Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File:                     jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier:          JiDDiXqUEtH2HRLgAWLpeop0aI/vHFaKIRdqwPhj1o0=
Subject key identifier:   7F:18:A8:01:D4:7C:59:DC:EF:F4:54:C2:19:A1:CD:D3:72:07:6A:F5
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer:       /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial:       0196816BD074F9266AB06EE1C01352C98989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number:          1510
Signing time:             Tue 29 Apr 2025 12:00:48 +0000
Manifest this update:     Tue 29 Apr 2025 12:00:48 +0000
Manifest next update:     Wed 30 Apr 2025 12:00:48 +0000
Files and hashes:         1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: 5v1zZTe03FzByQgrvh2hlR4a0Dt2e9r95vxK9h1jN4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:6b:d0:74:f9:26:6a:b0:6e:e1:c0:13:52:c9:89:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
        Validity
            Not Before: Apr 29 12:00:48 2025 GMT
            Not After : Apr 30 12:00:48 2025 GMT
        Subject: CN=7f18a801d47c59dceff454c219a1cdd372076af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:6b:2f:d8:1c:1f:76:d2:39:c3:e6:53:54:
                    15:3b:a9:ba:76:f3:9f:9c:c4:00:c3:44:46:fb:bf:
                    93:33:de:60:f6:7f:1e:21:03:40:c0:cd:1c:b5:cc:
                    92:08:61:cc:1b:fb:c8:ad:2d:8c:eb:99:25:09:9c:
                    aa:eb:5b:4c:88:1b:28:e0:f1:e9:9f:20:cc:6e:4b:
                    aa:5a:77:74:b8:02:61:b1:1a:fe:56:af:23:56:54:
                    fc:7a:72:1b:7d:29:ae:e9:d5:89:1d:3e:37:98:c1:
                    23:af:d4:e8:7b:24:f6:3a:c9:d0:dc:e9:9b:af:e1:
                    2e:25:ea:19:a4:fb:cd:56:e1:63:86:57:30:86:c6:
                    bb:e9:18:53:eb:3d:85:30:d6:25:dc:48:45:4f:8d:
                    d7:43:60:8e:64:b8:63:83:ac:09:c2:e4:10:c0:e7:
                    2e:90:7a:fb:9d:b3:21:bd:ec:e7:31:1a:ee:03:6a:
                    25:6a:8e:f7:d3:f4:e3:d6:09:08:35:5c:c4:5b:76:
                    53:1f:76:ce:16:01:10:11:4f:12:4f:99:9f:6f:94:
                    96:ec:c8:2a:8c:da:94:31:b9:21:40:58:d1:ad:85:
                    f3:16:d4:13:7f:90:58:a1:67:dd:70:f2:88:8d:21:
                    f2:8c:f8:b3:b1:09:82:68:c8:4f:9a:80:ad:94:8e:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:18:A8:01:D4:7C:59:DC:EF:F4:54:C2:19:A1:CD:D3:72:07:6A:F5
            X509v3 Authority Key Identifier:
                keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:c9:28:d4:3b:84:f0:51:c7:89:ed:98:40:3a:81:0b:37:
         2b:ef:fd:a2:36:f1:69:ff:7b:0b:cd:4b:e3:48:59:15:6f:0c:
         99:7d:f1:45:68:53:01:61:ba:b1:ae:4c:71:87:ce:4a:64:80:
         7b:0f:c6:04:8c:ce:f7:c9:50:1d:db:59:11:75:9e:e8:3f:fb:
         b5:85:7f:be:da:85:26:24:20:39:90:f2:0d:7c:bb:13:ae:5f:
         62:b9:29:10:12:ce:b9:67:8a:69:96:8f:6a:93:68:cf:0a:92:
         4b:e3:d8:6c:2a:55:10:49:0a:35:a1:8c:01:94:62:23:45:ad:
         bf:8b:01:70:29:36:c8:20:a2:93:52:af:0c:18:7e:03:d7:f5:
         6a:99:8c:95:7c:4b:98:b0:45:ac:7e:3a:84:b2:55:99:6c:50:
         e4:51:b3:0e:f7:5c:8d:14:9f:0a:17:58:f0:69:b6:2f:74:fe:
         73:62:de:9b:48:ad:63:e9:92:36:62:b2:d9:18:64:b7:4e:66:
         ce:e3:07:47:a5:b7:7b:99:99:8a:0e:e5:a8:76:fc:04:af:2b:
         a6:75:9d:70:a2:4c:53:a6:e0:90:4e:f6:b3:2d:1e:25:e5:b4:
         40:73:26:e0:38:cd:28:55:13:65:ba:44:db:8b:1a:22:97:74:
         35:f5:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:34:06 2025 by rpki-client