Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File:                     JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier:          iVT0iNqGAtXN6LEZmb1DXvjmUNQiAImsdChvZHTYp9A=
Subject key identifier:   AC:BE:06:1D:7E:35:64:4C:B8:62:75:8D:75:8F:BB:9A:EB:54:90:A4
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer:       /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial:       01958B16C2FFE0D311829DE7FBCDF8B5796A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number:          1497
Signing time:             Wed 12 Mar 2025 16:01:19 +0000
Manifest this update:     Wed 12 Mar 2025 16:01:19 +0000
Manifest next update:     Thu 13 Mar 2025 16:01:19 +0000
Files and hashes:         1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
                          2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: hCHhP2+PJS4QzukiuoS35ErpTPifl2yLbcIIryMK+mw=)
                          3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
                          4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:c2:ff:e0:d3:11:82:9d:e7:fb:cd:f8:b5:79:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
        Validity
            Not Before: Mar 12 16:01:19 2025 GMT
            Not After : Mar 13 16:01:19 2025 GMT
        Subject: CN=acbe061d7e35644cb862758d758fbb9aeb5490a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:02:45:7b:3c:1d:6d:61:51:41:46:f0:6f:
                    52:af:3e:8c:9d:80:a7:11:18:bc:e0:fe:32:07:4e:
                    08:b3:da:22:08:3c:ba:40:6f:a7:10:db:88:1f:7e:
                    55:aa:ff:cb:71:8a:44:b5:13:3e:10:f6:ae:ac:41:
                    f0:26:b3:0c:16:21:b4:e9:11:b4:8b:d6:f6:98:f8:
                    a4:59:1a:1e:aa:00:75:d7:59:1e:e1:e1:e0:ac:3e:
                    bd:64:53:31:fa:ed:03:43:03:88:f6:fa:0f:1d:4c:
                    99:b8:8a:24:5a:fe:48:7c:7e:35:40:4c:d4:f2:15:
                    47:80:2a:d1:cd:c0:f3:c4:d9:82:c0:e6:d5:8f:cc:
                    68:e9:63:c7:34:aa:ab:6d:7d:b7:71:d6:58:6e:ca:
                    64:78:96:22:a0:a7:1e:1d:12:13:cd:24:a7:f0:6a:
                    e4:33:ab:a6:9d:cb:ee:0e:2a:f1:41:46:2e:00:69:
                    e9:d4:b4:3b:71:6d:de:01:cf:2d:73:3b:85:0b:22:
                    a4:37:d1:47:0c:91:af:81:d1:3e:aa:fc:06:61:00:
                    13:39:85:5b:d6:0b:fb:67:55:32:3e:aa:e7:9d:2a:
                    d9:41:30:2a:2e:e5:d2:b0:94:f8:98:19:e9:96:7e:
                    98:40:03:e0:33:2f:6b:ad:47:64:01:30:11:6a:c4:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BE:06:1D:7E:35:64:4C:B8:62:75:8D:75:8F:BB:9A:EB:54:90:A4
            X509v3 Authority Key Identifier:
                keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:5f:94:de:96:b8:1b:f9:6f:64:4a:8d:3a:00:7b:36:13:
         80:92:8d:e6:8e:1f:0e:04:33:be:3c:78:30:c0:f2:b2:b7:35:
         44:4f:1e:d6:44:b0:75:d8:46:3c:94:77:05:aa:f9:47:ed:35:
         23:16:c9:23:4e:29:48:ce:d8:67:0e:85:08:f3:2b:be:b0:77:
         a1:2c:6f:70:03:dc:20:6b:c9:10:e8:f9:6a:56:38:6a:70:f9:
         39:59:2f:dc:3f:3f:af:a6:67:ef:0f:d9:ec:ee:0a:0e:93:81:
         10:00:af:ca:ac:1b:39:37:ec:71:95:25:cb:d1:89:d4:89:31:
         ea:57:fd:35:b5:83:69:af:34:69:26:f3:a5:e8:58:1d:17:42:
         10:cf:28:ce:ea:a7:82:da:6b:0d:cc:a3:5d:18:7d:bd:ff:d1:
         8a:67:00:52:f5:c2:ae:80:a5:61:58:10:a6:a9:a0:21:27:af:
         8b:d1:0b:b9:7f:43:01:7b:78:39:c1:c7:84:7f:ab:ea:cd:a6:
         a2:e3:b9:4e:c0:5b:90:48:06:52:ea:2c:fd:19:d3:ba:b1:66:
         6d:e2:61:e5:b6:51:37:b2:2a:6d:c4:a7:70:c4:80:e1:f6:d3:
         39:25:59:72:76:29:b2:74:50:b3:18:e1:f6:d4:7e:37:87:29:
         06:45:6b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFsL/4NMRgp3n+834tXlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDM4MjkzZjY2OWRiNDhiNmQwYmQxMDM2YWRmZGVmNmJk
M2QzNzUwHhcNMjUwMzEyMTYwMTE5WhcNMjUwMzEzMTYwMTE5WjAzMTEwLwYDVQQD
EyhhY2JlMDYxZDdlMzU2NDRjYjg2Mjc1OGQ3NThmYmI5YWViNTQ5MGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl10CRXs8HW1hUUFG8G9Srz6MnYCn
ERi84P4yB04Is9oiCDy6QG+nENuIH35Vqv/LcYpEtRM+EPaurEHwJrMMFiG06RG0
i9b2mPikWRoeqgB111ke4eHgrD69ZFMx+u0DQwOI9voPHUyZuIokWv5IfH41QEzU
8hVHgCrRzcDzxNmCwObVj8xo6WPHNKqrbX23cdZYbspkeJYioKceHRITzSSn8Grk
M6umncvuDirxQUYuAGnp1LQ7cW3eAc8tczuFCyKkN9FHDJGvgdE+qvwGYQATOYVb
1gv7Z1UyPqrnnSrZQTAqLuXSsJT4mBnpln6YQAPgMy9rrUdkATARasSwZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy+Bh1+NWRMuGJ1jXWPu5rrVJCkMB8GA1UdIwQY
MBaAFCbTgpP2adtIttC9EDat/e9r09N1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTIt
NDQ4YjliOTViMDllLzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTItNDQ4YjliOTViMDll
LzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFktflN6W
uBv5b2RKjToAezYTgJKN5o4fDgQzvjx4MMDysrc1RE8e1kSwddhGPJR3Bar5R+01
IxbJI04pSM7YZw6FCPMrvrB3oSxvcAPcIGvJEOj5alY4anD5OVkv3D8/r6Zn7w/Z
7O4KDpOBEACvyqwbOTfscZUly9GJ1Ikx6lf9NbWDaa80aSbzpehYHRdCEM8ozuqn
gtprDcyjXRh9vf/RimcAUvXCroClYVgQpqmgISevi9ELuX9DAXt4OcHHhH+r6s2m
ouO5TsBbkEgGUuos/RnTurFmbeJh5bZRN7IqbcSncMSA4fbTOSVZcnYpsnRQsxjh
9tR+N4cpBkVr9A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:05 2025 by rpki-client