Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File:                     JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier:          b6vFTJ1Wnb2ixUMpqfplHM4EGSi/gdHGCcghSr12STg=
Subject key identifier:   C0:13:8D:21:FD:7D:AB:70:06:B3:8B:FD:ED:FB:C9:7B:4D:72:DA:47
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer:       /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial:       0196729D85168B02BAEB021FDC4ACB0D5436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 15:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:47 +0000
Files and hashes:         1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: b4kEJD1uQn/J5v9yXsNwOhn4/h0WUnoAAPeHlEaLxgs=)
                          2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
                          3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:85:16:8b:02:ba:eb:02:1f:dc:4a:cb:0d:54:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
        Validity
            Not Before: Apr 26 15:00:47 2025 GMT
            Not After : Apr 27 15:00:47 2025 GMT
        Subject: CN=c0138d21fd7dab7006b38bfdedfbc97b4d72da47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:34:8a:43:6a:07:cc:9a:db:b5:30:28:4f:
                    81:b6:03:fc:25:31:13:61:83:a0:8a:f2:92:3e:25:
                    c1:90:b6:15:32:34:c4:30:a6:15:45:e5:63:eb:73:
                    2b:3e:0f:86:ee:0f:20:3e:a7:60:12:6c:d7:7b:4e:
                    32:7a:1b:e5:b8:68:5e:da:a5:5d:59:70:25:be:b4:
                    f5:64:f4:c6:4c:63:ef:40:7b:56:ec:8d:5d:23:37:
                    9c:18:6b:c6:db:c1:8e:51:96:17:95:0a:4f:0e:7c:
                    b2:04:b2:a7:f3:51:d6:45:28:25:b2:aa:f5:8f:4a:
                    78:53:f0:6a:9c:04:51:b0:27:bf:51:a7:10:e0:a7:
                    f6:aa:95:d7:68:7d:bd:87:43:7c:0b:c8:15:07:4b:
                    92:ba:3e:2c:8b:7d:f7:5f:13:44:13:fc:ac:50:73:
                    6e:7b:6d:3b:40:6b:f9:17:77:10:06:ba:cc:0a:d7:
                    56:aa:97:68:c1:3f:47:e2:c4:f0:ca:6d:4b:7d:3d:
                    ee:fc:1b:cc:8f:b4:e7:c4:d3:0d:9f:bf:43:ac:61:
                    77:4e:49:80:92:4c:d8:f3:e2:33:35:7d:6b:2d:ec:
                    b8:df:23:22:48:e6:f9:ab:fa:0e:7c:79:6e:29:9b:
                    68:b4:be:98:6a:ea:a4:07:75:ca:bb:d6:24:3f:0c:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:8D:21:FD:7D:AB:70:06:B3:8B:FD:ED:FB:C9:7B:4D:72:DA:47
            X509v3 Authority Key Identifier:
                keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c2:12:33:f8:36:34:b8:f5:64:0c:2e:47:f8:23:d5:95:64:
         40:ba:09:b1:cd:35:fb:53:70:42:c3:bd:46:c6:20:d3:c8:81:
         f7:1a:a2:78:d5:d8:f1:8e:ad:b5:ba:0d:af:57:97:db:5f:a1:
         ef:5f:5c:bb:78:1d:1d:1e:8f:94:3c:56:1e:87:8f:13:e7:dc:
         91:45:01:9d:35:2e:d2:d8:0f:91:9f:6f:d0:c2:57:b0:fe:47:
         b3:e6:6b:bb:57:4b:a8:df:30:6a:be:fb:8c:06:80:48:d5:b0:
         bb:5e:35:ef:16:34:e9:e0:f2:d5:58:3e:9f:04:07:77:4e:f0:
         1d:21:ea:4c:45:f9:c2:ac:dc:d0:6e:3b:ee:30:9a:0c:09:76:
         65:cb:fb:31:26:a0:ce:82:53:a2:bb:c6:8e:f6:ba:92:d6:28:
         07:49:d5:91:2d:e0:a8:d7:ee:46:15:88:92:95:ba:47:e8:55:
         02:28:bb:e5:02:05:0b:7e:97:4a:53:ba:c5:f4:bd:63:47:78:
         0f:7b:99:8d:2d:17:3b:71:66:a8:d5:a2:39:99:fb:c6:8c:d7:
         03:92:7f:94:c0:d7:51:fd:60:33:57:19:67:f2:f5:ca:ef:41:
         2f:cf:2e:e7:87:44:51:bd:77:bf:3e:a9:de:ac:a1:90:92:04:
         e2:b0:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:04:19 2025 by rpki-client