Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
File:                     JojvNz-PAOAcJc-SS08ujsaiGdE.mft (raw, json)
Hash identifier:          0fdQZVdLNLbFJ00ixHyXyiZIfcNeNrf8QGAUW34aqZw=
Subject key identifier:   F9:A7:2D:A6:61:62:81:4F:FC:36:C7:D9:9C:76:50:84:B9:25:32:14
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Certificate issuer:       /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial:       0197B6A188DE60CFE1E28AB893BB9F50B876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 13:02:08 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:08 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:08 +0000
Files and hashes:         1: 9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa (hash: wwuZ4oEoEOc/Uq5HjzgRuotY259BWR4HTpXNj9bkQ/g=)
                          2: JojvNz-PAOAcJc-SS08ujsaiGdE.crl (hash: 05If3Y1lUihgUPakNyKQQkRMTqYYxZQNArNewYG+WtE=)
                          3: NLlq8DiYVFJMYAJlr9NHDav50Bs.roa (hash: 1feCq5rXN2U803Ez7sUO8zgEL070beNeKBUwCwKwE5Y=)
                          4: V9TCe7mXJBH58d-15AGeUYfc0cM.roa (hash: hoxc5Dur4oAZR+SCmAqnZb+/Hrq6+3AzAIRJJu/YQd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:88:de:60:cf:e1:e2:8a:b8:93:bb:9f:50:b8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
        Validity
            Not Before: Jun 28 13:02:08 2025 GMT
            Not After : Jun 29 13:02:08 2025 GMT
        Subject: CN=f9a72da66162814ffc36c7d99c765084b9253214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:60:6c:f5:60:65:de:f0:f6:4a:20:5b:71:
                    ea:4b:b9:eb:32:b7:f6:6c:ce:76:a2:53:8d:57:1b:
                    b1:04:ee:dc:aa:70:f3:13:3c:7d:01:96:e7:67:b4:
                    0a:68:04:04:2e:f0:bd:63:ac:7a:f7:22:8c:34:73:
                    dc:59:29:66:93:cf:7b:c6:3b:db:44:ef:b1:5f:ad:
                    61:01:9e:4d:24:6e:3f:fe:6f:91:f1:26:45:5f:a4:
                    cb:ba:ac:8a:f6:e6:9a:c0:18:b5:d5:ec:4e:d7:91:
                    0a:8b:2b:a2:3f:05:c2:8a:67:d4:91:78:bb:06:f0:
                    c6:c1:d2:24:5d:8b:b0:6d:0e:5e:3f:a1:1c:39:03:
                    5e:68:55:6e:1b:d0:0c:d5:d1:dd:a7:84:ba:7c:b3:
                    03:bc:be:c8:be:4e:fe:13:63:b3:0c:83:b9:da:fe:
                    51:f1:85:95:15:17:b6:ea:cd:38:1f:07:b8:60:52:
                    55:4c:11:64:bd:89:7f:f0:19:40:41:c3:af:85:f2:
                    a7:63:9e:49:a9:30:72:9e:38:72:fd:2e:0d:29:38:
                    12:43:74:c3:98:d0:8f:e2:91:0f:50:c1:56:7a:a9:
                    53:cd:15:3b:ab:6e:45:f6:3c:04:9e:74:29:76:3c:
