Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File:                     Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier:          64Qhyeo3GRmByIGcc7I2sH+YK5tc0LAYTDRDVSNMkQA=
Subject key identifier:   59:FA:FB:8B:94:D4:72:B6:12:7B:5C:F3:49:27:3D:26:06:C1:0A:66
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       01964B5907683C95991EFCFFA76FBF817F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number:          13F9
Signing time:             Sat 19 Apr 2025 00:00:47 +0000
Manifest this update:     Sat 19 Apr 2025 00:00:47 +0000
Manifest next update:     Sun 20 Apr 2025 00:00:47 +0000
Files and hashes:         1: 9fqGagQCaL9MHwqiYLgCAlKltnI.roa (hash: BoPMzB3MdLpYYYjTBd+oogzMIYiLuFwZJGpH1bZ5Vr0=)
                          2: GCtomsNTvimtD6w0xyjU2ZUFcjE.roa (hash: XJ7hu4TR2M0+QkNeH26j5olN/g4SK2uhya5ykeMaklA=)
                          3: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: YRqhvTCeheL0CvcbUO42pN8rA5GdQhI/pAXZScUqn68=)
                          4: LHSJXrq4fzboLah7C-gF4O-Krh4.roa (hash: dXC1M1f4xcsgjz8JdVvS5mt/3DkRXhiljl0W1UwisK8=)
                          5: Qi8od9-5X1sf48lKzwcNnNg6mHM.roa (hash: /syJMd1k0a2wLIgM5pfF31EnkGqqCBO2Z4W2CDpPvuA=)
                          6: Ufr2afGXnfRf4I0gb-jEiflvE4U.roa (hash: M+HA2yRnaGNn/L+MV9quoWf8gGEo+L0udQeBQZgiv0o=)
                          7: VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa (hash: UBuFnXhpXMmhVnBct5Az+Ev2H/iUBQnvBw+Z0vvL/Iw=)
                          8: a-UPHbc06elr_blSu9vS7q86SLw.roa (hash: 5vOUevzZOr+5szST6vxZMIM+U+1SeNXKPgwq9P6XW/E=)
                          9: hBmcTp2jwBhKQHd1_V4COpjCGZE.roa (hash: oguyi/J7KFBmkF5VOhH/4yPV3Css0NdJPTdKuw4u7YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:59:07:68:3c:95:99:1e:fc:ff:a7:6f:bf:81:7f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Apr 19 00:00:47 2025 GMT
            Not After : Apr 20 00:00:47 2025 GMT
        Subject: CN=59fafb8b94d472b6127b5cf349273d2606c10a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:52:cb:07:f9:ee:d9:02:f1:46:8b:09:2b:
                    31:8c:82:da:8f:44:b0:f8:e9:da:5c:bc:89:01:64:
                    bd:e1:02:98:1e:2c:fa:4c:57:6d:8e:6d:82:b6:1f:
                    47:2e:09:a2:67:19:d8:9b:8e:89:3e:c7:3a:3d:07:
                    d7:aa:cd:47:8d:65:f8:cd:a6:7c:4f:26:70:dc:fc:
                    c6:93:c5:1b:0a:49:c0:53:35:8f:cd:a8:94:f8:4c:
                    fa:b6:45:bb:0a:38:4d:10:59:80:4b:19:72:81:89:
                    be:1b:96:4c:39:c5:b0:51:4b:a4:f6:2f:5b:b5:44:
                    5f:ff:ca:9a:9c:80:51:67:55:c2:d5:df:ae:aa:87:
                    8b:73:6c:b4:7f:12:11:6e:76:90:52:85:53:37:11:
                    da:e3:fe:b3:47:b4:82:26:2d:02:37:75:ab:99:39:
