Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          N4dx4JVE0T9fvo6A8fDLv4DfwA35Pv3vK6EYDS1KLOo=
Subject key identifier:   A1:04:89:26:43:3B:D6:8F:2E:2A:08:3E:BB:AA:46:9E:0C:E8:79:B5
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       01968D019657D4E95BED775657D4349C491A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          1571
Signing time:             Thu 01 May 2025 18:00:13 +0000
Manifest this update:     Thu 01 May 2025 18:00:13 +0000
Manifest next update:     Fri 02 May 2025 18:00:13 +0000
Files and hashes:         1: 3I4C6Ngc7fDqENlrP9MQ3movJoI.roa (hash: CozQlTp6j6rye5pcJ/4KWGyOSARgztmDQg7ndMeU3mw=)
                          2: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: HzHQhKf7pCE4C2RwWeTCzcS0fcLczRqz75aYyHpQkNI=)
                          3: gzLs6Xol47tKfjPqLr4RNwy_8T0.roa (hash: l9a7Iax1Z9uUS5+rKaniwvZo+UX2Ws1F66M5mMABVgA=)
                          4: ltEaGqqR5V2agcdgtn5kLPvvV_A.roa (hash: BED/AkYprzbIKWuZ2W+MpRKCzn0PaiCI62eNClbW8Bc=)
                          5: mLsh4sGtoHIqeKrfN3jXMMLu4k0.roa (hash: m/Mvmk/5mQxCIOXX60XJtwJ8Xe1PRKwFBcukoCDP1Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:01:96:57:d4:e9:5b:ed:77:56:57:d4:34:9c:49:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: May  1 18:00:13 2025 GMT
            Not After : May  2 18:00:13 2025 GMT
        Subject: CN=a1048926433bd68f2e2a083ebbaa469e0ce879b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:92:45:f6:17:36:a4:2b:e3:93:4c:a6:1d:
                    b4:a6:93:20:8f:69:24:cd:cd:20:f2:a2:ad:7e:47:
                    d0:f3:bd:f0:db:b1:41:44:a8:97:4b:c5:f0:bc:1b:
                    e6:bd:e7:7c:25:17:81:04:23:dc:e5:e9:a1:50:ec:
                    49:fb:46:e6:8f:2c:94:84:4c:90:fc:2e:2e:69:76:
                    ff:0c:d8:cb:60:3e:85:9e:b6:94:30:50:4d:63:de:
                    e9:c5:fc:a8:15:16:c4:96:ce:2c:8a:1e:50:40:fc:
                    87:f4:54:e7:cb:18:1c:b0:35:05:20:92:47:81:e5:
                    23:f2:6d:84:e9:d6:17:e8:fd:40:c7:04:e1:16:e2:
                    ed:6b:75:aa:9a:8c:b8:21:e8:43:af:f1:2f:d4:51:
                    1a:2f:bf:73:47:b4:0a:46:f7:ed:93:e4:41:17:6d:
                    a4:79:f1:a1:85:3c:ed:75:3a:6f:0b:ff:a3:b7:f4:
                    90:3b:d3:fd:8b:8a:7c:c5:7b:c4:05:85:b3:04:55:
                    2c:82:92:90:3a:06:63:a4:fa:30:b7:76:df:c7:e8:
                    55:4e:ee:f9:65:c7:a8:ef:8b:9a:55:df:5f:59:2d:
                    39:da:ba:9b:07:51:5b:c3:7e:0e:6c:7b:a6:eb:87:
                    d5:27:90:de:76:bb:4d:06:ba:5e:05:61:6b:4d:1f:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:04:89:26:43:3B:D6:8F:2E:2A:08:3E:BB:AA:46:9E:0C:E8:79:B5
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:04:6a:52:58:91:a8:76:f6:bc:23:5c:b7:64:b2:ec:f7:
         6b:66:20:dc:73:c3:1c:b4:21:f8:75:a3:d3:f6:ee:19:28:c0:
         b3:bb:14:7e:60:c4:ae:6f:0f:d3:11:07:4b:ba:a0:8d:51:f7:
         27:b0:bd:4f:20:ac:7b:92:8b:48:92:36:2a:e6:a1:20:a5:eb:
         a8:bf:3e:12:87:11:7b:13:1c:b9:d7:00:89:ac:91:ef:7b:6d:
         a4:22:9f:7d:b9:e6:63:80:e4:9c:29:18:a5:f8:f1:f0:3e:fc:
         8c:69:06:66:37:ae:84:46:2e:0f:23:37:f4:c7:84:4c:a9:c1:
         4a:a1:98:50:79:05:56:4d:f1:02:0a:f8:43:02:7a:6f:4f:fe:
         d7:06:c7:46:b5:c9:cb:77:a0:66:dd:dd:17:06:1c:ec:02:dd:
         34:3d:bd:55:e8:e1:dd:1c:48:fd:6d:26:7c:bd:23:65:74:0b:
         ba:c3:f1:07:1b:88:2a:03:7b:dc:96:0e:2c:c8:db:b2:0c:f9:
         27:fb:74:cc:24:8e:ab:10:e4:36:21:da:4d:0e:49:c9:7a:b2:
         74:4a:7e:6b:00:46:f3:9b:ab:98:fa:9b:4b:11:e1:8b:86:bf:
         4f:95:e4:4a:3f:bf:f1:25:74:de:7d:24:93:47:16:35:e2:76:
         cc:75:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:08:25 2025 by rpki-client