                    bf:6e:15:12:30:81:2f:6e:92:62:ea:d6:f9:37:d9:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A7:2D:A6:61:62:81:4F:FC:36:C7:D9:9C:76:50:84:B9:25:32:14
            X509v3 Authority Key Identifier:
                keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:87:52:a5:75:d8:ec:bc:52:a5:d8:f5:1f:63:3b:7e:99:3c:
         e3:a1:36:f9:6a:8c:81:30:ab:b5:c5:f2:a4:0f:c5:d4:f5:ea:
         b1:2e:91:85:98:e2:8f:57:bf:5a:21:0a:70:9b:1e:56:a6:f9:
         fc:57:57:2a:34:ec:b1:83:88:1b:42:16:b0:ae:16:24:b6:1e:
         49:68:75:ce:19:75:21:07:d1:02:c3:0a:53:45:bb:b3:be:d1:
         98:a9:a7:06:3d:ce:af:13:d2:3b:9a:e5:c0:2f:b5:3d:c6:24:
         5b:22:85:4d:8a:35:5d:fc:57:32:f0:cd:89:8d:0e:5f:84:1b:
         ca:23:1a:93:75:e6:4b:eb:1b:d6:00:9e:47:6d:98:bf:f9:14:
         86:27:0a:c7:a7:86:8b:26:c3:02:cb:96:d0:d1:57:ea:c6:67:
         66:00:6c:63:6d:13:c7:bf:1d:6e:60:6d:6d:a9:0b:91:98:b1:
         2d:b4:ff:2e:0b:7e:58:2d:f5:be:aa:45:0f:f8:cc:2d:9d:3f:
         31:3d:ad:fe:9b:a6:b1:c8:0f:6f:2a:22:ca:06:c0:31:00:7c:
         2b:68:0a:0e:77:a6:1c:36:e8:79:87:d9:c7:cc:ac:a9:db:4a:
         27:c2:c0:9d:05:b1:3c:81:8d:e0:42:b4:d0:59:6a:d3:b0:1e:
         b2:f2:ad:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYjeYM/h4oq4k7ufULh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODhlZjM3M2Y4ZjAwZTAxYzI1Y2Y5MjRiNGYyZThlYzZh
MjE5ZDEwHhcNMjUwNjI4MTMwMjA4WhcNMjUwNjI5MTMwMjA4WjAzMTEwLwYDVQQD
EyhmOWE3MmRhNjYxNjI4MTRmZmMzNmM3ZDk5Yzc2NTA4NGI5MjUzMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8BgbPVgZd7w9kogW3HqS7nrMrf2
bM52olONVxuxBO7cqnDzEzx9AZbnZ7QKaAQELvC9Y6x69yKMNHPcWSlmk897xjvb
RO+xX61hAZ5NJG4//m+R8SZFX6TLuqyK9uaawBi11exO15EKiyuiPwXCimfUkXi7
BvDGwdIkXYuwbQ5eP6EcOQNeaFVuG9AM1dHdp4S6fLMDvL7Ivk7+E2OzDIO52v5R
8YWVFRe26s04Hwe4YFJVTBFkvYl/8BlAQcOvhfKnY55JqTBynjhy/S4NKTgSQ3TD
mNCP4pEPUMFWeqlTzRU7q25F9jwEnnQpdjy/bhUSMIEvbpJi6tb5N9nAAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmnLaZhYoFP/DbH2Zx2UIS5JTIUMB8GA1UdIwQY
MBaAFCaI7zc/jwDgHCXPkktPLo7GohnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAt
N2Y3OGEzYmFhN2MxLzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAtN2Y3OGEzYmFhN2Mx
LzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4dSpXXY
7LxSpdj1H2M7fpk846E2+WqMgTCrtcXypA/F1PXqsS6RhZjij1e/WiEKcJseVqb5
/FdXKjTssYOIG0IWsK4WJLYeSWh1zhl1IQfRAsMKU0W7s77RmKmnBj3OrxPSO5rl
wC+1PcYkWyKFTYo1XfxXMvDNiY0OX4QbyiMak3XmS+sb1gCeR22Yv/kUhicKx6eG
iybDAsuW0NFX6sZnZgBsY20Tx78dbmBtbakLkZixLbT/Lgt+WC31vqpFD/jMLZ0/
MT2t/pumscgPbyoiygbAMQB8K2gKDnemHDboeYfZx8ysqdtKJ8LAnQWxPIGN4EK0
0Flq07AesvKtNw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:24 2025 by rpki-client