Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          TjoofELgQ37LtCnoTbYpj9vpOfkRRqy0Gq+yu2sbZM8=
Subject key identifier:   14:B3:4B:E8:86:75:DB:90:62:83:E9:6F:D9:A9:55:A2:A8:46:4A:05
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       01967378C29D7C2F86B62F9E894CAE2E3216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1495
Signing time:             Sat 26 Apr 2025 19:00:15 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:15 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:15 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: ZjVenJll/eCZBThHLa3Xxh3Awbi3Yfs5AudoxpnBs+o=)
                          3: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          4: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
                          5: xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa (hash: Q9qE4BIap4CmlXdBGmmHzRr3Ld+715v9q//ZgmRDsjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:78:c2:9d:7c:2f:86:b6:2f:9e:89:4c:ae:2e:32:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Apr 26 19:00:15 2025 GMT
            Not After : Apr 27 19:00:15 2025 GMT
        Subject: CN=14b34be88675db906283e96fd9a955a2a8464a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:c3:e0:a3:4a:f9:aa:ab:a1:39:fa:af:a2:
                    90:7a:22:4c:58:22:25:ab:03:fb:1e:f5:15:33:e0:
                    a2:9e:16:15:97:88:19:e4:5e:13:cf:d8:ee:11:b3:
                    44:09:09:24:1a:f8:58:87:56:2a:08:6c:6a:65:f0:
                    6e:f7:37:6d:a9:37:88:9b:2b:71:3d:6a:a1:63:1b:
                    f4:09:64:09:1f:27:c4:37:cc:8e:be:32:bc:e4:54:
                    57:80:8e:a8:89:7f:c3:96:91:0d:4e:df:5b:ff:bf:
                    73:a0:a3:36:27:29:0b:ca:35:95:5e:24:44:d9:12:
                    d8:2d:0f:fc:10:0f:56:7c:a4:f3:2a:18:96:5f:25:
                    fb:75:5e:e4:43:40:79:22:08:9a:41:f4:93:29:1c:
                    49:7d:60:be:c5:11:0f:8f:75:95:42:55:c3:f0:be:
                    af:d0:6e:c2:07:0a:dd:20:60:4f:84:f2:65:5e:1d:
                    cc:e1:08:b9:04:dc:be:d6:ed:8a:ed:2d:54:2c:2a:
                    1a:21:f7:fe:f3:0b:34:70:6e:19:16:06:87:84:a1:
                    1f:5d:54:27:c6:be:6d:8c:18:77:e3:cf:df:e2:a3:
                    d0:28:87:45:78:0b:64:c1:fc:5b:76:92:2d:b3:f4:
                    77:61:bc:2f:b2:6c:20:42:4d:a2:a0:ae:92:b5:ba:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B3:4B:E8:86:75:DB:90:62:83:E9:6F:D9:A9:55:A2:A8:46:4A:05
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b2:cb:09:6c:aa:a2:d6:52:27:b6:0e:bb:82:16:a6:12:b5:
         cb:b3:98:6f:11:02:46:6f:90:6b:d1:2b:e4:0d:97:36:57:87:
         fb:be:24:85:94:15:e4:14:8f:3e:41:e5:69:34:84:56:14:67:
         24:f3:34:04:e0:c2:e6:e5:06:79:af:a5:e8:11:f9:05:9f:ed:
         0a:1e:5d:dd:92:51:83:54:b8:4e:fa:4e:4c:c0:e4:68:d6:50:
         70:f6:ba:dc:d6:d1:87:7f:64:ee:10:1f:47:ca:e4:bf:49:df:
         01:e9:51:81:fd:62:f3:22:71:2c:fc:f8:63:b0:a8:b4:27:5d:
         df:20:fd:ff:1b:bd:11:c8:6d:0c:f1:44:46:cd:44:ac:a9:a8:
         70:37:ba:ca:ca:97:ee:91:3f:76:d0:64:72:98:f1:33:cd:5c:
         1d:e4:a7:18:12:66:ce:6f:7b:64:95:4c:4f:1e:d1:38:8a:91:
         bf:a6:00:b1:2c:e3:03:34:0e:5b:72:ee:c4:39:41:76:f1:13:
         0f:3d:d1:f4:7c:c7:57:69:b9:10:e2:0d:67:74:8f:b9:dd:b8:
         e3:bd:72:f6:cf:f9:41:0f:bc:95:31:6f:9e:e2:19:b3:6e:57:
         0f:37:a2:7e:c2:41:b6:a2:43:53:9a:da:ed:fe:47:97:bc:bd:
         c9:ea:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:25:51 2025 by rpki-client