Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File:                     jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier:          vOlkf/Erb//yMZHSipNOY/VLr0lvxErd9gjMEX5rjv0=
Subject key identifier:   D9:70:06:27:5B:20:41:42:DE:52:67:55:0F:53:4F:DA:31:C3:39:08
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer:       /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial:       01964DEBFC82F622ADC485325644E20EF1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number:          0A02
Signing time:             Sat 19 Apr 2025 12:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:33 +0000
Files and hashes:         1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: T6vCkqwgWiLQY7jLTfApmHf1bvMkOHHa2nAPxmi6/X4=)
                          2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:eb:fc:82:f6:22:ad:c4:85:32:56:44:e2:0e:f1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
        Validity
            Not Before: Apr 19 12:00:33 2025 GMT
            Not After : Apr 20 12:00:33 2025 GMT
        Subject: CN=d97006275b204142de5267550f534fda31c33908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:24:e4:e9:01:93:19:22:69:d8:ad:5b:60:
                    63:bf:8e:7a:06:73:8e:51:d3:02:7e:59:32:b6:2d:
                    e0:33:ea:78:76:d9:e6:44:68:f8:4e:bd:9b:fb:fc:
                    f8:03:1e:b5:b9:eb:35:9a:ec:3e:dd:ab:fd:b8:bb:
                    69:e2:a3:61:be:63:3b:be:be:38:2a:87:5e:c7:2b:
                    19:8a:27:e9:64:9d:02:b6:ab:30:a9:b2:ae:fc:93:
                    88:8e:1b:84:a6:37:81:1b:e4:63:ec:b9:94:e8:7e:
                    c3:28:ef:af:4b:80:3b:5c:e4:31:0e:18:be:30:09:
                    b2:be:e0:31:65:45:ca:92:d3:da:3c:22:73:f8:a7:
                    b8:87:4b:a1:c6:9f:f4:eb:98:96:2e:b5:79:42:e3:
                    43:9c:75:66:65:6e:fc:1b:14:11:70:87:bf:f6:d6:
                    a5:8b:55:34:f2:bc:77:89:d2:1e:20:9d:e5:87:ab:
                    81:3e:89:aa:5c:d8:fe:06:40:a5:33:a6:fc:52:62:
                    0a:cc:cf:5f:c2:34:bf:15:2f:16:00:b6:f2:67:31:
                    12:3e:a9:37:5c:c9:ff:aa:89:53:fd:11:c0:b2:17:
                    2a:1e:00:a3:70:d0:c6:77:90:69:f0:4d:df:8e:6c:
                    64:8e:3b:47:15:7f:6c:9e:c0:4e:89:bb:1b:07:73:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:06:27:5B:20:41:42:DE:52:67:55:0F:53:4F:DA:31:C3:39:08
            X509v3 Authority Key Identifier:
                keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:0b:45:c5:2b:d6:85:f0:b4:5c:1c:61:f0:45:77:a3:29:
         4e:39:42:8d:a0:26:27:e6:b6:a2:e1:8a:b0:7a:d2:41:20:fc:
         5c:31:11:00:4e:ed:93:2b:dc:63:8d:1b:c7:7b:03:42:54:08:
         da:49:51:5a:59:2b:51:51:14:18:8b:cf:dc:c6:24:6a:fb:f1:
         81:3e:18:3c:3a:56:e3:2b:8f:90:f5:4f:2e:c8:58:f0:a9:63:
         5a:f8:71:f9:0d:5f:81:4f:b5:b1:e0:6d:8d:9f:7d:54:bb:09:
         d0:8e:fe:0f:7e:88:82:cf:6f:36:ef:84:c9:8d:4e:09:1b:4c:
         7f:49:4e:f8:39:e4:25:28:ba:40:ad:5b:6a:67:42:00:1b:d3:
         16:ba:6b:d1:e6:5c:6a:b2:a0:b3:27:92:3c:e9:1d:d9:ed:8d:
         d2:6d:f4:75:07:fc:70:c3:94:30:cc:11:23:a4:00:8d:dd:62:
         cf:97:d7:c3:7c:dc:ee:64:dd:7b:ec:74:1d:55:9b:b9:82:76:
         ee:0e:41:0f:9f:62:88:a3:ef:f1:df:c3:bf:3d:07:f9:04:82:
         06:f0:bf:bc:59:e2:0f:30:da:ba:b1:cb:94:37:fd:2f:36:f6:
         df:cb:3f:b1:4e:42:17:02:cf:b6:89:ea:e2:82:28:d9:10:00:
         01:e7:8f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN6/yC9iKtxIUyVkTiDvGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2NlZDMwYjI4NTJlNTUyYzc4Mzc0NjcwMDNmMTc1ZWE1
OWRlNzMwHhcNMjUwNDE5MTIwMDMzWhcNMjUwNDIwMTIwMDMzWjAzMTEwLwYDVQQD
EyhkOTcwMDYyNzViMjA0MTQyZGU1MjY3NTUwZjUzNGZkYTMxYzMzOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sQk5OkBkxkiaditW2Bjv456BnOO
UdMCflkyti3gM+p4dtnmRGj4Tr2b+/z4Ax61ues1muw+3av9uLtp4qNhvmM7vr44
KodexysZiifpZJ0CtqswqbKu/JOIjhuEpjeBG+Rj7LmU6H7DKO+vS4A7XOQxDhi+
MAmyvuAxZUXKktPaPCJz+Ke4h0uhxp/065iWLrV5QuNDnHVmZW78GxQRcIe/9tal
i1U08rx3idIeIJ3lh6uBPomqXNj+BkClM6b8UmIKzM9fwjS/FS8WALbyZzESPqk3
XMn/qolT/RHAshcqHgCjcNDGd5Bp8E3fjmxkjjtHFX9snsBOibsbB3PCuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlwBidbIEFC3lJnVQ9TT9oxwzkIMB8GA1UdIwQY
MBaAFI887TCyhS5VLHg3RnAD8XXqWd5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kZjllMmQtYTAzMy00MGMwLWEwMGYt
ZTM0NGZkYjcyMmEzLzEvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kZjllMmQtYTAzMy00MGMwLWEwMGYtZTM0NGZkYjcyMmEz
LzEvanp6dE1MS0ZMbFVzZURkR2NBUHhkZXBaM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0ALRcUr
1oXwtFwcYfBFd6MpTjlCjaAmJ+a2ouGKsHrSQSD8XDERAE7tkyvcY40bx3sDQlQI
2klRWlkrUVEUGIvP3MYkavvxgT4YPDpW4yuPkPVPLshY8KljWvhx+Q1fgU+1seBt
jZ99VLsJ0I7+D36Igs9vNu+EyY1OCRtMf0lO+DnkJSi6QK1bamdCABvTFrpr0eZc
arKgsyeSPOkd2e2N0m30dQf8cMOUMMwRI6QAjd1iz5fXw3zc7mTde+x0HVWbuYJ2
7g5BD59iiKPv8d/Dvz0H+QSCBvC/vFniDzDaurHLlDf9Lzb238s/sU5CFwLPtonq
4oIo2RAAAeePKg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:39 2025 by rpki-client