Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          Sfok5K6sbEzbHV31PSGRUy6kU9C0+dCMGmym0Un5AGs=
Subject key identifier:   E0:78:96:BF:3A:41:81:B3:7D:C8:64:D6:6E:86:CD:18:07:95:D8:6F
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       0196A5416B7ACBDDB7C52D695C6EBED86DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0C07
Signing time:             Tue 06 May 2025 11:00:50 +0000
Manifest this update:     Tue 06 May 2025 11:00:50 +0000
Manifest next update:     Wed 07 May 2025 11:00:50 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: QdpMCknpw+OdtsrqkjmdlEI+1tXTfvKkvb1v3NpdPnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:6b:7a:cb:dd:b7:c5:2d:69:5c:6e:be:d8:6d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: May  6 11:00:50 2025 GMT
            Not After : May  7 11:00:50 2025 GMT
        Subject: CN=e07896bf3a4181b37dc864d66e86cd180795d86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:43:f3:3a:64:91:8e:23:19:1c:64:7c:7b:
                    85:ed:00:8a:cb:c2:9b:52:4d:09:1f:04:d1:c2:0b:
                    f1:3e:32:e2:fa:da:37:2a:fe:62:ee:49:ef:5e:72:
                    2c:be:10:25:70:47:03:d0:d0:8d:c5:d9:6c:21:7d:
                    c8:6f:1f:ea:dc:42:ce:47:0a:ba:ed:c1:f9:16:ad:
                    ba:45:16:d5:55:b0:ba:6c:8a:5d:96:23:12:9a:33:
                    e7:09:3d:31:85:0a:41:d5:a1:cf:91:c0:a2:fb:31:
                    8c:1d:ae:2b:7f:73:da:3e:65:b8:ff:39:21:c6:56:
                    12:54:a8:65:5c:d1:e3:b3:09:2b:bd:49:be:86:bb:
                    5d:52:66:2f:28:a1:81:db:3f:de:ff:19:6a:1c:1b:
                    1e:53:29:31:20:e2:f5:e5:76:8f:36:7a:61:60:40:
                    2a:e7:58:c2:22:8f:f7:b5:48:19:eb:29:bc:e1:8b:
                    1d:71:b5:e9:3a:0a:cd:c6:13:a7:ec:27:27:ac:e8:
                    94:b3:8c:15:98:6a:56:33:86:64:38:ca:48:72:bb:
                    d1:0e:0d:85:31:c4:3b:4d:0c:ea:c9:4c:eb:6b:4c:
                    5c:cc:a5:b3:a1:4d:b9:b2:7f:b7:0c:3a:e8:7b:e9:
                    aa:2a:20:c3:75:bb:68:24:bd:b1:f1:95:0a:ca:6e:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:96:BF:3A:41:81:B3:7D:C8:64:D6:6E:86:CD:18:07:95:D8:6F
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:8b:6b:a7:c3:94:c0:17:37:84:99:9f:6d:f1:d9:63:e5:
         bb:29:d8:17:1a:72:96:d6:8d:77:c0:8d:ca:97:a6:64:cc:29:
         e6:26:29:83:f4:43:4c:33:a7:a2:2b:6d:bd:9f:ff:03:5d:1c:
         02:70:01:23:ca:ab:aa:fc:d5:56:fc:65:65:5f:b6:33:44:43:
         4c:c5:5d:cd:bc:f8:ca:0f:42:bf:ac:57:90:3c:65:30:a7:f2:
         02:39:40:b5:87:d1:27:9e:7a:df:11:79:38:e6:29:9e:50:73:
         e8:5b:db:1a:60:3b:e6:b9:07:96:a1:0c:a3:e7:52:01:7a:5f:
         e5:fe:ec:93:ea:bd:9d:09:ec:95:15:8e:16:d5:ef:93:4e:39:
         74:cb:97:00:f6:85:c9:51:f8:86:2e:f7:ca:d6:b3:c1:d0:98:
         b2:0a:3c:10:52:cf:b3:bd:97:8a:21:93:84:2b:c8:37:27:e2:
         a9:f0:17:c0:2b:8c:82:54:b2:c9:b0:64:aa:be:3c:97:06:e8:
         7e:6f:20:5d:e5:ae:05:2b:e9:60:53:05:ee:30:92:e4:76:35:
         9c:5b:89:42:c5:ba:f4:36:cc:fa:fc:41:e2:9e:ee:e5:97:36:
         50:70:22:fe:b7:82:43:b5:a0:7e:ac:0e:49:d4:5e:4a:53:4e:
         a4:09:ac:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalQWt6y923xS1pXG6+2G3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Zjk4ODhlNzNkZWU3Y2I1Y2RjZmQ5M2IyNjI4ZmJjMTBh
M2U5MGIwHhcNMjUwNTA2MTEwMDUwWhcNMjUwNTA3MTEwMDUwWjAzMTEwLwYDVQQD
EyhlMDc4OTZiZjNhNDE4MWIzN2RjODY0ZDY2ZTg2Y2QxODA3OTVkODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EJD8zpkkY4jGRxkfHuF7QCKy8Kb
Uk0JHwTRwgvxPjLi+to3Kv5i7knvXnIsvhAlcEcD0NCNxdlsIX3Ibx/q3ELORwq6
7cH5Fq26RRbVVbC6bIpdliMSmjPnCT0xhQpB1aHPkcCi+zGMHa4rf3PaPmW4/zkh
xlYSVKhlXNHjswkrvUm+hrtdUmYvKKGB2z/e/xlqHBseUykxIOL15XaPNnphYEAq
51jCIo/3tUgZ6ym84YsdcbXpOgrNxhOn7CcnrOiUs4wVmGpWM4ZkOMpIcrvRDg2F
McQ7TQzqyUzra0xczKWzoU25sn+3DDroe+mqKiDDdbtoJL2x8ZUKym4P+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB4lr86QYGzfchk1m6GzRgHldhvMB8GA1UdIwQY
MBaAFCb5iI5z3ufLXNz9k7Jij7wQo+kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGIt
MWY4MmJhZGY1YzFlLzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGItMWY4MmJhZGY1YzFl
LzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZu2La6fD
lMAXN4SZn23x2WPluynYFxpyltaNd8CNypemZMwp5iYpg/RDTDOnoittvZ//A10c
AnABI8qrqvzVVvxlZV+2M0RDTMVdzbz4yg9Cv6xXkDxlMKfyAjlAtYfRJ5563xF5
OOYpnlBz6FvbGmA75rkHlqEMo+dSAXpf5f7sk+q9nQnslRWOFtXvk045dMuXAPaF
yVH4hi73ytazwdCYsgo8EFLPs72XiiGThCvINyfiqfAXwCuMglSyybBkqr48lwbo
fm8gXeWuBSvpYFMF7jCS5HY1nFuJQsW69DbM+vxB4p7u5Zc2UHAi/reCQ7WgfqwO
SdReSlNOpAmshg==
-----END CERTIFICATE-----
Generated at Tue May 6 19:17:25 2025 by rpki-client