Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File:                     jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier:          8WCvZcCpR7NVuYOja3YrfEeWBQlqxl0za6R/sEdSFXE=
Subject key identifier:   E3:E9:02:5D:56:B5:44:C0:F0:56:15:0E:5F:53:70:08:AC:E4:C8:9F
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer:       /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial:       01984A0A4D0F23344C4121F85B9198D23D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number:          14B5
Signing time:             Sun 27 Jul 2025 04:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:45 +0000
Files and hashes:         1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: di6qoee1/VvEzJSybXHT3s2X5pSUk6abylM0GKDvbic=)
                          2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:4d:0f:23:34:4c:41:21:f8:5b:91:98:d2:3d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
        Validity
            Not Before: Jul 27 04:00:45 2025 GMT
            Not After : Jul 28 04:00:45 2025 GMT
        Subject: CN=e3e9025d56b544c0f056150e5f537008ace4c89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:59:db:10:36:69:1f:9d:b7:63:b7:ad:8f:
                    fa:f5:b0:54:fd:1a:91:6d:fa:2b:3c:05:c5:46:0e:
                    1c:f7:6d:0f:1a:2e:ac:00:60:be:eb:9f:39:01:d9:
                    a4:ee:42:e0:a1:e8:0e:7d:90:c2:34:c2:1e:7a:41:
                    3c:9c:7b:73:b1:19:9b:06:c7:1b:04:c7:6e:23:f1:
                    14:9d:6b:3b:87:4b:b4:a3:e2:db:f8:ea:a2:2a:1a:
                    2e:1b:1d:6b:c0:cb:74:e3:60:f0:e5:32:3a:85:a2:
                    26:3d:87:62:6c:63:ac:b9:13:ec:f1:ee:d1:ee:5d:
                    af:60:99:76:7d:99:43:f0:b0:44:74:54:9b:ef:5c:
                    b0:52:5f:9e:c9:90:13:f8:16:22:17:e2:a2:55:76:
                    f1:25:9c:88:4c:3e:69:6b:8a:30:78:2e:cd:02:8b:
                    74:23:8d:60:84:28:58:66:45:e1:b1:86:59:bf:19:
                    7c:2a:b3:e8:02:02:62:23:a2:48:3c:d2:b9:f4:82:
                    f6:e3:d0:4e:74:29:10:24:0c:ff:3e:4f:a3:ab:bb:
                    b0:d8:58:f9:e3:4d:31:13:ea:20:46:85:c6:c9:01:
                    33:cb:50:01:58:dd:2b:cd:b1:74:7a:98:74:00:70:
                    5b:d6:46:e5:da:bc:14:ec:92:ab:4d:5f:26:4f:99:
                    30:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E9:02:5D:56:B5:44:C0:F0:56:15:0E:5F:53:70:08:AC:E4:C8:9F
            X509v3 Authority Key Identifier:
                keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:ee:d8:ef:79:24:69:00:27:68:76:a8:1e:55:1c:fb:03:
         c1:98:d4:88:2d:47:82:89:a1:60:89:23:ee:08:40:5d:2b:ab:
         09:4a:3d:bc:65:83:41:f8:96:b4:51:ca:63:eb:c3:52:39:e7:
         b0:da:37:d5:c8:2c:93:49:1f:f4:25:6a:4c:ec:f3:e5:10:88:
         f3:f1:ef:a6:df:4a:ea:1a:75:b0:58:98:f2:da:f1:0b:d7:1b:
         64:f8:6c:bb:b4:3c:c4:7a:4a:51:65:f2:03:34:50:90:d9:1c:
         b0:7c:cf:25:29:c2:3c:a4:4f:0b:81:1d:a4:45:13:73:97:8f:
         51:42:ba:3d:cf:75:86:bb:5b:4f:8d:a4:f1:9f:43:9c:02:ac:
         80:f5:20:ed:e7:be:f9:a8:38:1e:93:ca:69:ee:89:80:fb:41:
         75:16:19:66:76:d4:c8:e0:95:c2:f6:e1:34:b3:c0:28:02:da:
         f3:1e:cd:91:74:0d:6e:ed:92:60:11:a2:dc:8f:a8:77:96:7e:
         08:25:bf:81:52:59:b8:a6:0a:72:33:c2:cb:2d:61:e9:ff:98:
         17:72:0b:ad:0e:5c:8b:d1:be:b3:4e:ab:2b:63:46:c0:9f:ff:
         24:ed:9b:8a:e4:73:3e:c3:df:81:a5:be:ba:56:95:09:3c:f3:
         f5:28:fb:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCk0PIzRMQSH4W5GY0j0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4
YWQwYTgwHhcNMjUwNzI3MDQwMDQ1WhcNMjUwNzI4MDQwMDQ1WjAzMTEwLwYDVQQD
EyhlM2U5MDI1ZDU2YjU0NGMwZjA1NjE1MGU1ZjUzNzAwOGFjZTRjODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu91Z2xA2aR+dt2O3rY/69bBU/RqR
bforPAXFRg4c920PGi6sAGC+6585Admk7kLgoegOfZDCNMIeekE8nHtzsRmbBscb
BMduI/EUnWs7h0u0o+Lb+OqiKhouGx1rwMt042Dw5TI6haImPYdibGOsuRPs8e7R
7l2vYJl2fZlD8LBEdFSb71ywUl+eyZAT+BYiF+KiVXbxJZyITD5pa4oweC7NAot0
I41ghChYZkXhsYZZvxl8KrPoAgJiI6JIPNK59IL249BOdCkQJAz/Pk+jq7uw2Fj5
400xE+ogRoXGyQEzy1ABWN0rzbF0eph0AHBb1kbl2rwU7JKrTV8mT5kwjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPpAl1WtUTA8FYVDl9TcAis5MifMB8GA1UdIwQY
MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt
M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi
LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOLu2O95
JGkAJ2h2qB5VHPsDwZjUiC1HgomhYIkj7ghAXSurCUo9vGWDQfiWtFHKY+vDUjnn
sNo31cgsk0kf9CVqTOzz5RCI8/Hvpt9K6hp1sFiY8trxC9cbZPhsu7Q8xHpKUWXy
AzRQkNkcsHzPJSnCPKRPC4EdpEUTc5ePUUK6Pc91hrtbT42k8Z9DnAKsgPUg7ee+
+ag4HpPKae6JgPtBdRYZZnbUyOCVwvbhNLPAKALa8x7NkXQNbu2SYBGi3I+od5Z+
CCW/gVJZuKYKcjPCyy1h6f+YF3ILrQ5ci9G+s06rK2NGwJ//JO2biuRzPsPfgaW+
ulaVCTzz9Sj7hw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:35 2025 by rpki-client