Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File:                     JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier:          nRo0OL3j4kWU/6Hw+3gp5iX1HF+WxWjBg6+WI+SqF24=
Subject key identifier:   E5:9F:CB:32:E0:A1:D1:BF:71:5A:1D:50:00:F1:7F:4A:6D:FC:A0:09
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer:       /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial:       019759122C60452D2B6D21CDC55E43D047E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number:          1065
Signing time:             Tue 10 Jun 2025 09:00:52 +0000
Manifest this update:     Tue 10 Jun 2025 09:00:52 +0000
Manifest next update:     Wed 11 Jun 2025 09:00:52 +0000
Files and hashes:         1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
                          2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: kZoocSnXKrK2w4UbAe+GwAqzLRiQYrcAA4TEAr6u3ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:2c:60:45:2d:2b:6d:21:cd:c5:5e:43:d0:47:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241ed58e426975e299875897caff9552640d9c09
        Validity
            Not Before: Jun 10 09:00:52 2025 GMT
            Not After : Jun 11 09:00:52 2025 GMT
        Subject: CN=e59fcb32e0a1d1bf715a1d5000f17f4a6dfca009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:56:68:4e:0f:38:3d:7e:d5:89:c5:d0:a3:
                    9a:c1:08:00:f9:4a:b8:7c:ae:74:62:83:83:bd:15:
                    0e:c9:ae:ea:fa:16:e6:cb:7c:4b:3f:85:f6:87:b6:
                    44:6c:31:63:27:b2:54:98:1e:20:1b:34:f7:f9:aa:
                    ed:22:ef:0e:d9:d5:21:c7:9e:6e:3f:6b:16:e7:c2:
                    5b:c2:26:19:a1:e9:48:ab:8e:12:5a:3a:6e:13:3c:
                    89:ae:19:02:49:4e:9f:04:38:47:83:4a:92:85:ca:
                    4a:a8:2c:8c:84:e7:d7:92:df:81:e2:4c:97:26:9b:
                    6d:a5:f7:f7:fb:7b:d4:44:92:d5:ce:7b:37:b3:cc:
                    37:8a:02:16:f4:61:db:0b:2e:be:7b:1f:0a:8e:8c:
                    ab:a6:c2:69:6e:c5:5d:fd:f7:46:7b:6d:89:01:92:
                    26:ab:e3:f7:f0:f1:d7:d1:1b:1e:4e:07:4d:9e:d0:
                    03:a6:34:37:67:21:69:01:77:c1:8f:0a:e8:b5:fb:
                    9f:e9:b1:a3:c7:35:39:c9:e2:7c:df:09:dd:71:36:
                    17:c5:7a:b8:76:30:48:92:0d:34:f5:a4:0f:be:4f:
                    84:de:84:6e:01:72:ad:0e:89:f7:de:7e:a0:dd:46:
                    f4:30:a0:9c:67:6d:0a:d8:d2:65:bd:31:ff:bc:03:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9F:CB:32:E0:A1:D1:BF:71:5A:1D:50:00:F1:7F:4A:6D:FC:A0:09
            X509v3 Authority Key Identifier:
                keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:df:7d:46:0f:b8:1d:bf:9f:f3:6e:55:3d:b3:a4:f6:b1:3a:
         cf:6e:48:af:00:9e:2a:47:0e:1d:c2:1f:fa:ea:35:b8:12:92:
         af:e2:ab:82:2a:92:26:a0:12:14:22:99:24:49:30:d2:97:a5:
         99:db:5b:a4:03:3d:61:2e:95:cc:59:6f:6f:e4:c3:8e:ee:93:
         2e:35:d9:de:08:7b:58:cb:39:00:96:1f:c3:f5:a7:cc:eb:57:
         98:1f:9d:0c:72:fc:a1:fc:5f:c0:70:09:70:ea:5a:be:f4:9d:
         7c:bf:08:a3:ad:51:a1:73:ea:74:af:cf:45:66:8d:d5:2a:77:
         4c:a1:3b:e2:ee:0f:48:bc:77:99:5b:06:c2:e6:18:f4:5d:76:
         2b:ca:94:d4:0c:6f:6b:06:3d:a4:be:dd:de:03:bd:bc:ec:03:
         df:74:58:d5:a3:8c:b3:84:91:65:b4:52:b2:32:72:25:25:a9:
         e2:c0:95:4d:6b:77:fb:b1:4c:38:cd:48:43:ad:cc:f2:2f:42:
         e0:bd:04:fe:b9:67:1d:8d:08:a2:57:d8:ca:e5:6e:dd:11:45:
         c0:26:03:17:a9:39:56:8c:bc:09:18:3f:2e:9f:bc:c4:5b:a5:
         20:05:86:6d:f2:70:5d:3e:74:00:c9:a3:7c:37:c7:74:f1:4f:
         9f:01:80:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEixgRS0rbSHNxV5D0EfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MWVkNThlNDI2OTc1ZTI5OTg3NTg5N2NhZmY5NTUyNjQw
ZDljMDkwHhcNMjUwNjEwMDkwMDUyWhcNMjUwNjExMDkwMDUyWjAzMTEwLwYDVQQD
EyhlNTlmY2IzMmUwYTFkMWJmNzE1YTFkNTAwMGYxN2Y0YTZkZmNhMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohJWaE4POD1+1YnF0KOawQgA+Uq4
fK50YoODvRUOya7q+hbmy3xLP4X2h7ZEbDFjJ7JUmB4gGzT3+artIu8O2dUhx55u
P2sW58JbwiYZoelIq44SWjpuEzyJrhkCSU6fBDhHg0qShcpKqCyMhOfXkt+B4kyX
Jpttpff3+3vURJLVzns3s8w3igIW9GHbCy6+ex8KjoyrpsJpbsVd/fdGe22JAZIm
q+P38PHX0RseTgdNntADpjQ3ZyFpAXfBjwrotfuf6bGjxzU5yeJ83wndcTYXxXq4
djBIkg009aQPvk+E3oRuAXKtDon33n6g3Ub0MKCcZ20K2NJlvTH/vAOdawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWfyzLgodG/cVodUADxf0pt/KAJMB8GA1UdIwQY
MBaAFCQe1Y5CaXXimYdYl8r/lVJkDZwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUt
NTU0NWI4OTAxNDM4LzEvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUtNTU0NWI4OTAxNDM4
LzEvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArN99Rg+4
Hb+f825VPbOk9rE6z25IrwCeKkcOHcIf+uo1uBKSr+KrgiqSJqASFCKZJEkw0pel
mdtbpAM9YS6VzFlvb+TDju6TLjXZ3gh7WMs5AJYfw/WnzOtXmB+dDHL8ofxfwHAJ
cOpavvSdfL8Io61RoXPqdK/PRWaN1Sp3TKE74u4PSLx3mVsGwuYY9F12K8qU1Axv
awY9pL7d3gO9vOwD33RY1aOMs4SRZbRSsjJyJSWp4sCVTWt3+7FMOM1IQ63M8i9C
4L0E/rlnHY0IolfYyuVu3RFFwCYDF6k5Voy8CRg/Lp+8xFulIAWGbfJwXT50AMmj
fDfHdPFPnwGAew==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:18:12 2025 by rpki-client