Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
File:                     JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json)
Hash identifier:          p6O2I6pcRq0f9BBuTBFWgVEb8rC2Uwmqp/H2xEO4OEc=
Subject key identifier:   6B:F2:AA:FD:5B:70:02:23:C1:DD:4C:8A:8C:FA:C3:99:9C:D9:0F:0D
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Certificate issuer:       /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial:       01968090074AD1DEDA2D53EAD58B8F34D029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
Manifest number:          1137
Signing time:             Tue 29 Apr 2025 08:00:44 +0000
Manifest this update:     Tue 29 Apr 2025 08:00:44 +0000
Manifest next update:     Wed 30 Apr 2025 08:00:44 +0000
Files and hashes:         1: 7Dych4zveyHs0pzibZ9uvQtJ2wM.roa (hash: CW7T4TaO0Ki1j/sE/BefdFndXGm6ZNbOz4E1BOqKMT8=)
                          2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: iTZUvRgE9+m/NqmxT0EgdX6xx76zIkuKkkZrLGT8pag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:90:07:4a:d1:de:da:2d:53:ea:d5:8b:8f:34:d0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
        Validity
            Not Before: Apr 29 08:00:44 2025 GMT
            Not After : Apr 30 08:00:44 2025 GMT
        Subject: CN=6bf2aafd5b700223c1dd4c8a8cfac3999cd90f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:95:d0:68:1a:f4:b0:62:18:92:48:e4:8c:
                    ac:f4:b4:b8:73:89:e4:6c:a1:f4:1e:19:7a:8f:b2:
                    bc:99:07:d3:2c:e2:34:b7:1f:96:c2:ff:b9:c2:37:
                    36:1b:a4:44:f2:f5:52:d4:0a:85:19:c5:8b:35:a4:
                    44:18:93:5c:7b:23:d9:5f:bd:ac:b9:7d:9a:bf:95:
                    04:17:2e:08:00:ca:b6:8f:e4:2a:07:23:e7:30:77:
                    b4:44:26:ee:6e:63:2d:d5:42:16:bd:d1:52:44:a1:
                    d0:53:66:23:85:1d:e7:f7:20:9f:c1:29:64:50:a3:
                    95:49:39:48:ec:36:0b:b2:7e:52:0f:b6:e4:b2:68:
                    5c:65:9a:59:d9:04:13:fe:0c:c4:41:fe:23:7e:14:
                    75:8f:6d:63:a4:2b:75:30:f2:fc:e0:4e:90:05:a3:
                    da:a6:94:05:83:88:6e:90:cd:ec:ad:47:ab:90:f4:
                    33:ea:55:5d:23:d2:10:1f:69:21:17:a3:a5:2d:47:
                    ef:e3:be:e4:41:23:08:66:fb:7b:5b:aa:4f:57:19:
                    89:ee:8c:fb:ac:3f:3d:ca:3f:4e:65:5a:0d:dd:1f:
                    55:8d:eb:e9:ec:d7:be:10:11:05:e0:9d:a4:b0:cf:
                    d1:ac:c0:13:75:96:8e:b9:34:45:15:1b:a0:48:c3:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F2:AA:FD:5B:70:02:23:C1:DD:4C:8A:8C:FA:C3:99:9C:D9:0F:0D
            X509v3 Authority Key Identifier:
                keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b0:0c:1c:17:68:26:86:d5:ec:95:f2:23:63:19:18:e2:7d:
         d8:2b:26:4b:b0:1f:de:b2:8e:1b:7a:09:18:b7:25:2e:a5:c8:
         4f:2e:fa:26:dd:2c:42:37:5d:a8:c3:6a:8a:51:81:d9:52:7c:
         cd:7c:89:5e:96:d4:96:86:fb:36:8f:1d:a4:e5:de:d4:01:3f:
         11:1e:2e:07:d9:4b:58:b6:5d:06:f5:b3:af:39:d4:53:67:fc:
         68:83:7f:d6:ef:47:3d:9e:20:c0:bb:fd:9a:eb:b9:be:05:c2:
         49:65:ef:af:42:20:9e:96:87:ba:5d:2c:fe:35:fa:d7:85:dd:
         46:ce:10:c9:b5:25:b4:7d:9b:7f:5d:85:d7:19:1d:f0:91:a2:
         ff:bf:9c:ec:d3:21:5b:e8:5a:bf:5b:17:68:3f:b6:a7:31:83:
         93:99:d3:40:ae:f5:0a:74:6f:27:59:5a:d9:0b:e5:92:5e:71:
         20:7a:49:ca:1f:8d:0e:30:61:2a:cb:23:76:c9:78:9d:e2:8e:
         64:e7:9c:34:4a:7a:a1:60:89:7c:35:0f:c6:96:7a:0d:ca:82:
         b1:72:b2:f9:19:c2:5e:46:d1:59:3f:dc:3a:d1:66:27:40:89:
         2a:bf:5d:a0:97:f5:4f:cf:7e:d3:79:b6:a2:86:94:49:76:2c:
         28:d5:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:31:43 2025 by rpki-client