Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
File:                     jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json)
Hash identifier:          zpXGQ33ON+yWZAAOXGBU6TQq1NTrYHCFxA4jQpZy2Vs=
Subject key identifier:   58:ED:98:33:C1:37:B3:C8:2D:0E:66:56:B3:1F:D0:EC:66:6A:E0:DE
Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
Certificate issuer:       /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Certificate serial:       01960C43E0BC57C26E419527307518CBB5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
Manifest number:          0231
Signing time:             Sun 06 Apr 2025 18:01:37 +0000
Manifest this update:     Sun 06 Apr 2025 18:01:37 +0000
Manifest next update:     Mon 07 Apr 2025 18:01:37 +0000
Files and hashes:         1: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: 6BcGEhaKDtrLt1ARAjbO8u/FyRa5TjxXag+IL+/LthY=)
                          2: x_n8t7M8D_Bv99KviCzCearCTfY.roa (hash: 6UUSvMuuFuiYjyRFMf2UhzrLvu7QDsz9ziOkSElPsPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0c:43:e0:bc:57:c2:6e:41:95:27:30:75:18:cb:b5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
        Validity
            Not Before: Apr  6 18:01:37 2025 GMT
            Not After : Apr  7 18:01:37 2025 GMT
        Subject: CN=58ed9833c137b3c82d0e6656b31fd0ec666ae0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:e8:32:88:6a:1b:c7:71:9a:14:f4:43:bf:
                    ea:58:aa:22:18:c3:d3:cf:5e:4d:19:b1:e0:27:69:
                    38:8b:b1:e5:55:73:26:ec:4c:c4:3d:51:cd:79:bd:
                    f2:68:c2:f2:5e:be:1c:92:d8:8c:8b:26:59:cf:fa:
                    1e:6a:fc:ca:ed:5a:15:a2:90:6e:8f:4e:25:da:31:
                    f4:33:9b:0d:57:6d:bf:0f:c3:70:96:26:03:44:28:
                    ad:ca:af:c3:1b:d5:e7:28:3b:6f:ef:ff:f7:e7:33:
                    5d:e1:22:30:34:e5:c3:e9:22:45:06:9c:f2:91:9f:
                    9f:67:4a:5d:f8:2c:5d:e1:8c:60:d7:6d:9e:6b:8b:
                    1d:83:2b:64:00:61:f4:69:e5:c2:d2:85:cc:31:bc:
                    8b:d9:11:35:73:8d:cd:fe:ef:af:a7:81:4a:2a:33:
                    7e:c4:3f:1b:ac:0c:9d:c7:d9:2e:22:39:02:52:ec:
                    84:a7:2e:29:02:78:73:15:dc:04:31:00:f8:14:73:
                    26:45:32:b3:df:27:71:62:71:5c:17:0e:55:f1:3b:
                    1c:75:22:83:39:83:84:ac:71:3f:f4:f5:82:94:0d:
                    d6:7f:3e:82:48:1e:e6:ce:b5:0e:63:13:02:0f:b5:
                    aa:0c:c0:a4:8f:ec:6f:6a:45:a1:69:23:c2:af:33:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:ED:98:33:C1:37:B3:C8:2D:0E:66:56:B3:1F:D0:EC:66:6A:E0:DE
            X509v3 Authority Key Identifier:
                keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ba:f1:95:23:90:0e:3d:2f:c0:5a:bf:ff:db:89:1a:60:7a:
         bd:eb:fc:a7:57:8a:96:bd:d3:c9:c3:75:47:1d:10:60:b7:6b:
         17:06:23:a0:36:1b:54:c5:42:b4:94:4e:06:8c:a3:16:a7:10:
         f0:26:ef:b5:9b:59:55:a2:5e:1e:5e:50:4e:9e:23:ac:0f:df:
         1b:c8:f6:a9:f7:30:d4:25:ba:b1:8a:9d:a8:3d:06:03:4e:2f:
         8b:b5:07:54:84:25:e6:55:cb:8b:b5:9b:66:4e:42:21:db:e9:
         34:84:40:d7:80:7e:a1:22:8d:cb:33:74:27:a7:c2:53:01:bf:
         ca:d5:4d:f4:af:74:3c:eb:9f:aa:d2:7d:fe:c7:02:6f:a7:71:
         e4:7e:a7:ee:9c:a1:94:a7:2c:ca:d9:a0:6e:bf:f0:8b:85:9c:
         fa:31:bf:f8:99:3a:f2:0e:c7:22:73:fc:1b:0f:a9:73:7c:ca:
         50:bc:77:9c:a6:fc:a4:fb:d2:9e:22:82:65:6c:30:db:79:ee:
         4e:a1:9d:ec:dc:73:82:62:90:d9:47:83:06:44:65:9a:a8:5e:
         25:e1:f5:ab:39:e5:7b:55:cc:b2:55:5f:90:fe:8c:35:19:40:
         02:54:1f:9a:b8:7c:e3:0e:27:67:fa:58:6d:8e:a7:13:24:94:
         6d:b3:95:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYMQ+C8V8JuQZUnMHUYy7XhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWY0ZTgyZGJhODAyMzk5OWVmYmRhZDM0YjI3MWExZjQ4
OTJlOWUwHhcNMjUwNDA2MTgwMTM3WhcNMjUwNDA3MTgwMTM3WjAzMTEwLwYDVQQD
Eyg1OGVkOTgzM2MxMzdiM2M4MmQwZTY2NTZiMzFmZDBlYzY2NmFlMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnzoMohqG8dxmhT0Q7/qWKoiGMPT
z15NGbHgJ2k4i7HlVXMm7EzEPVHNeb3yaMLyXr4cktiMiyZZz/oeavzK7VoVopBu
j04l2jH0M5sNV22/D8NwliYDRCityq/DG9XnKDtv7//35zNd4SIwNOXD6SJFBpzy
kZ+fZ0pd+Cxd4Yxg122ea4sdgytkAGH0aeXC0oXMMbyL2RE1c43N/u+vp4FKKjN+
xD8brAydx9kuIjkCUuyEpy4pAnhzFdwEMQD4FHMmRTKz3ydxYnFcFw5V8TscdSKD
OYOErHE/9PWClA3Wfz6CSB7mzrUOYxMCD7WqDMCkj+xvakWhaSPCrzMa9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjtmDPBN7PILQ5mVrMf0OxmauDeMB8GA1UdIwQY
MBaAFI2fToLbqAI5me+9rTSycaH0iS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMt
ZmJkOWZlYjBmMTNjLzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMtZmJkOWZlYjBmMTNj
LzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbrxlSOQ
Dj0vwFq//9uJGmB6vev8p1eKlr3TycN1Rx0QYLdrFwYjoDYbVMVCtJROBoyjFqcQ
8CbvtZtZVaJeHl5QTp4jrA/fG8j2qfcw1CW6sYqdqD0GA04vi7UHVIQl5lXLi7Wb
Zk5CIdvpNIRA14B+oSKNyzN0J6fCUwG/ytVN9K90POufqtJ9/scCb6dx5H6n7pyh
lKcsytmgbr/wi4Wc+jG/+Jk68g7HInP8Gw+pc3zKULx3nKb8pPvSniKCZWww23nu
TqGd7NxzgmKQ2UeDBkRlmqheJeH1qznle1XMslVfkP6MNRlAAlQfmrh84w4nZ/pY
bY6nEySUbbOVtA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:16 2025 by rpki-client