Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File:                     J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier:          UXlKCpTNKyuO5c07Ay+xbmam3A6eBXrKAP21hoFXyvI=
Subject key identifier:   71:D5:FE:92:47:4B:A1:71:ED:72:9C:DB:67:1C:C2:F1:2C:A6:FC:D6
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer:       /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial:       0196BB2447BF9C82A926E2BFC67234BD350E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number:          0813
Signing time:             Sat 10 May 2025 17:00:39 +0000
Manifest this update:     Sat 10 May 2025 17:00:39 +0000
Manifest next update:     Sun 11 May 2025 17:00:39 +0000
Files and hashes:         1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=)
                          2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: 29CWLerTRfgwxREc7ELj7VD/u+y+cVNM6wwlmvJjO6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:47:bf:9c:82:a9:26:e2:bf:c6:72:34:bd:35:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
        Validity
            Not Before: May 10 17:00:39 2025 GMT
            Not After : May 11 17:00:39 2025 GMT
        Subject: CN=71d5fe92474ba171ed729cdb671cc2f12ca6fcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:37:3c:b7:5e:7b:a5:80:87:20:0d:4f:44:
                    61:f1:9e:14:32:8b:e3:10:86:4a:87:c9:f5:7a:fb:
                    98:3a:90:8e:94:1a:db:3b:ad:dc:18:d7:d2:df:03:
                    8a:7b:1a:eb:43:7b:d4:af:2f:04:e0:0b:26:30:a6:
                    73:64:d8:66:ee:1f:71:09:1d:85:4c:df:bd:7e:46:
                    cf:9a:74:4f:3e:59:c6:b2:b5:d3:82:4d:74:99:94:
                    92:40:8f:25:b7:aa:2f:08:1c:09:e3:73:43:dc:6f:
                    a8:53:2d:6d:99:da:00:30:84:41:e6:38:e0:8a:6f:
                    f2:48:67:49:d3:f8:c7:f9:d3:96:06:8a:11:89:7d:
                    29:e4:90:89:f2:a0:7c:4e:5e:a0:dd:44:dc:7a:54:
                    77:3d:a5:3e:e1:37:d1:96:b4:a7:1b:10:b7:53:df:
                    c6:ce:cf:ce:d7:3e:f4:03:a5:1f:d1:03:ba:c0:d6:
                    53:81:99:18:3c:d5:91:82:c5:cf:15:87:e0:d8:d4:
                    69:4a:92:6a:a4:0d:75:52:a8:60:76:66:a5:71:96:
                    9f:e9:86:86:40:5c:10:8d:87:f6:c4:54:a8:1e:d7:
                    c4:30:31:f5:22:27:75:44:56:60:14:4f:93:8c:fa:
                    1a:0f:f3:ec:29:07:44:c2:09:09:3b:bf:1b:cd:4e:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:FE:92:47:4B:A1:71:ED:72:9C:DB:67:1C:C2:F1:2C:A6:FC:D6
            X509v3 Authority Key Identifier:
                keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:62:df:5d:c5:10:38:44:f6:9c:1e:35:31:14:0f:5a:bf:
         f1:3d:68:d2:32:ad:65:2c:28:b4:f2:5a:96:50:4d:e6:d5:26:
         92:5d:39:fb:7d:ea:75:db:1b:84:46:f7:d0:69:dc:78:f7:f4:
         97:ba:5a:8b:1e:b0:43:96:42:0d:9b:8e:f1:63:0e:d1:7e:81:
         ec:32:13:75:a3:71:3d:f2:74:4b:3b:66:9f:54:3a:c0:8c:5c:
         e6:a8:cb:5a:be:a3:5d:99:57:20:83:f2:f7:29:fe:8c:a8:26:
         75:ad:62:c2:1a:34:74:5f:17:c6:25:92:41:e7:0d:eb:59:e8:
         9b:44:22:e5:78:ec:5f:d4:4d:3a:56:03:a4:8e:1f:ec:6e:70:
         89:b3:e6:43:1e:f7:c5:0a:43:a7:d3:78:79:58:1d:25:18:47:
         65:b0:9d:24:97:c8:95:23:19:87:bb:f9:8c:29:f5:97:a1:50:
         d8:f0:16:b8:eb:ba:5e:04:6f:72:f0:5a:33:98:53:a3:93:0a:
         ee:26:d1:5e:63:3f:01:2f:5d:7d:a2:73:8e:60:9a:3e:b6:58:
         56:81:c5:a5:cf:5a:89:86:f5:ea:a0:4a:9d:7a:5f:1d:b9:e0:
         0d:46:32:1b:e4:28:74:ef:08:10:fa:2d:57:66:2b:e8:94:44:
         88:14:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:05:21 2025 by rpki-client