Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File:                     jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier:          teRMrOw8WJHgemMfFP7kT9Q4zJ9NHH6vk+XeIsT59dY=
Subject key identifier:   4D:5E:88:90:F0:F3:3D:EA:E7:AD:EE:6C:5A:23:E3:C7:7B:A5:5F:38
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer:       /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial:       0197B88FFDFA3683D95DFF6F0C9814FB9CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number:          04D3
Signing time:             Sat 28 Jun 2025 22:02:13 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:13 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:13 +0000
Files and hashes:         1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
                          2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: HHO7lfOlKlhynBpf9kCs9sr6vZGgnWW2mixs0AGVffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:fd:fa:36:83:d9:5d:ff:6f:0c:98:14:fb:9c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
        Validity
            Not Before: Jun 28 22:02:13 2025 GMT
            Not After : Jun 29 22:02:13 2025 GMT
        Subject: CN=4d5e8890f0f33deae7adee6c5a23e3c77ba55f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:bc:ee:7d:99:c0:92:09:90:25:c8:38:1b:
                    64:cb:bd:be:3b:d1:96:73:34:53:c4:be:9e:f1:f1:
                    8f:9e:b3:65:58:01:9a:a1:04:8b:b1:da:27:4c:67:
                    8f:2e:43:32:c9:83:6c:59:96:c7:66:b1:75:ff:b6:
                    d6:d0:60:2b:71:56:a8:02:1d:7c:f6:a7:0e:3d:5a:
                    54:7e:55:f1:dd:90:30:4f:d7:a8:ef:81:b9:da:44:
                    11:bc:f3:00:ff:e3:ef:af:7e:9d:8f:ec:b9:f4:8a:
                    89:3a:f3:f7:7b:fc:8a:6f:8e:42:94:d3:f0:d4:e1:
                    4d:99:47:b1:15:fd:b4:e2:57:93:ce:92:6f:ae:e1:
                    f6:df:44:99:b7:d1:f1:cb:6e:8d:cd:5d:d0:d8:a5:
                    c4:06:e7:59:f2:c1:1a:c1:b9:4b:3c:06:2c:8b:7c:
                    39:b9:0a:d9:df:6f:4d:40:58:d6:9b:93:d7:8e:e8:
                    80:08:49:64:62:06:48:9f:62:f2:34:3e:05:21:d1:
                    a2:e2:44:14:22:a6:62:19:79:91:96:50:24:54:df:
                    3b:04:92:15:3e:42:6f:21:6f:40:2a:40:96:62:5b:
                    e2:73:a8:22:c0:22:d9:5d:61:80:2e:8d:3b:69:60:
                    99:ad:de:30:1a:e3:e2:11:59:0a:6a:8f:9e:cf:8a:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5E:88:90:F0:F3:3D:EA:E7:AD:EE:6C:5A:23:E3:C7:7B:A5:5F:38
            X509v3 Authority Key Identifier:
                keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7f:66:7d:7f:22:6a:77:71:a4:f3:97:d2:a9:91:17:cd:e4:
         ee:ad:69:57:3d:bc:73:c8:2c:30:1d:93:65:de:20:71:7d:17:
         b9:1b:75:cc:8e:5c:94:09:83:7d:30:78:8b:19:a7:46:13:6a:
         f0:ce:8d:18:95:cc:41:f7:1a:c7:58:15:df:30:52:43:31:1c:
         8a:67:c3:6c:ac:2f:64:2d:04:a6:f5:ed:13:14:63:08:f1:6d:
         e6:07:61:b6:80:08:2e:d7:9a:ba:81:be:df:67:1a:a4:23:e8:
         75:bb:da:f1:89:09:f9:2a:71:0c:c4:a7:38:07:26:62:8b:36:
         7c:f0:b1:21:1f:02:8e:4a:89:0a:cc:d0:a8:d5:8d:57:c0:98:
         e8:74:ef:e2:46:e8:3e:41:e4:7b:2b:76:9e:46:1c:ed:a8:3f:
         b6:5b:a0:82:70:bc:ad:e0:25:d2:56:63:eb:73:4b:f6:a6:78:
         f2:6d:cf:6c:43:9c:95:93:00:b8:a8:5c:dc:d6:48:db:2b:07:
         fa:9e:cb:58:93:50:e1:67:f9:b4:66:a4:3a:67:98:19:3d:46:
         d0:49:e7:1d:15:9f:ab:d2:ce:58:e0:e8:1f:9d:c7:7d:6f:ce:
         96:94:f5:e4:a7:2a:f7:d1:58:06:66:7e:6f:dc:e8:15:d5:05:
         b4:69:46:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j/36NoPZXf9vDJgU+5ylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNDhkY2VjYmJjYzA1MmM2NTlmOTcxNjA5MjI5ZTM2NTZh
M2Q5NTYwHhcNMjUwNjI4MjIwMjEzWhcNMjUwNjI5MjIwMjEzWjAzMTEwLwYDVQQD
Eyg0ZDVlODg5MGYwZjMzZGVhZTdhZGVlNmM1YTIzZTNjNzdiYTU1ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNu87n2ZwJIJkCXIOBtky72+O9GW
czRTxL6e8fGPnrNlWAGaoQSLsdonTGePLkMyyYNsWZbHZrF1/7bW0GArcVaoAh18
9qcOPVpUflXx3ZAwT9eo74G52kQRvPMA/+Pvr36dj+y59IqJOvP3e/yKb45ClNPw
1OFNmUexFf204leTzpJvruH230SZt9Hxy26NzV3Q2KXEBudZ8sEawblLPAYsi3w5
uQrZ329NQFjWm5PXjuiACElkYgZIn2LyND4FIdGi4kQUIqZiGXmRllAkVN87BJIV
PkJvIW9AKkCWYlvic6giwCLZXWGALo07aWCZrd4wGuPiEVkKao+ez4qzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1eiJDw8z3q563ubFoj48d7pV84MB8GA1UdIwQY
MBaAFIxI3Oy7zAUsZZ+XFgkinjZWo9lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYt
MTViMDE4NWU3YTc5LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYtMTViMDE4NWU3YTc5
LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApH9mfX8i
andxpPOX0qmRF83k7q1pVz28c8gsMB2TZd4gcX0XuRt1zI5clAmDfTB4ixmnRhNq
8M6NGJXMQfcax1gV3zBSQzEcimfDbKwvZC0EpvXtExRjCPFt5gdhtoAILteauoG+
32capCPodbva8YkJ+SpxDMSnOAcmYos2fPCxIR8CjkqJCszQqNWNV8CY6HTv4kbo
PkHkeyt2nkYc7ag/tluggnC8reAl0lZj63NL9qZ48m3PbEOclZMAuKhc3NZI2ysH
+p7LWJNQ4Wf5tGakOmeYGT1G0EnnHRWfq9LOWODoH53HfW/OlpT15Kcq99FYBmZ+
b9zoFdUFtGlGig==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:33 2025 by rpki-client