Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File:                     JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier:          OdSaGq2ACwwJByCvJvYpOObw5BOCNppBA1IvwnA4poI=
Subject key identifier:   FC:9A:AF:76:35:68:7B:1D:8D:7F:94:21:FC:0F:E7:F3:47:9F:F3:7E
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       019683C7FF7196576CA5F97307EB1E06D0F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number:          0D0B
Signing time:             Tue 29 Apr 2025 23:00:44 +0000
Manifest this update:     Tue 29 Apr 2025 23:00:44 +0000
Manifest next update:     Wed 30 Apr 2025 23:00:44 +0000
Files and hashes:         1: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: DZ+c+d0h2wiCT68B5288/cLzfcv23TEixtisRH841D4=)
                          2: t5KH1FGaAuB50jIyv-mWsCV4YiY.roa (hash: WmKRabvhJ8d8xujyGtrgZuJ7rkW86Ru4hgJL7uZhjLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:c7:ff:71:96:57:6c:a5:f9:73:07:eb:1e:06:d0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: Apr 29 23:00:44 2025 GMT
            Not After : Apr 30 23:00:44 2025 GMT
        Subject: CN=fc9aaf7635687b1d8d7f9421fc0fe7f3479ff37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:66:f7:5a:45:8a:0d:65:c1:96:5d:47:00:
                    f1:c5:1f:ee:86:13:73:f9:57:41:b3:19:61:f9:47:
                    45:df:5d:0e:92:3e:a0:e3:84:62:d1:15:e0:fe:7b:
                    0b:07:67:2a:2d:78:0d:9b:4a:da:a1:b8:c9:75:cc:
                    a0:88:7e:a9:da:50:05:69:8d:c9:b7:56:87:66:72:
                    1b:0d:df:7b:0f:b8:c7:81:21:93:92:14:d4:14:eb:
                    86:c7:b2:c4:20:c4:90:39:70:a2:de:dd:ba:da:ac:
                    39:d9:53:d6:a4:50:24:31:be:e7:8a:46:98:01:5a:
                    14:8d:5a:4d:ca:b7:c7:b5:62:46:bc:4b:70:e5:0c:
                    1f:cb:40:bc:18:c1:1d:23:44:b4:5b:95:5f:b6:ad:
                    0d:40:4d:58:b4:9c:93:0c:e4:5e:d2:7b:24:c8:90:
                    69:ef:b2:27:61:17:00:db:d3:d0:fd:69:08:60:77:
                    30:e3:62:31:91:ce:04:a6:ef:a9:09:81:8c:b1:98:
                    27:ad:87:95:1e:8f:e0:bd:2b:85:2e:ae:64:4b:e1:
                    b6:e5:fb:11:7e:f7:e1:ff:60:22:6f:ac:b3:93:e0:
                    a8:ed:c9:e8:cc:31:9d:71:c0:1a:9f:74:05:be:0d:
                    8c:85:16:71:42:16:02:b9:04:39:ff:74:e9:88:fb:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:AF:76:35:68:7B:1D:8D:7F:94:21:FC:0F:E7:F3:47:9F:F3:7E
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:42:c2:2c:c7:50:af:6a:5f:8f:be:d1:67:01:85:a4:8a:d8:
         a1:3c:fb:19:3a:97:62:73:63:d9:6f:5a:5a:28:10:52:85:1c:
         35:d1:9c:4a:1f:df:df:7e:74:39:aa:62:89:2c:79:b1:1b:9c:
         37:01:fc:f6:6c:13:b9:6f:df:07:9b:37:e5:52:19:81:17:2b:
         29:31:c9:db:de:a8:f6:bf:b1:15:55:bb:e5:31:6e:1b:f4:65:
         e0:39:ca:e3:a6:7c:49:05:68:c0:c2:3f:f2:14:c1:44:de:af:
         7d:eb:0f:09:c3:d0:9c:49:9a:82:bf:19:ba:cd:ed:aa:1d:30:
         54:1b:87:d2:cc:bc:66:d7:e4:43:33:fe:a5:d0:93:89:fd:0e:
         1a:44:e1:37:00:05:de:f6:14:5f:9e:45:04:07:29:3a:b9:81:
         3a:11:b4:5e:62:72:78:80:a7:20:59:c3:1c:bb:7b:42:cd:d1:
         74:30:d1:6b:b0:ed:63:82:10:71:d0:fa:d5:b0:fd:ad:ff:6c:
         1f:2a:83:8d:09:be:60:2a:4a:3a:53:2e:0f:e4:c2:88:60:0b:
         48:34:2c:ad:6a:99:d9:87:6f:2e:40:b7:ea:41:ed:08:33:cd:
         d2:b0:5e:f0:cd:19:4e:2d:4f:f4:34:39:7c:5c:48:97:cf:46:
         56:9a:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:29:48 2025 by rpki-client