Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File:                     jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier:          9kn5OcCTcSZOC1R6OXFxXHT5NI4CIcelsV/pMxBBBQk=
Subject key identifier:   F0:06:D3:90:55:9E:0A:58:BD:F6:3B:B3:31:92:52:EC:67:D0:5E:74
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer:       /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial:       0197458B63D56C71BF11DC99D46B6DBE4EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number:          0C39
Signing time:             Fri 06 Jun 2025 14:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:52 +0000
Files and hashes:         1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
                          2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: OU5rlIWCxglj6HzuqY8mtVGpS/lS5RrCgnnOfwYT4Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:63:d5:6c:71:bf:11:dc:99:d4:6b:6d:be:4e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
        Validity
            Not Before: Jun  6 14:00:52 2025 GMT
            Not After : Jun  7 14:00:52 2025 GMT
        Subject: CN=f006d390559e0a58bdf63bb3319252ec67d05e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:82:f9:2c:b8:9f:85:8e:0d:41:3e:19:6b:
                    13:c3:ba:8b:ac:b6:40:44:cb:ae:b0:a9:09:05:3f:
                    aa:47:0a:65:2d:6f:a5:0e:06:6d:fa:dc:6d:d8:33:
                    7e:93:d3:6b:37:f8:e5:9f:48:9b:9a:c5:c3:40:9d:
                    1d:60:ce:8c:d1:75:3b:68:b9:1e:78:cb:14:5c:21:
                    1f:32:cd:c1:63:47:e5:d1:6a:ee:8f:a2:3d:39:9d:
                    a1:1f:79:1a:6a:5c:48:07:4d:f2:4a:c3:83:77:b3:
                    e2:9f:42:f0:15:a9:c0:74:3d:5d:18:3c:9f:16:f5:
                    ba:c0:34:f6:65:3b:0c:7a:4f:5b:79:26:ff:74:35:
                    f4:21:a5:a4:cc:fd:90:51:f9:90:af:f2:4b:67:51:
                    86:81:cf:09:ae:2d:fe:e6:42:db:ae:63:89:c4:57:
                    11:bf:5e:dd:68:02:f2:83:1e:09:4b:02:d4:54:0c:
                    b6:55:4d:56:60:04:ac:22:94:91:3a:f7:b5:84:b9:
                    d8:85:69:66:87:d0:04:5f:00:af:4b:85:b0:65:f2:
                    51:25:56:69:73:5d:7d:cd:e2:5a:86:7a:9a:96:cf:
                    28:63:b4:fb:67:ba:b4:c8:5b:1b:ac:ef:c5:7b:0a:
                    12:6c:4d:c3:35:a9:ce:3c:b4:79:df:db:bb:8c:48:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:D3:90:55:9E:0A:58:BD:F6:3B:B3:31:92:52:EC:67:D0:5E:74
            X509v3 Authority Key Identifier:
                keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a2:ef:35:0c:a6:21:c9:b1:6c:df:64:ce:6f:d6:a8:e2:2a:
         ec:c9:e4:f7:3a:23:b1:88:d2:26:3b:0b:1f:1f:8b:b5:0e:ea:
         63:58:8a:f5:bc:3a:a5:c2:70:47:a2:3e:c5:e2:44:49:ca:8d:
         74:17:a0:3a:49:f3:f5:53:8d:91:16:d4:32:ac:00:9b:8b:5b:
         1a:d0:34:46:01:57:b0:f2:f7:0e:63:6a:f7:03:e5:51:fe:b5:
         32:fa:5b:82:4c:b5:7e:f6:f0:84:93:3b:72:bf:9f:23:30:64:
         c6:75:cb:01:4b:a4:ee:07:02:4b:d3:94:71:17:83:e7:8f:1c:
         32:18:ce:c7:9e:f1:c9:55:7a:35:90:f3:40:97:55:02:f3:34:
         21:9d:87:d6:43:89:a2:6d:df:32:4f:49:b1:81:35:22:f3:da:
         8c:01:e1:25:a6:d9:c9:30:90:b5:c2:c5:a2:ad:b1:09:d5:07:
         cc:c2:ce:96:61:a7:a2:bc:7c:63:06:ca:b3:1c:8e:6c:7e:e5:
         4d:17:d8:a9:80:9a:07:8c:9d:17:66:59:6d:00:78:d8:64:a7:
         9f:c1:fe:74:34:b2:28:52:11:56:6a:fa:6a:82:47:a4:06:27:
         b4:15:4b:78:5a:69:e7:0c:08:5d:cf:b4:7c:60:cb:1c:ad:d9:
         59:3e:55:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFi2PVbHG/EdyZ1Gttvk65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODE2NDhhZmMzNGNlMTkxNDM3NTE2Y2RkYzRiZjBkY2Rm
NDdlM2IwHhcNMjUwNjA2MTQwMDUyWhcNMjUwNjA3MTQwMDUyWjAzMTEwLwYDVQQD
EyhmMDA2ZDM5MDU1OWUwYTU4YmRmNjNiYjMzMTkyNTJlYzY3ZDA1ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC+C+Sy4n4WODUE+GWsTw7qLrLZA
RMuusKkJBT+qRwplLW+lDgZt+txt2DN+k9NrN/jln0ibmsXDQJ0dYM6M0XU7aLke
eMsUXCEfMs3BY0fl0Wruj6I9OZ2hH3kaalxIB03ySsODd7Pin0LwFanAdD1dGDyf
FvW6wDT2ZTsMek9beSb/dDX0IaWkzP2QUfmQr/JLZ1GGgc8Jri3+5kLbrmOJxFcR
v17daALygx4JSwLUVAy2VU1WYASsIpSROve1hLnYhWlmh9AEXwCvS4WwZfJRJVZp
c119zeJahnqals8oY7T7Z7q0yFsbrO/FewoSbE3DNanOPLR539u7jEiHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAG05BVngpYvfY7szGSUuxn0F50MB8GA1UdIwQY
MBaAFIyBZIr8NM4ZFDdRbN3Evw3N9H47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYt
YmRhNTM0ZTZmNjQzLzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYtYmRhNTM0ZTZmNjQz
LzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaLvNQym
IcmxbN9kzm/WqOIq7Mnk9zojsYjSJjsLHx+LtQ7qY1iK9bw6pcJwR6I+xeJEScqN
dBegOknz9VONkRbUMqwAm4tbGtA0RgFXsPL3DmNq9wPlUf61Mvpbgky1fvbwhJM7
cr+fIzBkxnXLAUuk7gcCS9OUcReD548cMhjOx57xyVV6NZDzQJdVAvM0IZ2H1kOJ
om3fMk9JsYE1IvPajAHhJabZyTCQtcLFoq2xCdUHzMLOlmGnorx8YwbKsxyObH7l
TRfYqYCaB4ydF2ZZbQB42GSnn8H+dDSyKFIRVmr6aoJHpAYntBVLeFpp5wwIXc+0
fGDLHK3ZWT5Vgg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:31 2025 by rpki-client