Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File:                     JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier:          +uq31cPSHGjCDRcke1u8HSlFqLySi6MD0RQuIlCPAIE=
Subject key identifier:   34:D1:D3:7B:89:B2:73:35:29:2C:86:39:21:7B:04:FB:1A:BD:8F:E2
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer:       /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial:       019688809701417FF481D5FA583FA7B8F5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number:          0396
Signing time:             Wed 30 Apr 2025 21:00:50 +0000
Manifest this update:     Wed 30 Apr 2025 21:00:50 +0000
Manifest next update:     Thu 01 May 2025 21:00:50 +0000
Files and hashes:         1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: VvauL/02GPX/j3aaw1zz9m0wYdjKHNpKkQFKNGwr4Fc=)
                          2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:80:97:01:41:7f:f4:81:d5:fa:58:3f:a7:b8:f5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
        Validity
            Not Before: Apr 30 21:00:50 2025 GMT
            Not After : May  1 21:00:50 2025 GMT
        Subject: CN=34d1d37b89b27335292c8639217b04fb1abd8fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:06:60:94:b9:6a:1d:31:ca:76:f6:14:ff:
                    86:7f:84:76:c3:6d:16:28:c7:21:d6:36:9f:ea:31:
                    14:c7:13:82:fd:30:5e:5b:fc:71:63:8e:fc:d0:20:
                    67:28:db:d5:82:49:01:8b:b4:06:77:dc:15:81:fc:
                    18:60:46:6d:39:ba:5f:54:be:cd:f7:0d:4a:69:e8:
                    87:24:8a:9c:b2:32:14:e7:5b:a6:d1:92:5e:84:2f:
                    f8:5e:86:92:56:fe:28:80:d2:f2:c1:3e:fc:7b:4b:
                    fe:fa:14:23:35:08:38:5e:00:c5:58:c0:5a:c2:05:
                    d0:7a:ca:5a:80:c9:4d:52:40:61:35:a4:c5:f7:a1:
                    43:62:82:cf:65:6b:c4:14:1b:20:3b:60:d6:6d:77:
                    31:9d:eb:06:c4:f5:f1:62:e5:d7:b4:5e:8e:c1:9d:
                    13:7d:3d:66:04:d6:4f:53:77:a8:10:97:37:50:8d:
                    bc:1e:af:3f:79:7e:2a:a1:88:cc:bc:bd:ca:75:f9:
                    a2:9c:f7:2d:9e:0b:7c:48:10:44:6b:f6:0d:1c:10:
                    cd:56:bf:5d:54:95:88:de:fd:11:29:50:7c:23:e0:
                    c8:51:68:08:09:f8:95:8e:30:b3:db:ad:aa:bf:75:
                    ba:4b:5b:fb:f8:f8:24:c0:cd:fc:0e:eb:6b:4f:1c:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D1:D3:7B:89:B2:73:35:29:2C:86:39:21:7B:04:FB:1A:BD:8F:E2
            X509v3 Authority Key Identifier:
                keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:63:7d:f9:df:78:d7:b7:31:fc:0e:d8:18:b4:a0:b7:29:4e:
         c6:a5:4f:c2:74:0c:12:82:cb:ed:e3:f4:cb:d9:3a:f7:95:ba:
         57:31:4d:e0:b0:da:22:be:38:fc:a4:41:6c:48:b3:45:c1:2e:
         e9:75:04:67:89:18:50:81:83:91:e4:1e:4c:11:d3:5d:34:cf:
         d9:10:89:cb:93:25:34:4d:34:47:da:06:28:4c:26:4e:4f:f3:
         1d:de:09:d3:b7:a5:d0:32:62:32:e3:0d:b9:45:e5:2d:58:71:
         45:7e:05:d9:09:f2:e9:82:fb:dd:18:be:d6:21:f0:85:ea:24:
         de:a7:70:90:8f:4a:9d:bc:a9:98:e1:3b:37:c3:ed:46:89:cd:
         8f:e1:18:77:ae:30:21:0c:62:3c:ef:53:81:7c:ec:a3:ce:6e:
         92:33:57:b1:ec:2f:54:e4:fe:46:98:7c:d3:ca:7b:a7:03:ae:
         22:0c:c7:67:86:c7:a1:55:8a:d0:31:62:80:28:89:a9:9c:f5:
         b0:c6:e9:15:0e:f3:86:22:98:c3:ff:77:6c:4a:ed:2d:67:26:
         90:a9:c5:ce:40:c7:f9:9d:46:ef:17:35:c9:a1:76:90:67:34:
         3e:7d:87:a8:cd:23:17:7e:28:b9:e6:98:14:bd:b2:43:b3:40:
         6d:c4:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:04 2025 by rpki-client