Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File:                     JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier:          gnoxwqpk2V7Wt/pgG3GwM0JDVU/DRNoKAOzyGVc6faU=
Subject key identifier:   5B:A8:26:9D:E4:7F:79:56:CC:FD:9F:25:21:8A:1E:BF:C1:5A:DA:B6
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer:       /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial:       0196760C7231686E469570844194C575D86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 07:00:49 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:49 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:49 +0000
Files and hashes:         1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: DRKC2MIkr98U7AvE241jh1M/1AMWf2XPHIxsQ2MHN3I=)
                          2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:72:31:68:6e:46:95:70:84:41:94:c5:75:d8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
        Validity
            Not Before: Apr 27 07:00:49 2025 GMT
            Not After : Apr 28 07:00:49 2025 GMT
        Subject: CN=5ba8269de47f7956ccfd9f25218a1ebfc15adab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:26:9a:f6:28:d9:a3:fc:0d:ac:c2:04:e6:
                    ac:28:d8:12:2b:43:e1:fc:31:ce:12:d4:3c:ef:af:
                    62:13:57:0a:fb:91:aa:a8:75:1e:37:a2:45:e7:a3:
                    0f:f2:07:1d:b0:4f:44:61:1e:87:08:e2:9a:64:b0:
                    f5:99:c1:7d:b2:45:7a:b1:09:01:61:4a:0f:07:76:
                    ae:61:ef:a2:2d:b8:e9:c7:4c:2c:6c:87:91:7d:e8:
                    18:57:9e:40:02:29:b7:13:79:7c:47:2d:b5:24:35:
                    a4:9d:0e:2a:6f:22:0d:fc:8c:42:97:6c:6f:ba:47:
                    c3:1c:92:83:a9:68:7a:fb:7b:56:33:af:47:1b:73:
                    37:82:5a:fb:10:d6:c8:6e:5e:32:a7:ea:e1:6a:93:
                    9e:2c:93:40:86:07:98:55:65:0f:b2:82:3b:38:31:
                    1d:57:dd:62:03:a8:08:9f:d4:2e:b7:8d:34:88:3e:
                    92:b8:38:03:8f:c5:70:a7:6b:86:1e:7b:93:26:d2:
                    41:48:07:ed:d2:04:2e:27:7b:10:04:f6:d7:36:2d:
                    2f:80:33:76:bf:33:c8:3d:77:88:a5:87:f6:5e:a6:
                    1c:2b:8f:7e:89:43:22:0e:a7:85:27:37:28:e1:82:
                    5d:14:cf:43:73:70:73:0a:c9:7d:66:b7:a4:ef:43:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:26:9D:E4:7F:79:56:CC:FD:9F:25:21:8A:1E:BF:C1:5A:DA:B6
            X509v3 Authority Key Identifier:
                keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cc:16:a0:4b:c7:f3:cf:24:c5:7f:ef:dd:6a:9b:3b:ec:8c:
         ea:bc:1c:23:ce:6d:5f:a1:98:4b:2f:11:c8:cf:8a:06:25:04:
         1c:3d:1e:b3:c0:ec:b7:08:8a:c9:29:79:da:67:8f:aa:83:0a:
         47:e1:ec:a3:9d:14:18:40:c2:cf:87:3b:1c:24:97:2e:62:cb:
         4a:25:96:88:b4:7c:03:a7:56:4c:dc:bc:c7:9c:31:72:41:26:
         9d:bd:9b:08:ed:00:31:de:98:32:b2:bc:f0:51:65:59:9f:10:
         05:20:4e:61:fa:eb:8a:f7:bc:d9:71:24:3d:ad:72:98:2e:5c:
         85:e8:92:64:42:85:38:20:26:40:e4:46:97:bb:d9:cb:3e:ad:
         4e:fb:a5:07:f3:84:b9:35:6b:7b:69:7e:68:1d:f4:06:e5:17:
         5e:f8:7b:7f:e2:68:05:e1:4f:d3:e7:ed:13:49:b2:e1:e7:2b:
         4c:de:10:81:c1:4f:19:96:58:2e:10:da:bb:79:ca:24:55:51:
         fa:af:0e:15:74:56:dc:8c:ee:99:04:18:a8:3d:7b:44:ce:24:
         92:99:7a:20:49:4f:67:9c:a7:fa:c7:06:24:4f:dd:21:b7:c1:
         56:a4:ab:61:64:58:eb:2c:03:29:71:07:bc:62:7a:c9:dd:da:
         e1:34:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:03 2025 by rpki-client