Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          HbrUCEubzD4pRaLHU94SCDC7kQMMrTHt5B4xmvge2GM=
Subject key identifier:   07:51:AC:DE:25:57:78:D5:28:BB:66:91:3D:31:AE:1A:5F:73:50:EF
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       0196730BAAA8B0BF6886C540195DE68C2696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0BDC
Signing time:             Sat 26 Apr 2025 17:01:06 +0000
Manifest this update:     Sat 26 Apr 2025 17:01:06 +0000
Manifest next update:     Sun 27 Apr 2025 17:01:06 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: aNiCB2MreDvCS+WnNIXD3zcfcCNzh/blT4TnxVuHdmY=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0b:aa:a8:b0:bf:68:86:c5:40:19:5d:e6:8c:26:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Apr 26 17:01:06 2025 GMT
            Not After : Apr 27 17:01:06 2025 GMT
        Subject: CN=0751acde255778d528bb66913d31ae1a5f7350ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:5c:e6:bd:48:32:d3:5c:89:2c:46:bd:bc:
                    5f:b7:10:fe:7f:6a:68:e3:c6:ca:47:1e:eb:c3:01:
                    cb:7e:af:fd:7f:56:fd:68:9c:18:ac:a3:59:fd:66:
                    8c:97:83:c5:2b:82:d9:5b:6f:88:1a:ea:94:85:d3:
                    54:53:52:14:bd:bf:38:89:50:22:ef:82:21:9d:c8:
                    e4:08:d2:56:d0:b6:61:3d:9b:bf:d2:b2:41:00:8d:
                    fe:8c:e1:6a:98:73:98:5b:1a:4a:44:2d:3f:8c:06:
                    ef:eb:f6:4b:56:69:7f:b8:66:b9:cd:5e:29:0e:f0:
                    98:94:6b:0f:0f:50:18:1c:02:e3:b8:2f:38:08:77:
                    0e:d1:c2:2d:a1:50:58:34:99:f6:1a:bf:e8:e3:3f:
                    f5:52:92:26:66:79:08:cb:4f:75:d4:c3:ce:36:d0:
                    ad:56:3d:e0:31:0a:0a:bc:17:07:1e:f6:05:05:2e:
                    9f:86:04:31:32:59:4f:d8:17:8f:f6:9b:94:88:a5:
                    bf:c9:1c:63:eb:24:f7:dc:8a:50:dd:0e:02:e8:f4:
                    07:15:0c:d8:6e:5b:8f:06:c1:d2:9b:7e:ba:0a:a1:
                    24:86:76:00:83:b1:a6:b2:64:2c:e8:c8:74:09:e9:
                    29:64:80:33:00:70:f1:b9:a5:ea:9b:94:9a:10:05:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:AC:DE:25:57:78:D5:28:BB:66:91:3D:31:AE:1A:5F:73:50:EF
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cf:71:f1:e1:b6:87:10:a8:80:f8:01:58:c8:ce:cd:3d:76:
         cd:a8:3b:c1:45:96:05:04:94:d4:fb:53:a2:7f:f1:47:30:71:
         b9:99:d4:4d:b1:72:ea:82:2f:35:ea:18:c5:84:07:af:ba:e9:
         d4:3d:3a:ae:dd:e4:de:1a:13:b5:03:48:7c:c8:7d:6c:96:6f:
         89:f1:c9:67:1a:b9:53:44:86:1a:78:02:0b:2e:36:3b:33:bd:
         65:ae:2a:ea:98:c5:ce:1f:05:05:95:d6:e3:fe:f3:bd:ce:c9:
         3f:ce:fb:3b:f9:b1:14:98:27:69:e1:37:de:65:2c:ed:2b:b5:
         94:10:c4:25:7d:9a:64:3d:22:ea:d7:ed:7f:52:33:a8:b6:7d:
         8c:d3:03:c3:ed:af:f3:6b:ed:02:93:be:6e:2a:e7:fe:a3:80:
         9e:4b:e5:5c:8c:b1:ce:50:f7:7b:45:c8:59:f8:0b:51:d1:f6:
         7e:fa:5b:ae:88:99:eb:df:f9:c1:bb:04:fa:d5:23:56:81:27:
         99:fb:46:ad:83:6d:34:46:ff:7e:f6:51:74:dc:69:5a:83:eb:
         e4:03:d9:9b:b3:69:57:86:62:f4:0c:1f:c1:5f:90:0f:e0:5c:
         67:e4:d3:f0:5a:46:17:69:b7:c5:0f:c2:c1:61:2d:46:c1:d3:
         d8:cd:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:26 2025 by rpki-client