Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File:                     JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier:          9Z+2l6uKh/oYjm2HzhKOT6AOML7YFQD8UusJjpokUNs=
Subject key identifier:   34:81:80:EC:06:86:FF:BF:8A:53:65:C5:08:93:96:AF:C6:8F:ED:F4
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer:       /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial:       0196451FB1311E82F6C03F568D62E8D9FC7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number:          14F7
Signing time:             Thu 17 Apr 2025 19:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:26 +0000
Files and hashes:         1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
                          2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: ND6LjqPjY2xE7TWLhO+KyVLvlym1n2KsM+3T6bqYUjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:b1:31:1e:82:f6:c0:3f:56:8d:62:e8:d9:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
        Validity
            Not Before: Apr 17 19:00:26 2025 GMT
            Not After : Apr 18 19:00:26 2025 GMT
        Subject: CN=348180ec0686ffbf8a5365c5089396afc68fedf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:26:83:28:1d:19:e5:8d:d1:d1:aa:3c:cc:
                    f5:e2:5c:c6:9b:d0:e7:1d:fc:ca:2e:0e:76:a5:14:
                    8c:9a:28:1d:01:0e:35:b1:68:a4:87:1b:ff:89:62:
                    54:fb:03:12:94:98:1e:9f:73:b9:21:ce:50:39:ec:
                    f1:cc:7a:ef:c5:2e:c9:f0:37:88:34:4b:14:d9:bf:
                    c9:7a:32:a5:29:8d:01:ee:3d:7b:8f:d9:a2:f6:2f:
                    dc:95:26:c6:1f:7a:82:25:b0:51:50:5b:fc:30:b3:
                    7b:c4:8d:ce:a0:fb:90:83:81:98:84:1e:e6:a6:9d:
                    da:02:c0:00:f3:a6:fc:59:21:38:e3:36:aa:ba:d5:
                    f6:2e:f9:90:47:c7:ed:65:b8:3f:dc:93:fd:bc:46:
                    9a:d7:97:1a:74:bc:33:96:c2:1a:00:3d:74:e0:d3:
                    cb:1f:68:5b:99:d4:3e:29:77:1c:98:2f:06:9e:32:
                    cb:39:60:4a:f8:40:44:ee:f5:0c:e0:e0:f3:f2:af:
                    5c:2d:76:9d:63:cb:c0:45:d7:b5:69:42:9e:c9:4e:
                    67:a7:86:5f:65:35:4f:f1:c2:ac:d9:00:92:5e:f5:
                    db:1b:72:0e:94:19:2a:e0:42:bf:9e:3f:ec:98:11:
                    dc:d5:fd:d4:15:16:13:2b:f2:a1:cf:7e:78:37:54:
                    c3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:80:EC:06:86:FF:BF:8A:53:65:C5:08:93:96:AF:C6:8F:ED:F4
            X509v3 Authority Key Identifier:
                keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1f:5b:d7:19:34:e5:17:46:4d:7f:8d:2b:13:0f:ff:25:6a:
         3e:38:e0:8c:9c:6b:ee:3f:18:2d:d4:0b:56:1a:a2:bc:2d:6f:
         4b:2f:8f:43:91:13:75:da:9c:f0:c7:ee:79:5d:1b:15:ac:3f:
         72:4f:3d:dc:85:01:33:ca:b7:81:6f:51:c3:2b:6d:b6:17:52:
         8f:af:3a:12:2b:17:87:fe:e7:28:56:4b:98:16:9a:13:2d:8c:
         47:14:48:18:cc:fc:83:0a:d8:4e:37:20:f4:31:ee:04:c3:f9:
         02:dc:b2:09:93:86:dc:87:8a:06:49:43:ef:55:7a:a0:90:0b:
         21:ac:ee:94:33:7f:62:f6:5d:2f:46:c0:94:ad:0f:70:f3:16:
         fd:b6:8c:fd:60:ee:86:a4:48:b3:35:db:a5:d7:ec:a8:e9:b1:
         8b:a8:de:4f:a2:dd:d2:1d:f9:0d:ea:a9:62:37:f1:43:3b:99:
         72:dd:a1:37:f7:95:30:2e:3f:e3:10:50:41:bd:1e:d9:d8:b7:
         bc:7a:ac:a2:be:b5:c5:f0:2a:51:e0:e8:4a:a5:f5:35:05:3b:
         db:e0:31:fd:50:fc:31:97:2e:f2:31:03:ab:29:4f:63:87:34:
         89:08:ac:83:61:ec:df:1d:e7:42:40:de:50:e6:06:a1:27:38:
         7b:7b:a1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFH7ExHoL2wD9WjWLo2fx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi
MWM3ZjMwHhcNMjUwNDE3MTkwMDI2WhcNMjUwNDE4MTkwMDI2WjAzMTEwLwYDVQQD
EygzNDgxODBlYzA2ODZmZmJmOGE1MzY1YzUwODkzOTZhZmM2OGZlZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOwmgygdGeWN0dGqPMz14lzGm9Dn
HfzKLg52pRSMmigdAQ41sWikhxv/iWJU+wMSlJgen3O5Ic5QOezxzHrvxS7J8DeI
NEsU2b/JejKlKY0B7j17j9mi9i/clSbGH3qCJbBRUFv8MLN7xI3OoPuQg4GYhB7m
pp3aAsAA86b8WSE44zaqutX2LvmQR8ftZbg/3JP9vEaa15cadLwzlsIaAD104NPL
H2hbmdQ+KXccmC8GnjLLOWBK+EBE7vUM4ODz8q9cLXadY8vARde1aUKeyU5np4Zf
ZTVP8cKs2QCSXvXbG3IOlBkq4EK/nj/smBHc1f3UFRYTK/Khz354N1TDVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSBgOwGhv+/ilNlxQiTlq/Gj+30MB8GA1UdIwQY
MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt
ZWQzMmM1NjEyODQwLzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw
LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAth9b1xk0
5RdGTX+NKxMP/yVqPjjgjJxr7j8YLdQLVhqivC1vSy+PQ5ETddqc8MfueV0bFaw/
ck893IUBM8q3gW9RwyttthdSj686EisXh/7nKFZLmBaaEy2MRxRIGMz8gwrYTjcg
9DHuBMP5AtyyCZOG3IeKBklD71V6oJALIazulDN/YvZdL0bAlK0PcPMW/baM/WDu
hqRIszXbpdfsqOmxi6jeT6Ld0h35DeqpYjfxQzuZct2hN/eVMC4/4xBQQb0e2di3
vHqsor61xfAqUeDoSqX1NQU72+Ax/VD8MZcu8jEDqylPY4c0iQisg2Hs3x3nQkDe
UOYGoSc4e3uh4w==
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:01:33 2025 by rpki-client