                    94:f0:7e:49:5f:76:37:4f:70:55:93:1d:fb:8b:c8:
                    a4:ef:d0:53:21:f0:f5:6c:3b:33:4a:5a:0e:bf:67:
                    5d:11:aa:e2:42:d4:08:fd:43:b1:d8:37:67:52:8e:
                    c8:e1:a6:15:05:fa:2a:28:4d:1d:a7:1d:41:16:79:
                    f8:07:41:07:3d:28:e6:06:22:e5:a1:db:c2:e3:b2:
                    38:39:60:72:7c:11:10:66:5a:22:80:7d:b2:c3:20:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:FB:8B:94:D4:72:B6:12:7B:5C:F3:49:27:3D:26:06:C1:0A:66
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:94:46:98:6b:f9:a8:2f:52:7e:fe:c3:0d:65:fc:db:de:f7:
         68:4b:53:ad:03:45:03:b7:41:79:14:78:c6:80:f3:f2:f5:45:
         f5:03:ae:26:11:77:27:24:48:56:b3:39:bb:47:ea:6d:8c:ff:
         82:91:a3:a2:1d:86:ed:31:1f:02:ca:f6:d0:96:fe:ac:1d:61:
         8f:08:ee:6f:d1:83:4b:6b:98:85:d4:ef:59:50:4d:37:cb:ff:
         62:69:37:36:9a:0d:5a:18:72:39:17:2d:de:fa:ba:0a:98:a3:
         69:37:6c:1b:f2:c6:fc:3a:ac:44:33:ad:c4:3a:63:29:43:b8:
         3e:e1:2c:b6:f3:3f:02:fa:95:82:74:3d:72:77:d1:a1:80:da:
         ec:3c:54:af:01:7d:25:77:80:8b:d5:e3:26:38:8c:8a:27:b9:
         cc:e5:66:57:92:dc:c9:12:e8:d4:6e:1e:2c:23:ae:c8:fc:95:
         c5:cf:1e:90:56:28:64:b0:c7:25:03:80:48:37:f6:6e:38:26:
         47:98:34:3f:db:0c:65:e7:2e:3a:a1:f2:7b:15:27:28:9d:85:
         2f:2f:22:6d:c3:de:59:e1:7d:1f:89:8b:be:ad:2b:28:b0:1d:
         89:ea:9a:cd:de:99:3e:ff:89:e5:1a:bb:b8:17:3f:77:4a:7a:
         c2:66:3f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLWQdoPJWZHvz/p2+/gX8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjUwNDE5MDAwMDQ3WhcNMjUwNDIwMDAwMDQ3WjAzMTEwLwYDVQQD
Eyg1OWZhZmI4Yjk0ZDQ3MmI2MTI3YjVjZjM0OTI3M2QyNjA2YzEwYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3StSywf57tkC8UaLCSsxjILaj0Sw
+OnaXLyJAWS94QKYHiz6TFdtjm2Cth9HLgmiZxnYm46JPsc6PQfXqs1HjWX4zaZ8
TyZw3PzGk8UbCknAUzWPzaiU+Ez6tkW7CjhNEFmASxlygYm+G5ZMOcWwUUuk9i9b
tURf/8qanIBRZ1XC1d+uqoeLc2y0fxIRbnaQUoVTNxHa4/6zR7SCJi0CN3WrmTmU
8H5JX3Y3T3BVkx37i8ik79BTIfD1bDszSloOv2ddEariQtQI/UOx2DdnUo7I4aYV
BfoqKE0dpx1BFnn4B0EHPSjmBiLlodvC47I4OWByfBEQZloigH2ywyCCGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn6+4uU1HK2Entc80knPSYGwQpmMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJRGmGv5
qC9Sfv7DDWX82973aEtTrQNFA7dBeRR4xoDz8vVF9QOuJhF3JyRIVrM5u0fqbYz/
gpGjoh2G7TEfAsr20Jb+rB1hjwjub9GDS2uYhdTvWVBNN8v/Ymk3NpoNWhhyORct
3vq6CpijaTdsG/LG/DqsRDOtxDpjKUO4PuEstvM/AvqVgnQ9cnfRoYDa7DxUrwF9
JXeAi9XjJjiMiie5zOVmV5LcyRLo1G4eLCOuyPyVxc8ekFYoZLDHJQOASDf2bjgm
R5g0P9sMZecuOqHyexUnKJ2FLy8ibcPeWeF9H4mLvq0rKLAdieqazd6ZPv+J5Rq7
uBc/d0p6wmY/TQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:45 2025 by rpki-client