Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File:                     J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier:          uZogN89fiyihbgtXQlfhkHVh1vLaC6yBY44nA9jy7q8=
Subject key identifier:   4B:49:36:BB:AC:C4:85:59:C2:91:89:80:BC:DB:03:57:EA:B1:53:A4
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer:       /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial:       019690033E2EAC1B34E3517C63146A8D484B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number:          C9
Signing time:             Fri 02 May 2025 08:00:53 +0000
Manifest this update:     Fri 02 May 2025 08:00:53 +0000
Manifest next update:     Sat 03 May 2025 08:00:53 +0000
Files and hashes:         1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: nwTzathFVCVQgnoOkSusFDeIzEZiXF5TXOdBVDMsWHo=)
                          2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:03:3e:2e:ac:1b:34:e3:51:7c:63:14:6a:8d:48:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
        Validity
            Not Before: May  2 08:00:53 2025 GMT
            Not After : May  3 08:00:53 2025 GMT
        Subject: CN=4b4936bbacc48559c2918980bcdb0357eab153a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:98:e9:8d:d2:33:b8:91:a9:20:3b:b8:6f:
                    ad:f0:21:92:2e:0c:ec:26:3c:42:ad:0b:c1:93:1d:
                    00:c8:d0:8c:4a:ae:43:e5:04:48:51:c4:3c:e6:a5:
                    75:ed:eb:cb:e5:17:23:91:39:a9:ba:25:38:a8:bf:
                    64:ef:94:63:12:b8:e4:88:bf:c7:d4:d3:c2:6e:ee:
                    f2:4f:65:b8:ed:fd:f5:c9:e2:6d:9d:47:90:90:c8:
                    a0:b3:f5:cc:f5:0d:27:75:ea:c8:84:12:56:45:47:
                    72:bc:40:e3:78:8b:ef:4e:1b:5f:fc:9d:86:a2:9e:
                    8b:b6:44:64:e6:04:bb:1a:e2:d7:71:5b:b6:23:8c:
                    1c:6a:89:25:e5:bc:44:4c:bd:f7:38:fb:87:1c:8b:
                    ee:a7:46:d3:88:d2:0a:e8:16:71:5e:b2:55:13:50:
                    6c:48:90:bb:1f:52:60:51:01:d9:4c:5b:45:83:9a:
                    e0:ab:9f:29:c4:a8:9c:95:bd:32:76:65:f6:a2:6a:
                    1b:35:83:1b:df:81:60:61:7c:b8:00:db:67:b3:d8:
                    7e:3c:68:2e:94:48:db:74:b1:eb:74:19:f7:3a:cd:
                    5c:2d:4f:d6:72:03:d0:09:4b:cf:29:d6:64:71:69:
                    ca:58:14:e0:94:a4:a2:a8:d3:01:c8:4f:ba:1f:87:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:49:36:BB:AC:C4:85:59:C2:91:89:80:BC:DB:03:57:EA:B1:53:A4
            X509v3 Authority Key Identifier:
                keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:ec:bf:ad:71:dc:f3:27:5b:9b:29:41:13:59:39:af:a6:
         0c:14:92:68:3d:5f:42:06:ed:cb:f0:6f:ea:ab:98:07:64:0e:
         dd:d4:b8:c0:57:96:2b:16:a7:bd:d2:f1:8f:92:23:fb:d4:fa:
         29:59:94:05:9b:dd:75:d1:43:c9:db:19:31:d1:52:e7:2a:ac:
         bd:cd:50:18:8e:a8:38:57:3e:2a:b4:17:a1:fe:48:aa:33:da:
         5e:11:80:27:e2:8b:50:50:3e:bc:61:1f:8a:72:29:5f:f3:6a:
         0f:36:6e:9b:73:c7:21:a0:42:58:c5:40:e5:5e:35:c0:07:87:
         da:db:77:cc:68:b9:fc:25:e9:26:e3:a5:f9:20:ce:20:eb:36:
         8d:bc:b1:b5:48:ef:54:9f:45:5c:8c:8e:48:17:44:84:48:72:
         36:67:97:22:3b:72:0b:77:08:35:76:c5:66:3d:42:f6:69:cf:
         d6:ce:c3:ca:22:dd:7d:42:1c:33:c0:12:3d:2f:84:40:a8:08:
         01:15:bb:0a:06:9d:29:75:a3:32:41:e3:c2:71:17:30:eb:26:
         2f:f4:46:9b:6b:b0:b3:70:ab:64:63:9d:c7:b3:1a:59:f2:2b:
         1d:36:f2:8f:37:41:c3:46:cd:97:ef:7f:d7:27:6b:da:fa:1f:
         e0:de:12:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:13:08 2025 by rpki-client