Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          qACvHvRv0/fULKw6gP9394Zvv6tIYnO2AL2ee9ZhJ5c=
Subject key identifier:   39:1D:93:09:0E:53:D0:E3:6E:D6:63:EE:B6:DE:78:BF:5F:5D:70:A7
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       0197B857B1035A47E33AEF66DCFEB112506B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          10
Signing time:             Sat 28 Jun 2025 21:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 21:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 21:00:43 +0000
Files and hashes:         1: AaqGc6BSfnPK1j4fwRiQ9B5z8Ko.roa (hash: JZb3yca7iWrB+TqkYDnL3xcicD4SCErsZ4tkUL7SBA4=)
                          2: POEM5awQqnF9pX7JYcnF1elwzs8.roa (hash: 49nS3lcR4hsEaPE+EDv7isyh73K9kstaToRtFPQqZA0=)
                          3: hYZifB394Q_fg_dn2DSKA_YIZwA.roa (hash: qAci8Pygint2lrSaNgNslvSojUdYL0XMttlZXK/07DQ=)
                          4: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: VM0LRjxwaSwZheDHik5MAHMNXtxSMvemq7/AlaS2IXk=)
                          5: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:57:b1:03:5a:47:e3:3a:ef:66:dc:fe:b1:12:50:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Jun 28 21:00:43 2025 GMT
            Not After : Jun 29 21:00:43 2025 GMT
        Subject: CN=391d93090e53d0e36ed663eeb6de78bf5f5d70a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:c3:a9:f0:67:8c:e0:8d:99:2d:09:a8:ed:
                    42:2a:f3:a5:d0:b4:b8:49:d6:3f:de:f3:21:31:dc:
                    56:f5:86:67:ca:c9:ed:63:f6:cb:00:69:61:28:62:
                    f2:4a:a6:57:97:47:e3:8f:c2:3e:e9:ff:86:9e:b9:
                    9d:6a:a9:32:a3:d4:c8:22:9b:50:33:03:a6:20:33:
                    86:8d:63:2f:62:e0:52:cb:90:9d:68:6a:7a:b8:53:
                    a8:3f:0b:f1:4b:f4:49:61:3c:8c:8f:28:17:5b:7e:
                    7a:0b:9d:21:8c:14:92:3e:8f:32:71:ad:b9:33:97:
                    d1:9d:f7:95:32:1c:31:8d:77:41:21:15:b0:4b:3e:
                    a6:eb:51:06:6b:5f:3b:92:1d:5f:20:a0:e3:bd:78:
                    15:7e:58:f6:bd:99:2b:db:4e:62:e7:94:96:1b:3e:
                    2c:fa:18:9f:87:76:dc:11:26:ca:8f:ef:a3:b8:aa:
                    f8:ba:d6:4c:a8:7b:ad:95:f6:43:27:5c:8c:18:61:
                    84:00:0c:4b:80:42:b8:b1:11:11:15:3d:74:2d:d5:
                    01:c3:1c:7b:c9:f6:8a:18:79:02:00:58:93:b9:d5:
                    2e:e5:de:85:34:be:d0:95:29:e8:e1:a6:a3:7b:96:
                    b5:e7:9a:cc:b9:fc:01:10:36:96:94:6f:b0:f1:c0:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:93:09:0E:53:D0:E3:6E:D6:63:EE:B6:DE:78:BF:5F:5D:70:A7
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:1a:04:36:2e:ad:18:42:c7:c3:18:48:81:09:66:f3:62:c3:
         22:38:87:fb:bc:4c:3a:3d:d6:0e:9b:a5:f0:14:a1:d4:11:06:
         a3:a4:8c:19:0d:39:4d:b9:72:8a:ba:b8:bc:5f:3a:42:9d:b9:
         34:6c:2d:25:17:00:7f:50:52:94:48:0a:31:4b:46:d0:01:03:
         d2:bd:8e:3b:5c:bf:76:a3:c1:b2:1e:cf:70:88:43:29:82:68:
         b2:f1:92:a7:f7:99:29:8d:75:64:1b:c5:c8:47:7d:ea:37:f0:
         98:69:55:b3:aa:71:71:a8:ef:d8:01:c0:fc:4b:0f:78:52:b2:
         24:79:ce:de:02:ec:34:d1:dc:38:fc:db:e8:97:bc:c8:a6:59:
         a1:c5:02:1b:4c:69:b6:d1:a9:b7:48:c9:38:ce:f4:ea:52:01:
         1c:5c:fb:77:69:a4:98:55:a9:47:81:8a:45:09:51:8b:69:0e:
         c6:1b:c7:60:eb:8c:50:42:53:3b:fe:f1:89:b5:30:9d:71:07:
         dd:c5:5d:4a:5e:63:48:54:db:53:09:02:fb:29:05:c8:70:3e:
         a3:cd:7b:2d:aa:8c:6f:12:0e:7b:43:17:17:33:df:dd:51:e0:
         3f:2c:4e:8c:3c:32:f2:a1:d0:1b:06:44:c9:b5:9d:b9:b9:e8:
         39:0d:b9:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4V7EDWkfjOu9m3P6xElBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw
OTg1ZjEwHhcNMjUwNjI4MjEwMDQzWhcNMjUwNjI5MjEwMDQzWjAzMTEwLwYDVQQD
EygzOTFkOTMwOTBlNTNkMGUzNmVkNjYzZWViNmRlNzhiZjVmNWQ3MGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVnDqfBnjOCNmS0JqO1CKvOl0LS4
SdY/3vMhMdxW9YZnysntY/bLAGlhKGLySqZXl0fjj8I+6f+Gnrmdaqkyo9TIIptQ
MwOmIDOGjWMvYuBSy5CdaGp6uFOoPwvxS/RJYTyMjygXW356C50hjBSSPo8yca25
M5fRnfeVMhwxjXdBIRWwSz6m61EGa187kh1fIKDjvXgVflj2vZkr205i55SWGz4s
+hifh3bcESbKj++juKr4utZMqHutlfZDJ1yMGGGEAAxLgEK4sRERFT10LdUBwxx7
yfaKGHkCAFiTudUu5d6FNL7QlSno4aaje5a155rMufwBEDaWlG+w8cDZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkdkwkOU9DjbtZj7rbeeL9fXXCnMB8GA1UdIwQY
MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt
NDk0NzEzYTk5NjNhLzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh
LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xoENi6t
GELHwxhIgQlm82LDIjiH+7xMOj3WDpul8BSh1BEGo6SMGQ05Tblyirq4vF86Qp25
NGwtJRcAf1BSlEgKMUtG0AED0r2OO1y/dqPBsh7PcIhDKYJosvGSp/eZKY11ZBvF
yEd96jfwmGlVs6pxcajv2AHA/EsPeFKyJHnO3gLsNNHcOPzb6Je8yKZZocUCG0xp
ttGpt0jJOM706lIBHFz7d2mkmFWpR4GKRQlRi2kOxhvHYOuMUEJTO/7xibUwnXEH
3cVdSl5jSFTbUwkC+ykFyHA+o817LaqMbxIOe0MXFzPf3VHgPyxOjDwy8qHQGwZE
ybWdubnoOQ25DA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:39 2025 by rpki-client