Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File:                     J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier:          mGLI7WMKl776nGF2RA/3p/uQsBy7t5hzvH7b8QGx2Eg=
Subject key identifier:   E3:DD:D8:4F:80:51:64:E9:CA:17:EF:7A:18:AA:A8:59:CA:56:87:90
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer:       /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial:       0196C5DE90BB68AF528F1FB32D43F82FE3D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 19:00:19 +0000
Manifest this update:     Mon 12 May 2025 19:00:19 +0000
Manifest next update:     Tue 13 May 2025 19:00:19 +0000
Files and hashes:         1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: 6NBjDJGpynCbneNs3wRqroCF8NsCq+xraPmUsosQGmQ=)
                          2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
                          3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:90:bb:68:af:52:8f:1f:b3:2d:43:f8:2f:e3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
        Validity
            Not Before: May 12 19:00:19 2025 GMT
            Not After : May 13 19:00:19 2025 GMT
        Subject: CN=e3ddd84f805164e9ca17ef7a18aaa859ca568790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:56:36:0d:12:bf:f5:51:2a:1a:72:f3:28:
                    9c:9e:71:5c:d1:94:0b:45:08:12:5f:2a:01:bd:1a:
                    dc:73:43:df:9e:c8:7e:5c:5e:f8:6c:3e:91:f2:66:
                    af:f2:67:41:87:8d:8e:41:52:d2:4c:a1:6f:34:ea:
                    e5:06:9f:f7:f5:bf:cf:84:09:a9:03:97:d5:a6:9f:
                    4e:c4:3c:10:5f:5d:3c:0f:4d:6f:d0:5e:c3:80:b2:
                    28:d8:65:c2:32:05:17:fd:df:fd:71:12:18:3f:c9:
                    7c:55:44:7d:b4:5d:40:05:45:38:96:a4:5c:9d:c9:
                    1e:18:d9:c0:ea:bf:1b:6e:a5:64:5d:c0:65:75:f1:
                    14:e7:a4:ee:36:da:f1:93:d8:ed:4a:02:15:cd:0e:
                    6e:8b:7e:eb:a2:75:67:3a:5a:fe:ff:03:38:93:8e:
                    04:c4:65:7c:9e:02:37:53:c2:b7:be:f7:fd:12:2c:
                    01:7d:0d:0c:73:a2:61:38:20:c6:9a:fd:b1:3a:44:
                    70:20:ad:fa:37:56:ad:15:51:e3:69:7a:58:ef:9b:
                    a9:4e:35:b2:a2:6a:e4:c0:7a:45:3d:69:f7:22:31:
                    19:3e:a5:0e:2e:ac:66:94:bc:82:06:4a:69:18:22:
                    bb:f5:43:ea:5f:9f:07:5e:04:32:b6:67:19:fc:c0:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:D8:4F:80:51:64:E9:CA:17:EF:7A:18:AA:A8:59:CA:56:87:90
            X509v3 Authority Key Identifier:
                keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:10:89:1d:66:16:df:26:9b:5c:84:d0:a5:50:26:c6:e0:f9:
         99:c8:50:c5:9e:18:b6:d8:9c:c4:03:1c:d7:45:25:24:f0:11:
         cb:25:14:bf:cf:82:66:e1:e0:3c:03:7f:c9:62:90:e0:af:4e:
         33:c9:e2:33:04:20:6f:62:b4:90:da:57:9e:91:22:81:70:32:
         0b:c6:42:a5:c8:81:50:94:46:af:67:44:4d:4b:5a:aa:60:9c:
         5f:62:cc:9e:e1:c5:3a:1e:84:1b:62:11:83:a1:bf:02:94:f5:
         e5:88:b2:06:e9:9a:e0:52:46:a9:ff:f8:92:5c:f9:6e:c1:5d:
         26:63:4e:35:3d:93:9b:98:12:11:53:07:74:7f:9b:4b:71:43:
         6e:af:c7:e2:54:6f:b2:a0:14:5d:8d:15:d6:a4:22:1f:8c:bf:
         70:58:5e:e6:cb:ec:2a:d7:ca:29:54:01:9f:c0:50:2c:ea:e7:
         e1:26:a3:b8:71:42:5f:16:0d:6b:13:ec:73:3d:cd:25:ff:ee:
         2c:59:76:11:a0:31:19:e0:36:30:cf:24:11:f0:06:ff:63:9b:
         eb:e4:95:1a:7c:d4:3a:93:3b:00:13:c1:5b:c2:26:7b:c0:51:
         0e:53:70:f5:dc:77:0a:33:40:6d:1c:1b:81:06:d4:d8:b2:72:
         c9:71:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:01:42 2025 by rpki-client