Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          ikcZ3T06mFzS4Ct24v6k1hRhkRQP76XVMsNqX5IGS1I=
Subject key identifier:   EB:38:8E:5B:80:DA:9D:F9:4A:4C:0B:AB:ED:D0:53:9B:DF:65:5A:27
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       01969D50CC8F8E66391A99B20B942B61C809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          E9
Signing time:             Sun 04 May 2025 22:00:40 +0000
Manifest this update:     Sun 04 May 2025 22:00:40 +0000
Manifest next update:     Mon 05 May 2025 22:00:40 +0000
Files and hashes:         1: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: QbwY97znQbkkKUK+3Qfs5We7PFl9vN3Qe96DELWGuGo=)
                          2: myWr4RM0KjaGFLw7rDn2QhBZHjQ.roa (hash: v3M/68TF83GRhsjwIwly84Tjuf8KBFKnUC06+RwEUuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:50:cc:8f:8e:66:39:1a:99:b2:0b:94:2b:61:c8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: May  4 22:00:40 2025 GMT
            Not After : May  5 22:00:40 2025 GMT
        Subject: CN=eb388e5b80da9df94a4c0babedd0539bdf655a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:d4:9a:4a:5f:ab:05:43:53:f2:b7:62:26:
                    e4:ab:e2:b9:cc:25:a6:76:33:ed:30:af:45:3a:c6:
                    8f:ee:d6:d3:dd:16:81:06:0c:67:22:03:47:a0:ae:
                    e6:ed:77:7e:a5:a3:9c:e2:02:a8:49:14:ab:50:3d:
                    ea:20:d2:e4:ee:5e:6f:f9:59:e4:f5:37:c6:c0:85:
                    00:b3:95:55:07:e7:18:41:60:41:58:3a:75:bd:f1:
                    1a:e3:af:4c:5c:50:47:6b:e4:57:cf:6b:f8:27:23:
                    9e:25:c3:8f:f8:33:40:5d:ba:62:f3:b5:0a:d8:73:
                    99:cd:1f:1b:97:28:48:12:e8:1a:53:d8:14:9a:10:
                    ba:94:64:c2:3b:eb:71:60:61:82:46:d2:b0:4b:56:
                    6d:a0:65:e3:fc:c2:de:17:cb:b4:fd:2b:2a:d4:c9:
                    6d:dd:25:80:e8:0a:2f:db:09:6b:05:25:40:bd:eb:
                    a9:5e:44:5c:fb:d0:ea:74:9a:23:52:0f:12:f1:17:
                    1a:81:93:d3:56:4c:c9:d2:1e:27:51:30:ef:e3:fa:
                    c0:03:b6:04:ab:7b:f9:5c:6d:9a:50:c6:22:b0:f4:
                    af:3d:8b:5d:2c:8a:ad:7d:ad:04:c9:d0:57:f3:09:
                    2c:20:d2:2e:e0:6e:04:eb:a9:60:a8:45:9e:2e:b6:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:38:8E:5B:80:DA:9D:F9:4A:4C:0B:AB:ED:D0:53:9B:DF:65:5A:27
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:92:3f:26:14:f5:9e:95:50:ff:ce:1f:f6:08:f6:17:68:
         8d:2c:78:de:9b:80:a0:22:55:58:4e:33:22:3a:6b:db:cd:30:
         d8:f7:81:d7:19:24:25:0c:06:7a:1f:67:ca:b8:24:de:b0:ad:
         32:db:77:ad:b8:b0:7a:ae:33:b4:a6:01:b2:6e:a1:60:f2:da:
         6d:0f:07:f1:a0:bd:40:39:90:3e:7d:2e:51:ef:0b:50:25:08:
         58:cf:c7:4b:16:f7:6c:fa:25:42:2c:01:ab:cb:dc:d7:f0:d0:
         a1:6f:5e:af:08:4e:a0:50:46:79:d3:6b:fd:e3:d2:17:d3:ef:
         9d:a6:bd:ce:08:3d:ea:b3:69:c1:4a:bb:75:48:65:e6:e9:67:
         28:1b:6a:44:1b:43:a7:86:9f:76:4c:41:c4:56:05:6a:4b:55:
         3c:45:5d:b4:4a:99:ed:d6:92:c5:7f:8c:70:c8:1d:ec:ad:9e:
         fe:72:86:12:96:c0:bb:1a:be:b8:7d:e1:bf:d9:5d:6f:89:0f:
         ce:c4:35:d8:be:55:a3:ff:99:a3:da:42:87:5f:e9:4e:28:7e:
         ab:ff:3a:53:59:2f:6b:c8:96:20:e3:9c:1a:8b:92:67:20:fe:
         60:6e:18:38:2a:88:5b:b0:ee:d9:37:a5:91:ca:33:d1:08:4f:
         76:1c:1c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadUMyPjmY5GpmyC5QrYcgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw
ZjMxNjYwHhcNMjUwNTA0MjIwMDQwWhcNMjUwNTA1MjIwMDQwWjAzMTEwLwYDVQQD
EyhlYjM4OGU1YjgwZGE5ZGY5NGE0YzBiYWJlZGQwNTM5YmRmNjU1YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU3UmkpfqwVDU/K3Yibkq+K5zCWm
djPtMK9FOsaP7tbT3RaBBgxnIgNHoK7m7Xd+paOc4gKoSRSrUD3qINLk7l5v+Vnk
9TfGwIUAs5VVB+cYQWBBWDp1vfEa469MXFBHa+RXz2v4JyOeJcOP+DNAXbpi87UK
2HOZzR8blyhIEugaU9gUmhC6lGTCO+txYGGCRtKwS1ZtoGXj/MLeF8u0/Ssq1Mlt
3SWA6Aov2wlrBSVAveupXkRc+9DqdJojUg8S8RcagZPTVkzJ0h4nUTDv4/rAA7YE
q3v5XG2aUMYisPSvPYtdLIqtfa0EydBX8wksINIu4G4E66lgqEWeLrYkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs4jluA2p35SkwLq+3QU5vfZVonMB8GA1UdIwQY
MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt
OGM0NTZhZjZiNmJiLzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi
LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoo+SPyYU
9Z6VUP/OH/YI9hdojSx43puAoCJVWE4zIjpr280w2PeB1xkkJQwGeh9nyrgk3rCt
Mtt3rbiweq4ztKYBsm6hYPLabQ8H8aC9QDmQPn0uUe8LUCUIWM/HSxb3bPolQiwB
q8vc1/DQoW9erwhOoFBGedNr/ePSF9Pvnaa9zgg96rNpwUq7dUhl5ulnKBtqRBtD
p4afdkxBxFYFaktVPEVdtEqZ7daSxX+McMgd7K2e/nKGEpbAuxq+uH3hv9ldb4kP
zsQ12L5Vo/+Zo9pCh1/pTih+q/86U1kva8iWIOOcGouSZyD+YG4YOCqIW7Du2Tel
kcoz0QhPdhwcfg==
-----END CERTIFICATE-----
Generated at Mon May 5 04:53:07 2025 by rpki-client