Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File:                     JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier:          VEw2cHUefoQ92DjnBpfjWpA5V8/1nfz56BadrKAy2Qs=
Subject key identifier:   42:76:38:CC:22:CD:3B:D9:A7:EF:EC:34:77:95:69:53:45:06:22:42
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer:       /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial:       0196C683F764EE918A4A4389428FA9C565FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number:          0865
Signing time:             Mon 12 May 2025 22:00:59 +0000
Manifest this update:     Mon 12 May 2025 22:00:59 +0000
Manifest next update:     Tue 13 May 2025 22:00:59 +0000
Files and hashes:         1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: Oiww5XfZ9tlyw6khV100lYxXNzGRqUH1zwWaxvmCbqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:f7:64:ee:91:8a:4a:43:89:42:8f:a9:c5:65:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
        Validity
            Not Before: May 12 22:00:59 2025 GMT
            Not After : May 13 22:00:59 2025 GMT
        Subject: CN=427638cc22cd3bd9a7efec347795695345062242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:5d:6f:66:4a:42:6b:8d:5a:b9:91:d3:82:
                    43:e4:87:2b:ae:e9:f1:8a:c6:8e:24:53:6b:f0:4c:
                    bb:a8:52:18:a6:12:6a:fb:fd:75:52:14:e5:1a:5e:
                    97:c5:8c:b9:b3:77:c1:59:9e:c0:cd:75:57:57:f0:
                    92:79:77:3b:b4:77:f7:7f:11:de:99:75:33:dd:4e:
                    25:0a:e4:f5:21:33:59:df:0a:08:5c:43:33:e0:ab:
                    94:b1:47:f2:00:6d:7a:83:6a:23:61:f9:dc:9e:42:
                    fd:7f:d4:30:cf:64:0a:5f:a8:04:df:cc:bc:97:a3:
                    7f:92:0b:35:a3:a4:e8:31:ba:fd:29:d7:f2:12:db:
                    69:a4:ac:c6:6e:91:61:e4:7c:de:b4:7a:e4:ba:a8:
                    07:96:1d:16:28:88:d8:e9:6d:e8:54:19:62:bd:5b:
                    86:a6:fa:d3:f9:5a:43:cc:d7:e8:d2:00:5a:95:f9:
                    b4:92:ac:fd:e6:2c:85:ac:d6:2e:83:ab:53:e4:b5:
                    f7:3c:5f:a3:67:60:e5:50:5a:37:95:ec:9b:14:a2:
                    e9:95:b6:f7:42:ba:85:87:fb:c4:ee:4b:43:27:d5:
                    f1:5a:58:a4:c4:7e:ee:e5:b3:08:db:4c:b6:8b:61:
                    cc:29:1e:fe:f8:6d:23:c0:07:e2:5c:a3:52:ff:af:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:76:38:CC:22:CD:3B:D9:A7:EF:EC:34:77:95:69:53:45:06:22:42
            X509v3 Authority Key Identifier:
                keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:dd:9f:2c:ef:a8:77:14:d9:0a:89:2e:d1:a2:c8:d0:73:
         94:ef:54:eb:dc:14:cf:51:1c:a4:5d:ec:ce:94:4e:ba:e2:df:
         b3:ca:27:55:96:d8:53:80:53:89:f4:5a:ca:28:2d:3e:da:79:
         da:cf:51:1a:c8:73:77:82:35:18:3c:cf:64:ce:2f:63:58:90:
         95:8c:63:27:95:ed:c6:12:87:5f:cd:e8:82:42:61:33:f2:0e:
         5a:74:9a:af:d2:09:7e:f9:fe:72:83:d1:ad:a8:05:33:00:99:
         41:10:63:7a:5e:a7:12:97:d5:39:49:bf:57:2e:f0:59:f7:9d:
         9c:38:02:7a:5a:d8:74:ef:75:00:29:11:98:b9:1d:67:21:26:
         61:2d:f6:98:a3:7e:d2:aa:5a:7c:ea:b4:76:98:93:48:fb:1d:
         d5:b9:c2:83:a3:54:eb:71:61:fb:10:f9:04:b6:45:a2:77:1d:
         6a:6e:c4:4e:a3:f7:8e:c3:9f:0c:61:e8:0c:b6:8f:ee:a5:63:
         52:37:df:f6:ef:7b:2b:21:8f:ad:e5:8b:de:27:26:e7:d8:05:
         fa:d4:23:67:95:dd:0c:cd:f2:42:3d:c6:01:21:48:df:57:27:
         5d:73:1b:49:ed:3f:e1:20:70:7a:6c:a8:18:d5:ef:c8:50:b6:
         6d:2f:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:18:39 2025 by rpki-client