  6 17:00:33 2025 GMT
            Not After : May  7 17:00:33 2025 GMT
        Subject: CN=6cd277b7e4b18fa127b6f5a819f5c489fbfda81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:7e:d9:6f:c4:e9:a4:b5:22:0f:ae:ac:b8:
                    1e:5b:1c:a6:0a:34:a5:80:3b:e0:c3:21:21:68:9f:
                    7e:34:13:96:f5:01:59:1e:59:dc:ce:38:e8:c2:44:
                    cb:1c:27:84:5b:54:f8:c4:12:5b:49:29:ca:3e:26:
                    3a:39:9a:c2:1e:2f:db:a1:cf:04:82:ab:fc:37:ae:
                    27:83:88:82:99:05:d1:32:a5:11:b9:56:b6:57:c6:
                    6a:58:b0:85:06:69:97:a7:80:09:5e:24:30:d2:01:
                    8a:99:9c:1e:5a:73:d3:66:03:74:0e:5c:25:e1:cd:
                    ae:ac:29:39:b8:55:d8:08:ac:58:2a:ed:1a:4c:7b:
                    15:c9:f3:f6:ee:a3:3b:47:8d:7c:66:3a:fe:a8:08:
                    5f:31:ba:27:1f:bb:44:6d:12:a3:39:34:49:a4:29:
                    0f:ea:ad:7a:bc:45:25:8f:e4:3f:8c:d1:be:e1:0c:
                    76:d9:4d:5f:ec:b0:8f:99:05:5e:cc:bc:e6:a4:69:
                    2e:3d:0c:28:68:2f:45:75:ba:bb:9e:ca:8c:14:a4:
                    07:59:f1:30:ce:fe:87:cb:6b:58:bf:7d:3f:bd:24:
                    30:4e:7c:24:d4:d7:bc:b4:5c:ce:43:26:c3:8d:d4:
                    45:28:f9:74:ef:b7:4e:99:75:6d:46:e4:57:88:7b:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:77:B7:E4:B1:8F:A1:27:B6:F5:A8:19:F5:C4:89:FB:FD:A8:1E
            X509v3 Authority Key Identifier:
                keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a0:7b:a6:57:82:cd:57:a1:ce:fe:67:ab:9a:92:ee:b7:f7:
         f8:a4:85:2b:28:5e:cd:0b:0f:4b:8f:70:a2:8f:9a:a3:ac:08:
         07:1c:0d:93:bc:b7:b8:26:c0:97:6b:fe:99:d9:87:72:17:66:
         03:e2:cd:ae:2d:2b:06:e3:1a:47:e0:a6:85:09:14:ba:a7:e5:
         0b:63:8a:b1:f0:dd:63:50:51:d2:be:07:0a:f0:12:1a:c4:b9:
         e5:37:ee:ae:63:8f:6e:63:3a:69:7b:2f:fd:76:5c:2b:c6:5e:
         f5:76:f9:8d:b5:95:02:e5:e7:b5:56:d9:bf:e7:e5:d3:f1:1a:
         2e:57:5d:7c:2c:fc:28:7e:a0:59:de:57:ab:18:aa:e3:26:f0:
         a1:a3:de:37:0c:09:58:bb:1c:34:e2:09:3c:cd:42:b6:25:c0:
         33:5b:f8:73:48:ed:f0:f2:8f:dd:7d:c6:54:94:8f:ed:e1:77:
         e6:bb:ad:13:3e:b3:c8:ce:5d:ac:7c:50:05:c4:c4:ac:bc:91:
         d4:db:a2:19:6d:d4:1e:24:5e:72:c0:32:aa:2f:d8:29:d1:c7:
         ed:81:6f:a7:61:7c:11:5f:12:6f:8e:23:25:44:e3:8d:06:3a:
         ad:22:a7:ce:1e:b1:83:94:1d:3c:49:f7:78:f2:f5:97:27:29:
         0b:cc:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:58:16 2025 by rpki-client