Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          p6xEuc3HnUg9rA2w141WMTXhEnz8KkbzZprmSJXvWQ0=
Subject key identifier:   A7:D6:AD:4A:86:73:76:52:2D:1A:08:46:2F:81:4B:F2:F8:15:2D:73
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019680C740BB1735EDF6509155098000561E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          1512
Signing time:             Tue 29 Apr 2025 09:01:03 +0000
Manifest this update:     Tue 29 Apr 2025 09:01:03 +0000
Manifest next update:     Wed 30 Apr 2025 09:01:03 +0000
Files and hashes:         1: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (hash: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=)
                          2: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: BTf8YZkq9eOQwyC0ZLOi5al7KBQ4ZWGGif2Vln2EFi8=)
                          3: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (hash: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=)
                          4: k_-rD0qGkNwGwcLu6HW3p8mmNtU.roa (hash: 2oKRAJvxuw9ZlCxWfoLf08ddChOQxfTyMJhpORXiSP8=)
                          5: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (hash: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=)
                          6: px36HXCD5Tde7rc7667drQlCUgM.roa (hash: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:c7:40:bb:17:35:ed:f6:50:91:55:09:80:00:56:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Apr 29 09:01:03 2025 GMT
            Not After : Apr 30 09:01:03 2025 GMT
        Subject: CN=a7d6ad4a867376522d1a08462f814bf2f8152d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:45:d6:67:86:7f:e3:f4:f5:af:41:77:00:
                    b7:44:16:3f:50:0e:5c:44:f8:ad:02:a1:02:eb:16:
                    a4:78:52:ae:00:a3:28:cc:18:ec:82:d8:17:f6:93:
                    e6:36:68:02:37:c7:5e:2b:14:31:d4:08:0a:cf:27:
                    ce:aa:e8:48:47:72:8e:26:d7:4d:c3:02:c2:3e:77:
                    e0:35:8c:1d:d9:7e:9d:02:81:a1:c1:49:a7:49:a7:
                    19:02:b2:30:fc:a0:7e:8f:15:8d:af:23:f8:df:ec:
                    2d:b4:46:74:4d:17:b0:b4:21:74:8b:69:07:95:c7:
                    e9:3a:43:8d:9b:ad:65:e4:f7:1b:6a:97:c3:c6:33:
                    cf:35:f2:02:a3:17:ea:33:22:4e:2b:9f:48:f8:e9:
                    ee:07:5d:10:d4:6a:35:b7:bf:94:09:a3:47:83:e1:
                    40:cf:fd:8b:f8:e9:fd:9d:e3:92:95:2b:18:c8:00:
                    bc:a3:d7:fc:3c:f5:66:03:7c:19:e2:e8:4a:b0:f6:
                    00:1c:89:da:8d:09:39:2f:da:4c:6d:87:29:4b:3d:
                    15:59:43:b9:a2:39:c7:1e:d6:57:e0:05:e5:cc:36:
                    a1:58:04:4d:68:f1:14:b7:6e:c9:fb:b8:53:da:c3:
                    9f:c1:69:a1:2d:a3:37:9c:8d:8e:f0:f0:f7:8b:33:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D6:AD:4A:86:73:76:52:2D:1A:08:46:2F:81:4B:F2:F8:15:2D:73
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:85:87:ee:d5:c6:82:b9:3a:30:1c:46:03:5e:78:45:62:a6:
         1c:40:82:5d:71:e1:f6:55:63:3f:5b:54:d6:02:c3:e1:6c:47:
         58:32:38:29:7b:10:c9:09:fc:bb:b9:f6:5b:8c:b8:fa:71:10:
         44:02:e6:3c:9b:22:6e:c2:a7:29:22:fd:d7:cf:48:69:eb:c8:
         90:fb:00:3d:6c:70:a6:84:d2:6b:1a:c3:af:38:30:36:40:8e:
         b6:3c:b1:6a:02:1b:7f:2a:20:7d:d6:2b:00:81:b0:d9:64:59:
         30:8d:cd:ab:3c:73:48:17:b4:50:e2:b1:c6:ff:db:11:1e:1f:
         87:68:78:29:bb:d5:29:59:29:9b:ac:3d:4b:66:91:7e:91:a7:
         9c:d7:97:72:70:c4:73:81:66:86:03:df:da:d4:63:07:4e:04:
         74:a9:26:2f:55:78:99:0d:6a:7f:cb:d7:bf:9b:81:48:d0:af:
         44:59:3f:15:9a:5e:01:83:bc:b2:67:cd:cb:f5:6c:4a:bb:98:
         52:12:28:44:e0:cd:46:f4:ca:b0:44:04:86:bb:c6:df:9a:bf:
         7d:05:1e:c3:0a:e8:f2:60:3b:a6:41:17:1b:cb:bd:6e:7b:f3:
         29:45:35:8a:e0:79:32:57:87:be:bf:85:96:7b:c9:d3:ac:4c:
         43:d6:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:18:56 2025 by rpki-client