Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File:                     J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier:          oeWOgqIMx3r98ILTvg1Lzu541pRKjd6uRjTBvUGj3Js=
Subject key identifier:   61:3F:2B:19:C3:71:78:19:D3:C0:2D:03:76:33:3C:15:C5:F0:CB:21
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer:       /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial:       01967642FDE1FEA7957ED509ECFC9CC0F678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number:          1524
Signing time:             Sun 27 Apr 2025 08:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:23 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:23 +0000
Files and hashes:         1: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
                          2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: i6EBlRNrGHlEavtjN0vg4axZwFvNHOmqZTYKIc5mk/M=)
                          3: J_FW6C53GNA1eZgfBxqmfj1GnHk.roa (hash: 2FVTaWaI6Pa7rkvw9aYDp7sxlvCorspj3xme17atTXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:42:fd:e1:fe:a7:95:7e:d5:09:ec:fc:9c:c0:f6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
        Validity
            Not Before: Apr 27 08:00:23 2025 GMT
            Not After : Apr 28 08:00:23 2025 GMT
        Subject: CN=613f2b19c3717819d3c02d0376333c15c5f0cb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:fc:e4:78:89:c9:84:dc:bb:a2:b3:68:37:
                    bb:84:90:88:a8:4a:37:c2:dc:94:c3:3e:13:c4:0f:
                    67:46:2a:a5:2a:42:ea:17:c7:eb:d9:6d:f2:24:13:
                    7c:f1:4c:47:b8:79:e9:e5:64:58:71:72:2b:12:42:
                    bf:6c:7b:81:80:e0:81:6a:81:b5:71:20:8e:d5:9d:
                    27:e3:ce:74:ca:90:79:29:aa:f9:4f:b0:95:af:7e:
                    96:19:19:9a:aa:1a:a9:70:31:97:38:52:49:8e:d9:
                    b6:fa:b3:9f:6d:5a:7d:ea:69:0a:f6:9a:0b:0c:be:
                    84:ea:83:ea:32:a8:1c:2b:70:a3:4f:4c:57:e8:0a:
                    ef:0b:f5:de:90:be:6e:eb:0e:63:4b:4a:2d:18:dc:
                    ac:6a:79:35:88:ee:31:53:4d:02:70:ff:a1:15:f6:
                    15:88:9f:03:6a:6a:9c:25:c5:26:ae:23:c9:f8:61:
                    4c:78:0b:14:c0:14:7e:77:7c:fa:31:c6:3b:60:af:
                    a2:8f:4a:f3:f9:91:da:be:ec:80:35:25:da:d5:e1:
                    3d:e3:43:ac:4a:d9:58:de:d7:db:9d:04:c6:7d:25:
                    b1:89:8a:86:a5:d8:e7:4b:57:ab:83:b9:8d:0b:e9:
                    ec:0d:7d:83:9a:b8:6a:4f:4f:0d:17:29:86:c0:3f:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3F:2B:19:C3:71:78:19:D3:C0:2D:03:76:33:3C:15:C5:F0:CB:21
            X509v3 Authority Key Identifier:
                keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1e:33:ab:35:5e:32:91:5f:30:3b:92:c8:c1:b4:bc:64:70:
         e4:b2:25:87:fe:ce:ee:57:ac:63:91:58:d5:93:41:d8:99:82:
         e5:8e:84:22:c9:d1:a1:37:91:c7:a4:8a:35:82:b6:d8:0b:9f:
         ed:e4:7e:ba:ca:d3:d8:29:25:4c:24:55:b0:7f:66:3b:2e:93:
         7d:8e:ac:14:29:80:c3:41:22:cb:00:8b:cd:4e:ed:58:c7:56:
         cb:71:66:7a:06:a8:aa:18:ac:6e:e0:86:77:2b:a5:5e:b9:cf:
         5b:2b:08:e7:4b:51:f1:ce:eb:2b:95:2b:33:91:ce:be:d9:1e:
         66:02:42:a6:0b:11:7e:66:74:9d:c4:e5:29:76:64:7b:fe:a4:
         51:17:30:f6:8d:0d:30:77:f2:98:15:1f:b8:2c:9d:2f:52:0f:
         5d:c3:5b:5c:95:63:fd:39:f0:14:55:88:d2:9f:43:dd:99:1c:
         f1:b2:64:9e:22:9e:96:ee:a7:74:5e:e4:80:c4:b8:25:e0:2e:
         ec:3d:f9:2f:df:27:68:d8:de:ee:87:ca:8c:c7:4f:39:85:fc:
         7e:85:a7:1d:a7:1e:b7:11:c0:2e:19:4a:9d:eb:9b:b8:31:2d:
         09:8c:cf:e7:e4:4a:74:23:dc:e4:6c:68:52:27:71:bc:6c:e0:
         9d:df:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:04 2025 by rpki-client