Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
File:                     JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json)
Hash identifier:          drgw1GIbf4VhG0Vtv9OL5B44YA3UtD9aIX28m1lC1tg=
Subject key identifier:   E1:76:9F:8A:C4:74:00:29:0E:1C:78:44:93:2E:E4:81:C2:1D:2C:44
Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
Certificate issuer:       /CN=25a3f511d0095606a525084ae460836dc5d24397
Certificate serial:       01968210615427112C0CFC5A58E88BC6D74F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
Manifest number:          1516
Signing time:             Tue 29 Apr 2025 15:00:33 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:33 +0000
Manifest next update:     Wed 30 Apr 2025 15:00:33 +0000
Files and hashes:         1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: hItNlL/cMAXwaAVxc8lwL/CJGLcFZlROzaKiAWGl59w=)
                          2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:61:54:27:11:2c:0c:fc:5a:58:e8:8b:c6:d7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397
        Validity
            Not Before: Apr 29 15:00:33 2025 GMT
            Not After : Apr 30 15:00:33 2025 GMT
        Subject: CN=e1769f8ac47400290e1c7844932ee481c21d2c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:54:0a:ab:8d:b3:08:7c:db:4f:fc:80:d3:
                    be:68:0a:41:e3:f2:ce:71:f8:a5:ac:91:ef:8e:ae:
                    bf:6b:2c:f9:e3:9e:0a:21:1f:05:66:cb:94:e7:52:
                    19:d9:87:6f:d7:3f:ca:72:66:6f:7d:a7:7d:61:a7:
                    a8:18:ba:cc:da:e7:ad:a9:14:2c:70:52:04:c8:d9:
                    eb:e6:18:2a:0d:9c:2c:3d:b6:1d:42:fe:74:6b:fc:
                    60:0b:01:c2:2a:72:5f:ed:f6:15:cf:5f:87:43:38:
                    41:59:e4:4b:d8:6f:ea:1e:37:1c:a9:fa:a4:bd:d4:
                    b1:a1:72:ea:34:35:e6:87:df:a0:3b:66:eb:1c:82:
                    37:0e:9c:4a:b1:8c:eb:29:9d:57:32:70:64:73:63:
                    28:89:c4:40:4a:e1:3e:bc:f9:ae:e8:07:00:c6:a3:
                    d4:6d:47:b8:6c:8b:c7:18:24:3d:cf:61:f2:a6:5b:
                    57:3d:7e:54:d5:b6:59:83:d4:7b:e3:e1:43:86:fc:
                    9f:75:7b:9c:26:42:af:30:a5:f0:f9:8b:68:b4:41:
                    2e:e7:ef:d8:7c:da:04:43:2b:91:5c:0a:87:8f:26:
                    78:5a:2d:6a:2e:75:b7:e6:46:bc:6b:63:e4:3e:9d:
                    83:8b:af:5b:6c:c3:e9:18:f3:b2:73:9e:2b:c6:24:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:76:9F:8A:C4:74:00:29:0E:1C:78:44:93:2E:E4:81:C2:1D:2C:44
            X509v3 Authority Key Identifier:
                keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2b:4f:df:9b:0d:2b:ca:9e:c2:60:00:6d:8b:41:d6:7e:f9:
         71:da:fc:34:61:95:6e:6e:3e:5a:5a:e7:b6:eb:71:26:50:8c:
         35:e0:3a:05:4e:bb:9f:69:e0:32:12:7f:ab:c7:76:27:78:ce:
         69:66:8d:2b:ab:b0:fd:31:35:19:03:d5:f2:40:39:ea:c3:b0:
         2f:6c:88:b1:24:12:81:65:62:9b:25:65:cd:88:0c:60:4f:85:
         b2:49:cf:75:b8:df:96:55:c2:f2:83:21:3a:6a:d2:11:1d:c9:
         1c:e8:91:ec:0a:3e:0a:2e:6e:f2:e1:fb:35:ae:d8:73:be:e1:
         f1:6b:4d:63:1a:b4:eb:00:23:1d:f9:b7:49:ce:b0:a3:d3:21:
         7b:29:17:cd:dc:85:34:3a:44:c6:52:f9:07:01:72:7d:d5:99:
         b4:7d:e7:b1:44:df:a2:33:eb:24:87:ba:ca:72:73:26:e6:7c:
         64:c9:cf:18:1e:8f:ee:7c:e3:8a:41:ba:81:5f:44:a1:02:b8:
         ab:55:77:00:42:3a:2b:cc:5f:62:d1:59:3c:bb:3a:45:b4:6a:
         bc:5a:c4:c8:bf:35:1c:eb:ad:15:e3:16:00:85:8c:ce:54:68:
         cd:60:59:b8:f1:60:21:ba:de:50:2e:57:a6:12:7c:e2:51:0f:
         c4:8c:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:35:06 2025 by rpki-client