Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File:                     JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier:          IsU97F8X5sJVRE2nEi2pnSI3+66gRe+X/z0r3+Lzoy0=
Subject key identifier:   ED:E1:95:19:57:FA:C8:44:A2:BE:38:42:81:A1:DF:3E:76:0F:33:76
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer:       /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial:       0196925FADBB1F5FAE50D8F538A6F4F39D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number:          0813
Signing time:             Fri 02 May 2025 19:01:05 +0000
Manifest this update:     Fri 02 May 2025 19:01:05 +0000
Manifest next update:     Sat 03 May 2025 19:01:05 +0000
Files and hashes:         1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: XWjJGoAVG6yNrO4STVpAII2F9tU/F6uG94SqJEcTYfs=)
                          2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:5f:ad:bb:1f:5f:ae:50:d8:f5:38:a6:f4:f3:9d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
        Validity
            Not Before: May  2 19:01:05 2025 GMT
            Not After : May  3 19:01:05 2025 GMT
        Subject: CN=ede1951957fac844a2be384281a1df3e760f3376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:29:68:e8:c9:4f:42:bc:b6:d0:81:c2:f6:
                    58:0e:76:2f:28:be:5f:b3:0b:37:98:ab:68:36:ec:
                    32:ea:58:66:c2:36:78:eb:f5:19:09:45:02:77:94:
                    b1:34:1b:2f:37:bd:65:cc:7a:a8:74:a5:48:7c:67:
                    0e:6d:49:d9:d3:b1:28:b5:9e:9a:39:e2:5f:92:2f:
                    d2:7b:c0:c7:2b:06:7a:28:02:61:de:d5:c4:27:82:
                    ac:a4:93:99:ab:4e:4c:ef:c0:31:83:a8:f3:3c:9e:
                    42:a5:a4:4c:2f:e8:2f:ef:5b:56:84:1a:d4:1a:65:
                    a5:c6:8d:d9:85:c9:48:5e:bc:15:49:c5:88:ea:8d:
                    02:0d:57:96:47:61:d6:12:96:f0:72:6f:58:07:a8:
                    7c:00:4e:89:9a:98:51:35:1b:54:c6:07:d8:42:cc:
                    61:3f:cd:41:55:d5:e2:c7:60:42:e7:38:92:a9:3b:
                    69:50:ed:db:26:6d:95:a3:85:3d:ab:d0:18:2d:2d:
                    ec:b8:b0:37:f6:ef:91:a4:b1:56:ea:1b:f3:cc:9a:
                    3b:73:59:0d:52:5e:14:7f:4e:5c:a7:0f:ba:15:13:
                    3d:ea:43:80:a5:06:f1:28:cc:de:1d:96:0a:e7:a5:
                    88:d7:a2:5c:4c:ff:ef:ea:da:52:1b:bc:a7:28:47:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:95:19:57:FA:C8:44:A2:BE:38:42:81:A1:DF:3E:76:0F:33:76
            X509v3 Authority Key Identifier:
                keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:7a:b9:00:ab:96:e9:80:f6:9c:c8:61:8e:40:bf:b9:73:
         3e:a2:77:81:44:69:92:ce:78:ea:5b:80:6b:ca:1c:a1:b8:c4:
         d4:f9:0d:29:c4:0e:f4:a9:40:e0:8a:8b:03:dd:55:93:17:19:
         08:79:1d:92:fa:76:75:80:aa:bf:46:82:10:f8:95:ed:5a:4b:
         e5:ab:07:05:29:4a:96:6a:f8:ec:5c:fa:e2:ec:71:ea:17:de:
         63:db:b6:42:56:a0:58:1f:95:a4:24:cc:9f:1f:e6:af:70:ab:
         58:9d:7b:67:9d:e5:fa:9f:d6:21:47:61:42:cc:5d:4e:17:ca:
         bc:8f:c3:4b:87:e4:ef:87:7e:b6:7f:e6:b8:5f:10:cc:91:48:
         5d:e5:3b:48:9d:d3:90:fc:88:61:51:72:6a:f3:63:09:9a:fd:
         eb:ec:f9:74:2e:d7:95:05:0b:3b:fe:28:9e:a3:7c:43:38:cd:
         69:53:cc:af:ff:7b:c4:00:3d:6d:32:a8:15:51:c4:d1:84:56:
         75:ab:26:13:7d:ec:7d:d8:ff:db:7a:fe:45:04:34:c4:ab:cb:
         36:5a:6a:24:33:00:16:6e:42:79:06:20:64:67:e6:f3:bd:87:
         22:87:ee:32:a8:e7:a8:ef:0f:6b:a2:86:31:d9:93:88:d2:ea:
         cb:5c:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:08:03 2025 by rpki-client