Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
File:                     JNnaT_sbttJz3hutXbvw0f9H8M8.mft (raw, json)
Hash identifier:          H55Xg5nziMS8mkshWGOQofxULro90QxJkvXhb4UgHkc=
Subject key identifier:   24:83:BE:16:0C:4C:A0:E1:9C:21:9E:01:9E:4C:FE:E2:9C:CD:15:DA
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       0196B8C82DEC2513F665C5D0CEF0928C9497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
Manifest number:          0873
Signing time:             Sat 10 May 2025 06:00:48 +0000
Manifest this update:     Sat 10 May 2025 06:00:48 +0000
Manifest next update:     Sun 11 May 2025 06:00:48 +0000
Files and hashes:         1: JNnaT_sbttJz3hutXbvw0f9H8M8.crl (hash: XWG5mhn6fQq1VLmLu3VoYBYcjgNCQs+0pp+YwU17L5w=)
                          2: ig4Vw8jKdTSXvTx5GfSWLT4hpBI.roa (hash: BFJbs/HwxCcLUL+B/kI6PaB4t4ZsO6v6jpagrYKCusQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:c8:2d:ec:25:13:f6:65:c5:d0:ce:f0:92:8c:94:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: May 10 06:00:48 2025 GMT
            Not After : May 11 06:00:48 2025 GMT
        Subject: CN=2483be160c4ca0e19c219e019e4cfee29ccd15da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:b0:7c:ed:29:1e:55:5d:2e:63:99:1a:38:
                    d3:ea:01:cc:8a:10:22:f0:d2:92:a4:f3:3e:7b:57:
                    36:c0:ed:b8:68:68:a5:1e:fc:a2:78:f8:ff:cf:94:
                    16:33:c1:65:e2:73:48:52:34:b6:a4:dd:60:29:ea:
                    82:b1:7a:ce:ee:d7:d8:67:a4:ba:e1:8a:fe:b6:23:
                    7d:1c:f4:26:11:36:c9:bf:cb:1e:4c:e1:27:13:de:
                    b1:ac:a0:45:25:a6:0e:e2:08:0f:57:aa:fc:22:e4:
                    a2:b1:96:6e:89:2a:06:91:37:f4:51:0e:87:ee:e4:
                    16:10:84:5b:85:2d:1b:34:24:0f:ed:89:0e:03:68:
                    6d:8a:8c:36:76:cc:ac:f9:40:c0:09:d2:43:5d:75:
                    cc:c2:6e:4c:9d:e7:89:ea:2d:ab:cd:19:18:b9:0b:
                    57:50:6b:ee:45:e1:d4:11:a1:d9:9a:c9:21:75:90:
                    b6:3d:a5:b9:7f:6b:8e:d2:63:2a:a3:67:fa:7a:c0:
                    bd:bf:d2:cd:4c:4b:bb:6f:4b:7c:87:0b:87:30:bf:
                    7c:9d:ac:73:95:39:29:2e:41:06:54:40:89:c2:fe:
                    75:df:ac:4c:da:c9:62:46:13:35:ab:32:32:ee:70:
                    2f:10:20:3d:79:70:fe:fd:33:fe:7c:fc:9b:8b:e5:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:83:BE:16:0C:4C:A0:E1:9C:21:9E:01:9E:4C:FE:E2:9C:CD:15:DA
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ba:6a:a4:92:ec:95:20:5b:18:3a:c2:1c:c0:ee:36:fa:01:
         f6:66:10:d8:69:0d:fa:f6:19:d5:13:c3:13:40:c4:b0:eb:01:
         0f:1c:40:d1:dd:3b:f2:96:73:10:97:ce:b7:23:a6:13:02:25:
         51:6f:b1:e3:5b:24:91:de:ea:67:65:13:46:e7:32:24:20:62:
         fc:bf:dc:7d:fc:7d:6b:28:4c:59:ae:c2:fd:37:5f:18:8a:7a:
         3e:94:60:1f:52:1f:9a:94:14:b6:ad:5e:e5:01:1d:c8:a4:33:
         4a:5a:30:f0:d4:9e:d2:12:2e:f8:dc:45:57:2c:34:6f:70:e4:
         b7:d9:4c:33:3b:a4:ce:1c:f7:82:82:50:4b:22:8b:91:db:25:
         b4:9a:76:a6:fe:c3:7d:9b:e3:79:eb:30:fc:16:44:12:0d:65:
         98:bb:f0:18:45:83:b1:73:90:4c:76:60:f2:52:df:04:a6:8c:
         b5:0a:1b:1e:fe:b3:d5:8a:b5:20:c7:94:ee:c2:a0:2e:2c:01:
         14:73:ed:96:0c:e2:8d:f8:9b:71:55:4e:4e:f5:a1:3f:98:42:
         f9:9d:a1:8c:39:f6:ce:bc:68:5f:09:86:c2:d8:18:a3:25:f7:
         bb:6f:06:b2:74:1c:f9:3d:37:8e:15:27:63:58:ba:a9:63:6f:
         ad:2b:5a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4yC3sJRP2ZcXQzvCSjJSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0
N2YwY2YwHhcNMjUwNTEwMDYwMDQ4WhcNMjUwNTExMDYwMDQ4WjAzMTEwLwYDVQQD
EygyNDgzYmUxNjBjNGNhMGUxOWMyMTllMDE5ZTRjZmVlMjljY2QxNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzqwfO0pHlVdLmOZGjjT6gHMihAi
8NKSpPM+e1c2wO24aGilHvyiePj/z5QWM8Fl4nNIUjS2pN1gKeqCsXrO7tfYZ6S6
4Yr+tiN9HPQmETbJv8seTOEnE96xrKBFJaYO4ggPV6r8IuSisZZuiSoGkTf0UQ6H
7uQWEIRbhS0bNCQP7YkOA2htiow2dsys+UDACdJDXXXMwm5MneeJ6i2rzRkYuQtX
UGvuReHUEaHZmskhdZC2PaW5f2uO0mMqo2f6esC9v9LNTEu7b0t8hwuHML98naxz
lTkpLkEGVECJwv5136xM2sliRhM1qzIy7nAvECA9eXD+/TP+fPybi+UWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSDvhYMTKDhnCGeAZ5M/uKczRXaMB8GA1UdIwQY
MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt
OGEwM2E3YzFmZTliLzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli
LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLpqpJLs
lSBbGDrCHMDuNvoB9mYQ2GkN+vYZ1RPDE0DEsOsBDxxA0d078pZzEJfOtyOmEwIl
UW+x41skkd7qZ2UTRucyJCBi/L/cffx9ayhMWa7C/TdfGIp6PpRgH1IfmpQUtq1e
5QEdyKQzSlow8NSe0hIu+NxFVyw0b3Dkt9lMMzukzhz3goJQSyKLkdsltJp2pv7D
fZvjeesw/BZEEg1lmLvwGEWDsXOQTHZg8lLfBKaMtQobHv6z1Yq1IMeU7sKgLiwB
FHPtlgzijfibcVVOTvWhP5hC+Z2hjDn2zrxoXwmGwtgYoyX3u28GsnQc+T03jhUn
Y1i6qWNvrStaqA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:52:40 2025 by rpki-client