Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File:                     j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier:          qfYLvfGchuyzqCzDxZ2dmeN720SLpOF85gzenrXOyz4=
Subject key identifier:   CE:6F:67:9C:2E:30:73:CD:60:3A:BF:11:69:23:39:83:53:67:A3:88
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer:       /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial:       0196C4CC55751B5F640D0ABC7C73FA03FD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number:          134F
Signing time:             Mon 12 May 2025 14:00:47 +0000
Manifest this update:     Mon 12 May 2025 14:00:47 +0000
Manifest next update:     Tue 13 May 2025 14:00:47 +0000
Files and hashes:         1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=)
                          2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: 1LeHdWXK2COekQuqkbQJQw9tnAW7kp8DqRsYd6K2rrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cc:55:75:1b:5f:64:0d:0a:bc:7c:73:fa:03:fd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
        Validity
            Not Before: May 12 14:00:47 2025 GMT
            Not After : May 13 14:00:47 2025 GMT
        Subject: CN=ce6f679c2e3073cd603abf11692339835367a388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:f3:a9:1d:d7:ae:62:b6:bf:60:7b:2a:3a:
                    6d:85:2d:eb:ed:eb:cd:ee:09:fc:9c:42:bf:cb:fd:
                    d5:f8:ca:62:95:f5:77:5f:9f:b9:6e:ba:93:09:27:
                    be:b2:11:21:64:05:c2:5d:c7:f8:ad:96:a3:31:00:
                    7a:9e:9b:34:19:14:83:71:2e:1c:e0:e2:b3:01:d3:
                    f2:e1:fc:07:db:c4:96:3d:0d:80:35:ed:61:e4:a7:
                    95:43:5a:5a:ae:4e:b1:f5:e6:a8:bd:f5:82:92:6d:
                    f7:4a:ca:8c:01:94:51:fa:67:2b:27:b8:e2:da:6b:
                    c4:30:96:96:eb:e1:68:8a:9a:7c:fb:fd:f3:8e:70:
                    b4:7d:aa:bf:f3:c6:35:df:80:11:00:ef:2b:97:73:
                    95:e3:3d:de:5a:29:a2:55:67:40:54:8b:bf:ec:7c:
                    4c:77:3e:9d:cc:68:a3:62:a5:cf:11:67:82:8d:31:
                    75:86:52:1a:cf:60:03:f3:8c:89:11:82:0c:72:2b:
                    68:e7:f6:c8:de:7b:c3:1a:64:12:e2:e6:1f:78:b8:
                    29:be:f4:a2:18:8a:77:d0:87:aa:8e:9f:03:38:5f:
                    27:82:f2:29:12:58:4c:cf:13:ca:40:ee:49:d5:e8:
                    e8:58:e5:d3:ea:39:84:ac:54:66:2a:a7:3a:35:d1:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6F:67:9C:2E:30:73:CD:60:3A:BF:11:69:23:39:83:53:67:A3:88
            X509v3 Authority Key Identifier:
                keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:00:f7:b8:5b:99:d5:9b:7e:d2:6f:70:b6:65:44:3f:95:78:
         78:b8:fe:dd:19:3c:db:66:57:3f:9f:39:f6:fa:32:a5:d6:2f:
         cd:e3:40:f8:db:af:7c:fe:8e:dd:de:75:08:29:2f:ff:20:33:
         1f:7b:6f:05:16:73:ff:d6:c1:fa:58:f1:59:dc:57:73:f6:48:
         5a:3c:cb:a8:a9:df:f7:7b:27:48:d8:31:c8:87:5d:fa:3b:9f:
         cd:a0:4a:b4:77:08:3b:d2:29:63:1c:af:fa:03:55:dc:89:42:
         27:9c:80:67:27:03:b7:4f:9a:4b:cc:fa:4e:5c:0f:2e:76:23:
         7e:10:10:00:e1:b6:9b:fd:6f:ae:79:64:36:2f:13:99:c9:fd:
         7d:78:e4:c5:a7:44:84:07:ab:9f:74:2c:bf:34:a1:38:8d:06:
         c9:2f:63:fa:2a:83:16:e5:b2:5b:a4:23:00:fc:d4:7c:30:3a:
         ed:4e:f0:c7:ba:ba:f7:cb:22:63:d6:9b:cc:6e:d4:4f:3d:cd:
         bf:d1:93:0e:67:46:82:81:f7:03:f1:db:85:19:4f:aa:36:20:
         8c:a3:90:0c:c4:e0:a5:1e:f1:a9:12:9a:be:8f:a9:51:44:18:
         5c:62:c1:51:b6:05:81:55:7a:64:83:58:3f:6e:14:b1:b6:13:
         f6:09:41:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEzFV1G19kDQq8fHP6A/2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZmRmYWViNWE5NGViMDI3ZWM4MzhhZjUzMGYzYzEwYjM5
YjFjZDkwHhcNMjUwNTEyMTQwMDQ3WhcNMjUwNTEzMTQwMDQ3WjAzMTEwLwYDVQQD
EyhjZTZmNjc5YzJlMzA3M2NkNjAzYWJmMTE2OTIzMzk4MzUzNjdhMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKnzqR3XrmK2v2B7KjpthS3r7evN
7gn8nEK/y/3V+MpilfV3X5+5brqTCSe+shEhZAXCXcf4rZajMQB6nps0GRSDcS4c
4OKzAdPy4fwH28SWPQ2ANe1h5KeVQ1park6x9eaovfWCkm33SsqMAZRR+mcrJ7ji
2mvEMJaW6+Foipp8+/3zjnC0faq/88Y134ARAO8rl3OV4z3eWimiVWdAVIu/7HxM
dz6dzGijYqXPEWeCjTF1hlIaz2AD84yJEYIMcito5/bI3nvDGmQS4uYfeLgpvvSi
GIp30Ieqjp8DOF8ngvIpElhMzxPKQO5J1ejoWOXT6jmErFRmKqc6NdGG5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5vZ5wuMHPNYDq/EWkjOYNTZ6OIMB8GA1UdIwQY
MBaAFI/9+utalOsCfsg4r1MPPBCzmxzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYt
NmZiNGJlZTk5ZTYzLzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYtNmZiNGJlZTk5ZTYz
LzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwD3uFuZ
1Zt+0m9wtmVEP5V4eLj+3Rk822ZXP5859voypdYvzeNA+NuvfP6O3d51CCkv/yAz
H3tvBRZz/9bB+ljxWdxXc/ZIWjzLqKnf93snSNgxyIdd+jufzaBKtHcIO9IpYxyv
+gNV3IlCJ5yAZycDt0+aS8z6TlwPLnYjfhAQAOG2m/1vrnlkNi8Tmcn9fXjkxadE
hAern3QsvzShOI0GyS9j+iqDFuWyW6QjAPzUfDA67U7wx7q698siY9abzG7UTz3N
v9GTDmdGgoH3A/HbhRlPqjYgjKOQDMTgpR7xqRKavo+pUUQYXGLBUbYFgVV6ZINY
P24UsbYT9glBTw==
-----END CERTIFICATE-----
Generated at Mon May 12 19:06:10 2025 by rpki-client