Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File:                     JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier:          7ldpB9K/owRrYB5NAOdwG9HdEhnDJHslG5f3Oyyml04=
Subject key identifier:   F4:52:31:CF:5E:5A:EC:82:5D:D4:EF:9E:78:02:D8:D7:F3:6E:88:6A
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer:       /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial:       019671F8751C99608D528AE75D2C7D21F545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number:          150D
Signing time:             Sat 26 Apr 2025 12:00:30 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:30 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:30 +0000
Files and hashes:         1: 1-nkq1gI9c-xmhnINJKTO0eY1F-c.roa (hash: esI7VyyO9I62Rhxi2p/PfcbKRFK2dputujGVLb2DIKs=)
                          2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: UA+e6zILiyVoWUsP+HcST63leOtONwyfUv2cnyU1mM4=)
                          3: NLCollhjrEEQOE-PDJFwvSEkpWg.roa (hash: MVYofLmObC6krPDdhLIsoczQc+WblQhfU3QgFVWsECQ=)
                          4: ngBNYl-whCyGIde-bD1GXnCv6tc.roa (hash: jOzkj1FabBPArbWH4CC715VSys+dMBcuG0O5ZOY3nPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:75:1c:99:60:8d:52:8a:e7:5d:2c:7d:21:f5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
        Validity
            Not Before: Apr 26 12:00:30 2025 GMT
            Not After : Apr 27 12:00:30 2025 GMT
        Subject: CN=f45231cf5e5aec825dd4ef9e7802d8d7f36e886a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:ae:d0:fa:a5:e2:14:76:a6:f1:ab:74:52:
                    30:91:f6:39:8b:89:61:23:56:09:f5:13:29:c5:0b:
                    90:6f:0d:bc:a6:01:45:8e:28:1e:db:93:22:90:90:
                    06:c7:d7:ca:3d:77:5d:b6:68:fc:c2:bd:e0:05:2e:
                    53:9c:e9:b8:33:60:d7:41:08:fc:da:c0:66:e2:d1:
                    0d:23:71:da:48:1e:e6:59:a3:79:ba:80:fe:3e:c6:
                    b3:56:7e:71:45:cf:97:3d:11:67:94:ac:76:f5:3c:
                    0e:9b:2a:98:a2:81:67:fb:27:bb:cc:c2:d4:bb:c2:
                    0c:a9:d1:7d:75:a6:0f:21:d6:1d:6e:e7:4b:da:90:
                    b8:25:bd:69:bb:d2:00:35:99:29:21:f1:4e:64:05:
                    bc:13:12:80:ee:78:71:42:f6:ca:2b:fe:bd:7f:f3:
                    f1:cd:9d:58:28:55:e2:32:a1:76:b8:3b:07:0d:4e:
                    19:ab:97:2f:06:d6:3b:0f:bc:ee:2e:5d:26:aa:39:
                    1e:7e:07:e1:ac:02:74:47:e5:7e:aa:1e:42:12:cd:
                    d0:9e:eb:7c:39:96:90:4c:ff:26:8a:70:8d:76:60:
                    cb:58:d5:93:3d:88:41:46:ee:da:df:f1:d5:24:e7:
                    97:34:b0:53:47:cf:17:80:1b:42:0c:f8:2b:73:21:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:31:CF:5E:5A:EC:82:5D:D4:EF:9E:78:02:D8:D7:F3:6E:88:6A
            X509v3 Authority Key Identifier:
                keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:34:cb:c4:2a:3a:09:79:9e:a4:1f:9c:05:77:45:06:b8:a5:
         b2:0e:7f:44:e9:ed:f9:6b:71:8e:ba:bb:58:f3:50:87:32:2b:
         b5:11:f7:57:bc:d5:ce:fe:9a:99:a2:87:5d:25:00:93:38:0f:
         82:b5:43:f2:d8:19:e5:ec:08:09:ab:9f:15:ec:f0:92:27:a4:
         c0:18:b1:37:57:2e:0c:96:21:3a:66:2d:54:35:be:fe:47:57:
         c2:fe:51:d8:60:f9:50:89:1c:54:91:93:29:f7:88:51:0e:66:
         fa:14:82:61:82:1d:11:71:f4:b6:06:e1:ba:43:56:28:f6:f2:
         39:ea:bc:c2:22:e9:de:77:ff:ba:f9:17:61:5a:9a:3e:5e:0b:
         00:f8:8c:bd:02:a0:56:61:c7:fd:01:e1:f4:f6:f5:b4:6d:da:
         06:75:b3:f0:36:cb:be:a8:db:0b:b2:69:70:0b:40:fa:92:d4:
         59:fa:da:c2:24:21:a0:a5:66:be:93:4e:cb:36:73:fb:07:82:
         e0:c1:3e:81:3e:13:dc:79:77:d2:97:b2:cc:08:e8:d7:1e:cf:
         c9:65:9e:77:6b:2e:8a:8e:eb:51:c0:b5:60:8c:db:01:63:5e:
         ed:d7:07:3e:23:a9:b3:b7:4e:ac:56:22:b0:8d:40:97:07:ea:
         f0:5f:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:01:46 2025 by rpki-client