Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          LaBcqaByEPZnbMve2xEneRpKJhQr/cqry+6qBj8sfEI=
Subject key identifier:   01:E1:8F:87:1D:C8:43:86:80:E5:FC:B0:AA:7C:9D:79:95:A0:06:9C
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       01974779F60F2124F330600E08E9EE2D037F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          1160
Signing time:             Fri 06 Jun 2025 23:01:04 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:04 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:04 +0000
Files and hashes:         1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: A1ipAyCBdB1LqWc8Yd8jGGwid5+E3LuMqZn4+10SSaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:f6:0f:21:24:f3:30:60:0e:08:e9:ee:2d:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: Jun  6 23:01:04 2025 GMT
            Not After : Jun  7 23:01:04 2025 GMT
        Subject: CN=01e18f871dc8438680e5fcb0aa7c9d7995a0069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:f4:c4:33:c4:4f:b2:c5:0d:7c:19:b8:db:
                    29:12:0f:18:63:15:17:88:86:ea:a1:ba:a2:a8:7b:
                    8c:e2:cd:10:7a:fa:db:78:aa:c8:1f:a8:f1:e5:ec:
                    c8:8a:fa:59:bf:9c:d8:64:d0:13:35:48:f4:b7:37:
                    f9:4e:a1:d4:3a:5e:8f:b6:35:5b:d5:d4:68:dc:f6:
                    97:40:c8:06:ec:13:49:0c:c7:90:f6:38:1b:88:2c:
                    bd:24:0b:96:27:b8:76:a6:ba:f7:38:f1:71:bf:6e:
                    b7:4e:bc:2c:e3:ca:a5:ee:89:04:bc:2a:d8:c4:6a:
                    f0:85:5a:6b:a8:6b:9b:6a:24:49:24:5b:a1:47:47:
                    96:55:55:42:ca:48:6c:a1:10:31:9c:b7:59:08:98:
                    3d:94:83:e4:5b:fc:d6:e4:09:53:52:68:dc:25:bd:
                    cf:58:2c:70:13:9c:a6:b3:c3:47:45:51:20:31:ea:
                    7c:f3:09:e8:e1:94:4f:fc:02:d0:2d:a4:11:45:50:
                    cc:16:db:b5:46:c3:2c:69:43:60:d6:81:77:25:c1:
                    0b:f5:fd:1f:bd:af:ea:d4:0a:dc:01:ff:b0:aa:35:
                    1d:5c:c2:57:0e:94:18:9a:cf:31:9f:01:73:22:af:
                    4a:af:b8:9a:99:a1:0b:18:ab:55:c7:f9:70:0f:88:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:8F:87:1D:C8:43:86:80:E5:FC:B0:AA:7C:9D:79:95:A0:06:9C
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:28:34:67:73:c2:b4:a1:2b:53:ee:f2:cb:0e:f1:c2:d2:22:
         75:71:e8:a6:69:8d:04:20:37:d1:30:52:3f:7f:14:66:96:49:
         74:df:7b:0a:6e:9f:ee:3d:b8:60:cc:90:90:aa:42:c7:17:da:
         8a:d4:3e:5a:9f:39:f8:86:6b:2a:46:b8:b5:bf:1d:44:fb:df:
         1e:d1:c9:f6:7b:d0:cd:84:9b:69:e6:fa:16:41:a1:f8:b5:f5:
         8f:e0:a1:ee:ff:b8:5d:28:70:da:75:c2:0f:d7:be:12:e8:fd:
         51:69:99:7a:6b:a1:8b:62:92:3a:48:f9:f4:df:47:c6:19:38:
         1d:ed:3d:5d:64:51:b2:83:90:da:b9:8a:e0:a0:2f:dc:a5:e8:
         ae:92:92:9e:cd:07:cf:09:03:02:77:a0:af:12:b6:f4:59:f4:
         d3:c2:15:35:b3:f6:ec:2e:36:dc:a1:06:0b:d7:32:6f:8b:15:
         84:8e:20:01:ab:bc:24:67:3f:08:20:9c:1f:08:20:55:54:2a:
         36:d1:2d:b9:85:ee:48:2a:ca:91:c7:7d:84:6f:0d:c1:7b:4d:
         f7:da:8d:37:45:1e:fb:dd:fc:3e:54:b8:a1:66:d8:c8:7f:75:
         3a:2a:52:a1:5a:00:0d:34:0d:39:50:55:c1:b3:76:70:aa:48:
         19:9f:3a:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHefYPISTzMGAOCOnuLQN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWQ0NWUzMTcyNTdlMTcwYTIwMzBlNzliMGY1Zjc0NDA2
YTc4NDIwHhcNMjUwNjA2MjMwMTA0WhcNMjUwNjA3MjMwMTA0WjAzMTEwLwYDVQQD
EygwMWUxOGY4NzFkYzg0Mzg2ODBlNWZjYjBhYTdjOWQ3OTk1YTAwNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dL0xDPET7LFDXwZuNspEg8YYxUX
iIbqobqiqHuM4s0QevrbeKrIH6jx5ezIivpZv5zYZNATNUj0tzf5TqHUOl6PtjVb
1dRo3PaXQMgG7BNJDMeQ9jgbiCy9JAuWJ7h2prr3OPFxv263Trws48ql7okEvCrY
xGrwhVprqGubaiRJJFuhR0eWVVVCykhsoRAxnLdZCJg9lIPkW/zW5AlTUmjcJb3P
WCxwE5yms8NHRVEgMep88wno4ZRP/ALQLaQRRVDMFtu1RsMsaUNg1oF3JcEL9f0f
va/q1ArcAf+wqjUdXMJXDpQYms8xnwFzIq9Kr7iamaELGKtVx/lwD4ge8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHhj4cdyEOGgOX8sKp8nXmVoAacMB8GA1UdIwQY
MBaAFI6tReMXJX4XCiAw55sPX3RAanhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmIt
MDhiZGNkNTMzYjYxLzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmItMDhiZGNkNTMzYjYx
LzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCg0Z3PC
tKErU+7yyw7xwtIidXHopmmNBCA30TBSP38UZpZJdN97Cm6f7j24YMyQkKpCxxfa
itQ+Wp85+IZrKka4tb8dRPvfHtHJ9nvQzYSbaeb6FkGh+LX1j+Ch7v+4XShw2nXC
D9e+Euj9UWmZemuhi2KSOkj59N9Hxhk4He09XWRRsoOQ2rmK4KAv3KXorpKSns0H
zwkDAnegrxK29Fn008IVNbP27C423KEGC9cyb4sVhI4gAau8JGc/CCCcHwggVVQq
NtEtuYXuSCrKkcd9hG8NwXtN99qNN0Ue+938PlS4oWbYyH91OipSoVoADTQNOVBV
wbN2cKpIGZ86qg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:57 2025 by rpki-client