Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File:                     JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier:          zzmjfaJQlgHOt/Zfq05r+x7GADB/mJg/VU7VNrImz3c=
Subject key identifier:   BA:D2:30:49:EA:1D:D9:C9:0E:F7:43:16:7A:F9:E3:5A:50:6E:37:2D
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       019759490C3DD34E29DE4A2F31F2C9B9E997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number:          0864
Signing time:             Tue 10 Jun 2025 10:00:48 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:48 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:48 +0000
Files and hashes:         1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: zswGDhqIf64kTjBFs9VbEDrSGgIFgs3kI/Y8Cd/hebg=)
                          2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:49:0c:3d:d3:4e:29:de:4a:2f:31:f2:c9:b9:e9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Jun 10 10:00:48 2025 GMT
            Not After : Jun 11 10:00:48 2025 GMT
        Subject: CN=bad23049ea1dd9c90ef743167af9e35a506e372d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:03:ee:3f:2c:04:7c:d2:d0:d4:ed:37:69:
                    bc:ec:3c:78:1b:91:04:32:45:87:3d:fd:5b:30:95:
                    03:ad:8d:e7:b9:9f:7f:e0:be:7a:47:81:28:99:f2:
                    c5:ad:1d:69:b4:74:01:59:45:c8:23:a0:c2:61:a3:
                    9e:e8:93:23:52:0d:77:8b:35:52:62:e6:18:55:25:
                    81:74:e4:23:70:2d:5f:3b:cc:d5:46:42:f3:34:ba:
                    c4:fa:41:25:85:f2:59:65:e3:31:77:5f:ea:7f:67:
                    0c:f8:7b:5d:fa:3f:75:c6:0d:6a:34:d8:59:66:9d:
                    1c:82:cb:58:e5:31:8b:d7:a2:10:f9:86:f9:83:79:
                    40:2c:bb:af:11:1c:6e:11:fe:b7:06:38:c0:c9:fb:
                    b7:17:4e:ef:fe:06:0a:c3:00:00:40:f4:db:2a:a5:
                    c6:d6:35:7a:52:4c:cc:e6:64:e3:e9:ab:0f:d3:07:
                    20:01:09:b2:37:19:1e:02:f7:3b:44:9a:66:83:84:
                    eb:c5:39:31:8d:a6:06:c4:9a:ec:03:d4:37:cb:86:
                    bd:86:28:19:d6:a2:41:b4:58:38:da:1c:27:40:1d:
                    bb:fb:3d:cf:5d:32:6a:16:ba:e4:ea:32:14:1b:61:
                    34:e1:50:98:28:68:63:2f:03:03:8f:29:be:6b:b0:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D2:30:49:EA:1D:D9:C9:0E:F7:43:16:7A:F9:E3:5A:50:6E:37:2D
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:ef:6d:7c:7f:b3:93:2b:db:b1:a1:eb:b8:40:be:89:26:
         69:aa:cf:bb:21:39:ab:cc:45:a2:44:90:4e:03:27:9e:ab:bc:
         56:f2:36:ad:3b:c6:29:9d:03:c1:ec:aa:c1:86:79:d0:fc:d7:
         a4:93:04:c0:0a:71:bb:39:00:56:09:5b:c5:29:bf:4e:7b:79:
         5d:1c:c6:2f:db:cd:25:6a:d3:fe:92:c3:dd:df:a4:a9:1e:14:
         c9:4a:c4:64:2f:92:80:10:a4:99:33:8e:25:ac:75:03:b5:57:
         46:37:76:0b:62:21:51:17:a6:53:aa:84:4b:87:11:07:e8:83:
         65:f8:5a:76:d4:c7:29:28:18:e3:19:37:ef:a5:c7:ee:26:bb:
         88:c2:a1:bf:ef:e7:14:c7:be:47:d7:7d:6a:26:9e:aa:1d:7d:
         ae:ea:94:c4:d5:90:a1:19:06:43:f8:14:75:49:e1:03:dd:06:
         6a:4a:2a:de:ca:98:51:21:9b:2f:2e:2e:bc:78:b8:b5:de:4b:
         b5:25:f3:7f:a8:39:87:1e:44:b2:62:48:ae:0f:72:2d:8b:f9:
         5c:6f:27:98:7e:35:b2:e1:0f:1c:be:e0:52:d2:95:ff:aa:07:
         2c:00:5f:24:4d:30:0d:9e:14:a6:cf:fc:a0:5c:05:d6:bc:9d:
         66:9d:93:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSQw9004p3kovMfLJuemXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1
ZjU2ZTQwHhcNMjUwNjEwMTAwMDQ4WhcNMjUwNjExMTAwMDQ4WjAzMTEwLwYDVQQD
EyhiYWQyMzA0OWVhMWRkOWM5MGVmNzQzMTY3YWY5ZTM1YTUwNmUzNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGwD7j8sBHzS0NTtN2m87Dx4G5EE
MkWHPf1bMJUDrY3nuZ9/4L56R4EomfLFrR1ptHQBWUXII6DCYaOe6JMjUg13izVS
YuYYVSWBdOQjcC1fO8zVRkLzNLrE+kElhfJZZeMxd1/qf2cM+Htd+j91xg1qNNhZ
Zp0cgstY5TGL16IQ+Yb5g3lALLuvERxuEf63BjjAyfu3F07v/gYKwwAAQPTbKqXG
1jV6UkzM5mTj6asP0wcgAQmyNxkeAvc7RJpmg4TrxTkxjaYGxJrsA9Q3y4a9higZ
1qJBtFg42hwnQB27+z3PXTJqFrrk6jIUG2E04VCYKGhjLwMDjym+a7BSdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrSMEnqHdnJDvdDFnr541pQbjctMB8GA1UdIwQY
MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt
MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh
LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiPvbXx/
s5Mr27Gh67hAvokmaarPuyE5q8xFokSQTgMnnqu8VvI2rTvGKZ0DweyqwYZ50PzX
pJMEwApxuzkAVglbxSm/Tnt5XRzGL9vNJWrT/pLD3d+kqR4UyUrEZC+SgBCkmTOO
Jax1A7VXRjd2C2IhURemU6qES4cRB+iDZfhadtTHKSgY4xk376XH7ia7iMKhv+/n
FMe+R9d9aiaeqh19ruqUxNWQoRkGQ/gUdUnhA90Gakoq3sqYUSGbLy4uvHi4td5L
tSXzf6g5hx5EsmJIrg9yLYv5XG8nmH41suEPHL7gUtKV/6oHLABfJE0wDZ4Ups/8
oFwF1rydZp2Tug==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:20:37 2025 by rpki-client