Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File:                     JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier:          SluieA5o/zUUDM7Gz1ibRLGjFaN+2VFEEghD8QVg1oI=
Subject key identifier:   16:96:1C:56:FA:22:00:DD:C5:44:F8:95:30:67:26:FD:91:C5:BC:FA
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer:       /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial:       01963E0B82882F482815404B5C4999546E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number:          0F91
Signing time:             Wed 16 Apr 2025 10:01:03 +0000
Manifest this update:     Wed 16 Apr 2025 10:01:03 +0000
Manifest next update:     Thu 17 Apr 2025 10:01:03 +0000
Files and hashes:         1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=)
                          2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: 8sgSBq4Efm5VMJPGjUtjqiUHo4f1SZgcoOP5mhvpZdw=)
                          3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=)
                          4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:0b:82:88:2f:48:28:15:40:4b:5c:49:99:54:6e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
        Validity
            Not Before: Apr 16 10:01:03 2025 GMT
            Not After : Apr 17 10:01:03 2025 GMT
        Subject: CN=16961c56fa2200ddc544f895306726fd91c5bcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:9a:5b:e6:89:01:99:6c:00:d9:37:7f:26:
                    75:c6:a2:68:6b:71:6a:e4:1b:37:78:53:af:2e:a0:
                    55:8d:b6:a2:fb:fe:10:3b:0b:5a:47:7a:9b:49:d9:
                    3c:3d:3f:70:0a:39:61:b7:ba:51:55:4f:ba:a2:54:
                    a1:b4:88:52:b6:0c:e9:96:3b:34:8b:a6:9a:1d:f5:
                    94:12:91:2f:af:04:9c:2c:60:7c:81:f2:ed:b5:43:
                    d7:d7:53:82:b9:a5:d1:6d:9a:1c:ae:2b:2d:2d:b0:
                    ef:31:1e:7e:68:ec:3c:79:cd:b7:4a:f3:0d:cf:60:
                    4e:66:94:53:6f:7b:a2:5a:c0:21:d8:80:98:ca:d0:
                    75:05:6a:51:91:cb:5d:73:53:28:0c:18:0c:85:a6:
                    ca:2a:d4:42:61:e3:ed:83:21:38:b4:26:cf:15:63:
                    5b:86:78:9a:bb:18:fb:e3:48:21:86:3f:1e:30:5e:
                    00:dd:d8:6f:46:b7:32:6e:5e:9c:e2:92:9b:14:f6:
                    b4:20:73:79:38:f8:41:27:37:08:ca:45:ed:c3:b3:
                    07:50:d0:0e:c5:c0:a3:e8:aa:8b:af:82:19:3b:f6:
                    fe:41:5e:27:e5:63:8c:77:2e:46:56:3a:68:29:0a:
                    af:2c:c9:ce:b1:7c:27:d0:3d:ee:84:b3:23:e2:ee:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:1C:56:FA:22:00:DD:C5:44:F8:95:30:67:26:FD:91:C5:BC:FA
            X509v3 Authority Key Identifier:
                keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:a3:b8:fc:4d:a8:f4:ea:43:fa:88:6d:a5:aa:33:12:95:
         a7:80:02:cb:7f:c0:cf:c3:a7:d9:fa:d7:6f:c2:59:4b:2e:10:
         e4:a8:6c:b7:e9:28:95:9a:62:ba:a0:92:07:ca:f6:2c:17:6e:
         0b:25:4f:35:97:2f:6b:9f:11:62:75:fc:71:ae:f8:0f:76:cd:
         df:47:ee:9f:b8:99:78:0c:1d:50:3d:0b:9f:72:8f:5b:84:21:
         37:89:f7:f9:59:44:42:22:db:80:d2:54:de:55:3f:25:9d:09:
         e3:f8:6c:cd:0e:99:46:de:49:29:5d:b8:80:47:3b:23:24:64:
         4d:4d:5f:5e:8f:ea:4a:cd:12:f5:c3:6d:cd:a2:ed:fb:25:6d:
         21:fc:8a:8d:e8:71:61:54:74:a2:c0:93:c8:60:bc:60:51:f4:
         1b:c0:f0:84:8f:20:10:74:e5:63:6c:c2:d1:cd:46:61:6c:bc:
         16:6d:72:bd:4a:e5:73:fb:6a:c0:78:aa:b1:61:fe:ed:5a:c4:
         36:c5:13:47:8a:aa:3c:e8:8c:4b:e1:47:91:3a:63:e6:af:7b:
         ea:df:72:8b:c2:c3:de:49:43:49:f6:c6:f5:69:e0:00:ee:57:
         0a:97:a7:46:ab:fa:e9:2c:7a:75:f6:09:41:d9:42:72:66:2f:
         62:01:7d:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+C4KIL0goFUBLXEmZVG5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODJjODE2ZjcyNjg2ZmY3YWVkZTUzNTM4NjE4Y2MyZTg4
NjEwMzkwHhcNMjUwNDE2MTAwMTAzWhcNMjUwNDE3MTAwMTAzWjAzMTEwLwYDVQQD
EygxNjk2MWM1NmZhMjIwMGRkYzU0NGY4OTUzMDY3MjZmZDkxYzViY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQyaW+aJAZlsANk3fyZ1xqJoa3Fq
5Bs3eFOvLqBVjbai+/4QOwtaR3qbSdk8PT9wCjlht7pRVU+6olShtIhStgzpljs0
i6aaHfWUEpEvrwScLGB8gfLttUPX11OCuaXRbZocristLbDvMR5+aOw8ec23SvMN
z2BOZpRTb3uiWsAh2ICYytB1BWpRkctdc1MoDBgMhabKKtRCYePtgyE4tCbPFWNb
hniauxj740ghhj8eMF4A3dhvRrcybl6c4pKbFPa0IHN5OPhBJzcIykXtw7MHUNAO
xcCj6KqLr4IZO/b+QV4n5WOMdy5GVjpoKQqvLMnOsXwn0D3uhLMj4u4ChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaWHFb6IgDdxUT4lTBnJv2Rxbz6MB8GA1UdIwQY
MBaAFCaCyBb3Job/eu3lNThhjMLohhA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmIt
NjYxZThmZTNjMWU5LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmItNjYxZThmZTNjMWU5
LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT2juPxN
qPTqQ/qIbaWqMxKVp4ACy3/Az8On2frXb8JZSy4Q5Khst+kolZpiuqCSB8r2LBdu
CyVPNZcva58RYnX8ca74D3bN30fun7iZeAwdUD0Ln3KPW4QhN4n3+VlEQiLbgNJU
3lU/JZ0J4/hszQ6ZRt5JKV24gEc7IyRkTU1fXo/qSs0S9cNtzaLt+yVtIfyKjehx
YVR0osCTyGC8YFH0G8DwhI8gEHTlY2zC0c1GYWy8Fm1yvUrlc/tqwHiqsWH+7VrE
NsUTR4qqPOiMS+FHkTpj5q976t9yi8LD3klDSfbG9WngAO5XCpenRqv66Sx6dfYJ
QdlCcmYvYgF9Cg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:30:33 2025 by rpki-client