Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          wQZ31E5xqsZoBLQNpAbFeUxJjBq1IvF8GmaiS9CugK4=
Subject key identifier:   3F:5A:0A:54:05:85:BC:03:AA:2B:9D:0A:55:D5:4D:72:7A:72:4F:E1
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       01963A9BE35A81309525DD6ACE89BDD13F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          14EF
Signing time:             Tue 15 Apr 2025 18:00:16 +0000
Manifest this update:     Tue 15 Apr 2025 18:00:16 +0000
Manifest next update:     Wed 16 Apr 2025 18:00:16 +0000
Files and hashes:         1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: M78hN/t2y/cGqZSW8am8P0s2Flti1osFlpHpTq7VoDE=)
                          2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3a:9b:e3:5a:81:30:95:25:dd:6a:ce:89:bd:d1:3f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Apr 15 18:00:16 2025 GMT
            Not After : Apr 16 18:00:16 2025 GMT
        Subject: CN=3f5a0a540585bc03aa2b9d0a55d54d727a724fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:f5:b3:2a:ff:ba:c1:19:07:26:4b:83:e9:
                    f9:50:37:c7:04:6f:27:03:06:97:5f:64:3e:7d:06:
                    d1:87:a7:c9:cd:f5:bb:76:03:ef:da:53:a6:b2:70:
                    39:a7:c5:fd:f2:96:77:12:a4:c4:93:43:72:f2:52:
                    e6:75:7c:0f:e5:96:44:6f:ec:18:fd:5e:bc:94:24:
                    1b:f4:19:80:a1:b7:ab:9d:54:e2:82:b1:b0:8b:38:
                    10:a8:00:02:83:fd:08:02:5d:ed:e5:e0:5a:63:92:
                    b0:55:54:3b:1e:0c:c3:12:4d:3e:77:79:17:94:1e:
                    6c:e6:14:d4:73:22:2a:89:e9:f4:b6:19:d1:d3:9c:
                    04:dd:6f:6d:e5:1d:5f:b8:5f:02:19:12:05:57:31:
                    12:7b:fc:b7:5a:46:b4:5e:30:dc:7b:17:04:f6:58:
                    5e:c3:78:c5:97:8f:38:93:67:79:35:19:bf:dc:9b:
                    81:51:a0:85:37:07:29:62:72:bd:8c:0d:02:e4:59:
                    3d:7e:66:3f:83:8a:7b:75:62:3e:f8:55:5a:a8:db:
                    cc:f4:0c:2a:e0:43:22:e6:94:d0:d5:c4:75:ec:0c:
                    3e:52:31:6a:c5:fd:08:41:26:47:12:7e:4c:8e:54:
                    45:ab:1f:9e:01:ec:3b:2d:53:97:56:a5:61:bb:58:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5A:0A:54:05:85:BC:03:AA:2B:9D:0A:55:D5:4D:72:7A:72:4F:E1
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:96:e1:29:62:a9:98:23:45:46:29:2a:32:3c:a6:69:26:
         cc:98:fe:63:bf:54:b6:f6:4f:d0:aa:20:9d:b1:f4:5c:52:b2:
         2e:a4:0f:8f:2c:80:95:2a:a2:d9:d6:9d:51:c9:9d:7b:44:77:
         d7:4e:c9:d6:e9:41:28:a7:da:2b:42:52:32:f8:6d:1e:4e:6e:
         21:63:b8:d9:d5:1b:41:a8:6b:6c:31:c3:4c:86:22:59:5b:6b:
         47:4a:9a:b6:0a:4e:92:c7:31:10:fa:00:25:1f:af:a2:09:b7:
         7c:8a:b2:fd:dd:ca:7b:01:f9:a0:61:55:64:4b:80:1b:37:81:
         42:0d:f2:5e:c5:b2:3f:c1:bf:c8:49:fe:b6:3e:3e:b5:c4:27:
         49:13:3f:0d:43:5e:d8:cf:6a:5d:56:86:0a:e3:7c:3f:07:01:
         62:f4:8c:74:21:a0:e0:03:98:81:8b:c0:e5:27:e4:cd:bd:7f:
         f1:eb:49:07:d8:b5:4c:80:2f:c3:8c:8c:9d:18:6b:80:81:a6:
         20:9b:72:87:01:87:67:d8:bb:99:db:42:1b:fa:ae:e2:ba:8c:
         21:6c:11:37:31:bf:4c:90:ce:4c:4c:d6:32:29:88:9f:d2:1e:
         6a:95:93:42:a8:0c:b4:81:da:bf:71:8c:5f:e5:32:3d:5b:c4:
         d6:6e:3f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY6m+NagTCVJd1qzom90T9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YjljZWIxMGMyYzhjMDBkMTYwOTk2MDNjYzExYmVkMDA1
NDdiZTYwHhcNMjUwNDE1MTgwMDE2WhcNMjUwNDE2MTgwMDE2WjAzMTEwLwYDVQQD
EygzZjVhMGE1NDA1ODViYzAzYWEyYjlkMGE1NWQ1NGQ3MjdhNzI0ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo/1syr/usEZByZLg+n5UDfHBG8n
AwaXX2Q+fQbRh6fJzfW7dgPv2lOmsnA5p8X98pZ3EqTEk0Ny8lLmdXwP5ZZEb+wY
/V68lCQb9BmAobernVTigrGwizgQqAACg/0IAl3t5eBaY5KwVVQ7HgzDEk0+d3kX
lB5s5hTUcyIqien0thnR05wE3W9t5R1fuF8CGRIFVzESe/y3Wka0XjDcexcE9lhe
w3jFl484k2d5NRm/3JuBUaCFNwcpYnK9jA0C5Fk9fmY/g4p7dWI++FVaqNvM9Awq
4EMi5pTQ1cR17Aw+UjFqxf0IQSZHEn5MjlRFqx+eAew7LVOXVqVhu1jyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9aClQFhbwDqiudClXVTXJ6ck/hMB8GA1UdIwQY
MBaAFCa5zrEMLIwA0WCZYDzBG+0AVHvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUt
YjYxMDU2ODQ2NmIzLzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUtYjYxMDU2ODQ2NmIz
LzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8iW4Sli
qZgjRUYpKjI8pmkmzJj+Y79UtvZP0KognbH0XFKyLqQPjyyAlSqi2dadUcmde0R3
107J1ulBKKfaK0JSMvhtHk5uIWO42dUbQahrbDHDTIYiWVtrR0qatgpOkscxEPoA
JR+vogm3fIqy/d3KewH5oGFVZEuAGzeBQg3yXsWyP8G/yEn+tj4+tcQnSRM/DUNe
2M9qXVaGCuN8PwcBYvSMdCGg4AOYgYvA5Sfkzb1/8etJB9i1TIAvw4yMnRhrgIGm
IJtyhwGHZ9i7mdtCG/qu4rqMIWwRNzG/TJDOTEzWMimIn9IeapWTQqgMtIHav3GM
X+UyPVvE1m4/0A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:55:49 2025 by rpki-client