Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File:                     jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier:          sxVjcWVv1NagN+xPKGNdkvht+BI3ZCPb5sfc+vhPvSw=
Subject key identifier:   6B:E9:E7:8B:86:09:A0:59:96:88:C3:A3:C3:9A:7B:BA:DF:B3:E9:CB
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer:       /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial:       019682EC5A9F695C84A3047961E18F2732BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number:          1514
Signing time:             Tue 29 Apr 2025 19:00:49 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:49 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:49 +0000
Files and hashes:         1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: pVAwaW3klajYUI3imFzgdrfT7hjMhg6p2XMatshxn98=)
                          2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:ec:5a:9f:69:5c:84:a3:04:79:61:e1:8f:27:32:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
        Validity
            Not Before: Apr 29 19:00:49 2025 GMT
            Not After : Apr 30 19:00:49 2025 GMT
        Subject: CN=6be9e78b8609a0599688c3a3c39a7bbadfb3e9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:75:94:2f:0c:b2:fb:4f:59:84:6b:56:65:
                    bc:89:e1:7d:16:1f:93:30:30:01:96:65:9b:30:b3:
                    39:9e:4e:d4:08:20:30:8f:4e:67:64:d3:52:9b:d1:
                    38:14:94:a7:57:eb:27:41:31:34:ef:a1:67:18:9b:
                    27:1f:d9:50:fc:c6:32:68:31:dc:64:5d:48:28:0d:
                    bf:c8:ae:18:2a:fd:f1:32:5e:9c:67:2b:35:a6:e0:
                    77:b1:d5:46:16:4c:a4:51:70:86:d4:18:1d:30:42:
                    6c:8c:0f:9e:bd:79:8b:f6:9c:c3:9d:36:57:38:35:
                    06:d9:fc:01:35:8f:fc:56:f6:20:8d:ae:b4:35:4a:
                    36:f3:bf:ed:4c:15:7a:6f:7d:09:e8:75:ad:de:72:
                    aa:6c:43:68:df:5a:d1:75:c9:05:dc:71:ac:26:e6:
                    96:e2:87:46:4c:14:e8:4b:e3:70:f1:a8:b1:56:20:
                    db:25:6c:ca:37:f6:f5:91:bf:80:1b:58:d6:f9:a8:
                    68:87:40:42:e1:50:e6:47:be:4e:c5:bf:df:69:f9:
                    7e:aa:6a:70:4b:42:27:ef:bc:35:23:14:26:3e:c1:
                    be:ec:91:96:40:84:fa:de:5c:43:26:45:24:1a:74:
                    38:91:df:6d:ec:22:57:83:c2:d4:c9:d2:b0:31:cd:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E9:E7:8B:86:09:A0:59:96:88:C3:A3:C3:9A:7B:BA:DF:B3:E9:CB
            X509v3 Authority Key Identifier:
                keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:b7:5c:56:de:81:93:e6:2f:86:8a:2d:ee:62:31:38:b4:
         f5:08:a6:fd:a5:aa:2c:74:c6:ba:f4:8f:36:04:03:41:3e:59:
         dd:ab:3a:a7:83:46:ae:0c:4b:24:eb:22:9f:e8:59:c4:2d:4f:
         4e:1d:d2:91:f1:cb:77:33:8f:2a:82:f5:05:46:5b:a9:e2:82:
         d7:e2:7b:e1:a2:31:16:44:f4:63:77:c5:38:0c:b1:a6:b1:54:
         fa:65:3f:05:ea:9c:58:13:36:2b:8f:d7:39:6c:0d:3c:45:d8:
         d7:1a:bf:1f:21:f7:32:18:92:57:84:01:b4:8d:e8:5c:9f:d8:
         a8:c9:e8:3d:29:51:4a:25:ff:6a:c4:f4:d9:21:be:5e:99:a3:
         f0:7a:29:ba:0c:ad:8b:59:2c:69:c9:7e:f5:15:5f:3f:59:cb:
         af:81:c8:3c:48:ff:43:96:2e:c6:9d:09:8c:b4:c8:ea:53:2b:
         c3:aa:e5:95:a5:60:8f:f7:5b:31:ee:51:f3:8d:d7:a2:ae:de:
         63:c3:92:c9:98:cc:d1:42:94:10:4c:bf:57:36:e9:e2:ee:e0:
         a3:1e:f0:90:fd:97:b8:19:a0:70:0b:d8:f6:44:34:16:f8:76:
         46:90:c4:dc:a1:cc:b7:50:b8:72:84:d4:4e:1e:0c:b6:8f:6c:
         4a:25:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:51 2025 by rpki-client