Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          3aKaJp0/bT9k1vE3CIqukE6aPZQExZz48ZsHekYDlhg=
Subject key identifier:   21:0E:F6:CA:78:74:D7:F7:29:4A:C7:78:C7:09:17:FE:73:A8:6B:17
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       0196827EBDDED51B07CB37F2DE4A793B35EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          1519
Signing time:             Tue 29 Apr 2025 17:01:06 +0000
Manifest this update:     Tue 29 Apr 2025 17:01:06 +0000
Manifest next update:     Wed 30 Apr 2025 17:01:06 +0000
Files and hashes:         1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: gOWuXfrIiYuN81aw/4OFzl8Yqt5AU5mRiLebaGhu/xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:bd:de:d5:1b:07:cb:37:f2:de:4a:79:3b:35:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Apr 29 17:01:06 2025 GMT
            Not After : Apr 30 17:01:06 2025 GMT
        Subject: CN=210ef6ca7874d7f7294ac778c70917fe73a86b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:20:0f:c9:04:02:f8:25:5c:db:af:4a:c0:73:
                    47:3c:f1:4c:ba:a3:82:af:69:8c:32:07:f7:44:5c:
                    89:66:6d:6c:b0:9d:08:26:6d:5e:bc:2a:de:37:15:
                    a0:4b:c2:0c:40:55:9a:c7:b5:e2:11:a4:b8:17:59:
                    4a:b9:7b:69:42:ba:bf:7a:15:96:d6:96:42:19:fd:
                    cd:e4:e1:0c:d2:fc:6e:15:cc:5f:b7:2e:2c:bb:fe:
                    8f:7e:79:c7:0f:24:af:db:d9:f1:70:13:d6:d0:3d:
                    33:e3:6b:9b:18:78:d4:6a:9b:63:a0:af:c7:10:5e:
                    28:ca:3c:2c:32:1c:f3:db:8c:82:f0:6a:ee:42:47:
                    8f:ee:f4:38:b2:21:78:f8:c4:78:2c:47:b8:0a:4a:
                    d8:c3:37:ad:7f:05:61:00:aa:c1:0a:fa:ce:75:6a:
                    99:18:56:b2:99:9b:1c:bd:1b:fb:ca:2c:80:55:bf:
                    a4:8d:d3:c8:f0:1f:10:59:ed:13:bf:22:10:cb:d7:
                    fa:c8:d3:97:36:e9:bd:94:d3:38:d3:8f:ed:cf:a1:
                    fc:d0:93:24:6d:15:c1:ab:e6:b9:d8:98:42:2e:bc:
                    8b:71:c1:3c:22:aa:e4:45:e7:9f:2a:7e:24:43:e5:
                    af:c3:bc:2b:8c:1e:b1:50:b2:47:aa:36:dc:2b:56:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0E:F6:CA:78:74:D7:F7:29:4A:C7:78:C7:09:17:FE:73:A8:6B:17
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:ba:e3:10:d8:11:8c:f7:64:c1:e2:8c:e7:77:c1:32:e7:
         b5:85:ae:85:2d:15:ad:5e:77:0c:a1:75:7d:4d:c1:19:a2:b2:
         a2:3e:82:41:d3:bc:c4:4b:52:7b:cb:5a:98:ff:77:e9:7c:0c:
         36:85:5c:c4:77:e0:41:9d:d6:57:8f:f9:b2:e3:32:86:b3:98:
         1e:d2:ff:7e:28:ab:5c:40:79:ea:87:ea:b0:3c:16:1e:69:b9:
         79:11:43:94:34:94:60:ed:9f:b5:23:4d:7a:e0:ca:52:6b:1e:
         ed:40:ce:b4:7b:6e:e7:42:88:10:a3:e3:09:7f:93:45:65:00:
         af:5f:b5:dd:81:e3:f9:e7:6e:c1:48:2f:3c:7d:85:32:33:ea:
         77:cd:ba:1f:19:a4:f6:e8:10:c8:31:ce:bf:9c:17:89:4e:a1:
         4b:bd:f4:b2:bd:6f:79:4a:dd:52:22:04:61:f3:3a:86:b9:5a:
         6e:ce:25:64:bf:fd:9a:60:cc:ee:1d:58:6a:ed:cb:c1:60:d0:
         c1:90:eb:d0:a0:8f:fb:ef:23:61:5b:ec:38:cb:64:5e:ef:be:
         68:43:5c:3d:79:dc:bb:be:1e:f9:99:9c:68:1a:5b:95:a0:43:
         e6:17:59:04:e0:ae:e1:88:62:d5:8a:cd:11:0a:fd:1f:2e:fc:
         b4:93:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:38:15 2025 by rpki-client