Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File:                     jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier:          gt/4LtkPxaEvvxIuV1LZH6d6NaTelzi4rmmGsMbflmU=
Subject key identifier:   97:4A:CF:64:52:2C:AC:6D:05:CC:70:D9:2A:BF:1E:A1:D3:3B:5E:C2
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer:       /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial:       0196A72F37D61CED09409D3AFE42553F8A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 20:00:11 +0000
Manifest this update:     Tue 06 May 2025 20:00:11 +0000
Manifest next update:     Wed 07 May 2025 20:00:11 +0000
Files and hashes:         1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
                          2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
                          3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: 3hplgtnyocMfe1vTVFGIY2vCNpRVuOsJJnQA58YSxcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:37:d6:1c:ed:09:40:9d:3a:fe:42:55:3f:8a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
        Validity
            Not Before: May  6 20:00:11 2025 GMT
            Not After : May  7 20:00:11 2025 GMT
        Subject: CN=974acf64522cac6d05cc70d92abf1ea1d33b5ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:18:56:5e:f5:27:34:1b:ba:38:56:89:26:
                    79:cb:17:a4:cb:dc:58:e2:b2:dc:1d:a9:6c:cf:06:
                    37:18:fc:2d:e1:90:03:ae:02:e1:ef:f3:23:0f:96:
                    af:b4:6c:1e:22:c0:27:f1:e7:76:a2:3c:9f:b8:a9:
                    03:86:99:a2:f1:f9:58:bd:3c:70:c2:b1:e3:4f:03:
                    b2:ac:d7:f1:1a:4a:9e:a3:7e:8d:76:50:ba:37:25:
                    0c:a9:ec:8e:77:5d:26:b1:90:4c:60:7d:1b:ff:b6:
                    77:01:c5:8b:de:91:86:ca:cd:61:1b:49:e9:96:2d:
                    fc:dc:eb:22:86:5f:f0:44:bc:0d:2f:b2:be:01:4c:
                    85:4e:6b:69:24:73:fa:f2:3d:12:9b:89:13:da:69:
                    4c:54:b6:b9:74:fc:0d:94:2c:36:b5:49:cc:da:d5:
                    6a:25:94:ca:75:ec:89:e3:35:9c:a9:a2:0a:ba:fa:
                    21:f6:41:e2:f4:5b:12:38:30:fe:ca:3b:aa:99:f3:
                    cf:8a:80:e5:63:46:6c:3f:c1:6b:02:c1:2e:dd:a6:
                    fd:73:7f:b6:bb:a9:b5:0a:64:6d:59:4e:85:81:00:
                    9f:4a:c0:1c:04:a1:23:b7:86:32:7f:67:13:3d:6b:
                    fe:16:83:32:1e:17:63:36:1c:d8:99:5a:1f:50:70:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4A:CF:64:52:2C:AC:6D:05:CC:70:D9:2A:BF:1E:A1:D3:3B:5E:C2
            X509v3 Authority Key Identifier:
                keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:03:04:dc:e6:73:de:94:3b:5d:98:c0:9a:15:cf:03:fd:
         23:aa:fe:f5:61:1c:af:0d:94:d2:e7:5d:cb:05:6a:5f:98:dc:
         f1:d7:1f:d4:ff:f3:69:ec:f1:6e:61:a7:66:f6:9a:be:5e:9b:
         fc:f7:b2:f3:6c:42:35:66:92:0d:e4:03:a3:8a:11:eb:48:7e:
         82:ef:bb:75:33:21:b3:73:6e:1b:13:d2:41:93:21:a0:2c:f7:
         e0:11:46:db:ef:15:69:8c:b8:94:33:fb:62:10:cf:90:e6:ec:
         ac:0e:7e:06:cc:4f:67:1b:a9:fe:ee:59:5b:df:0a:1f:9c:af:
         70:f0:88:38:23:16:9b:7f:c4:19:a1:ca:e3:e7:95:c7:86:bb:
         b7:fe:d6:20:cb:22:78:6f:77:77:80:a8:e4:f7:54:87:85:70:
         df:b9:79:21:d3:35:d5:a6:c4:71:d6:c3:b1:41:03:7d:b0:2b:
         a8:ab:72:5e:5b:23:05:22:09:23:7a:52:50:44:b1:c1:b5:15:
         f8:b3:d0:27:99:c6:33:fd:b8:aa:6e:71:4c:d9:91:0e:78:aa:
         03:2b:d0:61:cb:57:a9:6b:4d:1a:20:b8:d4:28:1b:fb:2f:7d:
         e9:67:6e:1d:f1:cb:c8:26:af:6f:39:13:c4:47:5c:18:22:6f:
         4e:f9:c7:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZanLzfWHO0JQJ06/kJVP4oHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjRlNDNjNzViZGM1MTFkNTI0ZjBjODVkMDA5Y2JhNzY5
NTYxNDQwHhcNMjUwNTA2MjAwMDExWhcNMjUwNTA3MjAwMDExWjAzMTEwLwYDVQQD
Eyg5NzRhY2Y2NDUyMmNhYzZkMDVjYzcwZDkyYWJmMWVhMWQzM2I1ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygMYVl71JzQbujhWiSZ5yxeky9xY
4rLcHalszwY3GPwt4ZADrgLh7/MjD5avtGweIsAn8ed2ojyfuKkDhpmi8flYvTxw
wrHjTwOyrNfxGkqeo36NdlC6NyUMqeyOd10msZBMYH0b/7Z3AcWL3pGGys1hG0np
li383Osihl/wRLwNL7K+AUyFTmtpJHP68j0Sm4kT2mlMVLa5dPwNlCw2tUnM2tVq
JZTKdeyJ4zWcqaIKuvoh9kHi9FsSODD+yjuqmfPPioDlY0ZsP8FrAsEu3ab9c3+2
u6m1CmRtWU6FgQCfSsAcBKEjt4Yyf2cTPWv+FoMyHhdjNhzYmVofUHAuwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdKz2RSLKxtBcxw2Sq/HqHTO17CMB8GA1UdIwQY
MBaAFI1k5Dx1vcUR1STwyF0AnLp2lWFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3Yzct
NzI0NDgzNTJiODA3LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3YzctNzI0NDgzNTJiODA3
LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSsDBNzm
c96UO12YwJoVzwP9I6r+9WEcrw2U0uddywVqX5jc8dcf1P/zaezxbmGnZvaavl6b
/Pey82xCNWaSDeQDo4oR60h+gu+7dTMhs3NuGxPSQZMhoCz34BFG2+8VaYy4lDP7
YhDPkObsrA5+BsxPZxup/u5ZW98KH5yvcPCIOCMWm3/EGaHK4+eVx4a7t/7WIMsi
eG93d4Co5PdUh4Vw37l5IdM11abEcdbDsUEDfbArqKtyXlsjBSIJI3pSUESxwbUV
+LPQJ5nGM/24qm5xTNmRDniqAyvQYctXqWtNGiC41Cgb+y996WduHfHLyCavbzkT
xEdcGCJvTvnH9Q==
-----END CERTIFICATE-----
Generated at Wed May 7 05:22:01 2025 by rpki-client