Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File:                     JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier:          HiPVsNHcwRYpKM6sKLA56R82RbPIXUNw0XKYQ5p+UOo=
Subject key identifier:   F7:6B:E2:D4:06:93:B3:64:4F:7B:EA:7F:01:AB:BA:4A:F1:B1:5A:97
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer:       /CN=262762b73be226b171999412625acc7270244343
Certificate serial:       01974DE9A56C55A57220CC37BCDE56DD5B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number:          01CD
Signing time:             Sun 08 Jun 2025 05:00:47 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:47 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:47 +0000
Files and hashes:         1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: kGCnq9E1zsVVUZkwV239DmbO4grWPBqfc3+UZhauK7k=)
                          2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:a5:6c:55:a5:72:20:cc:37:bc:de:56:dd:5b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262762b73be226b171999412625acc7270244343
        Validity
            Not Before: Jun  8 05:00:47 2025 GMT
            Not After : Jun  9 05:00:47 2025 GMT
        Subject: CN=f76be2d40693b3644f7bea7f01abba4af1b15a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:61:45:dd:03:39:cb:5e:b7:8c:05:10:f4:
                    41:55:47:dd:fd:6b:0e:99:2f:50:26:24:43:9d:14:
                    6a:81:a0:30:53:c1:18:49:28:35:0f:14:4b:5a:dc:
                    04:5d:72:be:c4:c9:08:4a:28:ed:c8:b2:cb:7f:84:
                    e6:1a:c3:aa:1c:bd:a4:22:42:c4:de:03:7d:4e:e7:
                    4f:bd:e8:51:0f:00:ff:56:cf:50:85:7d:59:ee:91:
                    66:55:15:e9:73:84:04:fa:41:b8:22:b0:a4:15:03:
                    bf:11:28:58:68:0e:5f:94:0e:8c:6e:1c:b3:ff:79:
                    58:91:3d:d7:69:92:17:56:1d:32:26:27:2a:6b:19:
                    e1:03:c4:23:7d:e8:6d:af:27:d3:cc:35:6a:bf:8b:
                    11:57:7f:83:16:00:dc:91:59:2e:d3:69:83:86:4f:
                    9a:21:96:da:83:7c:7e:5f:ad:7e:8f:ce:49:2a:7a:
                    78:95:cf:43:35:08:49:30:ee:2e:ba:7c:60:7d:b4:
                    b5:b7:e7:e0:7a:09:4e:d4:19:59:50:80:0e:d1:ba:
                    1b:db:81:c9:19:30:b7:52:2d:0d:30:8b:63:25:98:
                    9e:24:12:e3:4e:3c:08:13:ee:8e:bb:b4:8e:1d:b6:
                    5a:66:cb:5b:fa:93:c6:df:7c:5b:db:60:0d:7d:57:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:E2:D4:06:93:B3:64:4F:7B:EA:7F:01:AB:BA:4A:F1:B1:5A:97
            X509v3 Authority Key Identifier:
                keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:f3:f1:01:a6:7f:91:93:e6:d6:86:97:6e:60:39:75:e8:
         e6:3a:2e:6e:a8:73:30:ad:9e:ab:13:c3:a2:df:af:59:8c:9b:
         1d:84:83:b4:01:ca:fd:36:aa:e8:5d:67:72:ef:9b:6d:91:57:
         2f:53:5d:b9:c4:2d:85:76:fa:ad:6a:dc:78:9b:bb:db:ec:d2:
         3c:9c:63:49:69:92:79:0f:52:1a:a6:e0:e0:e2:59:9d:85:43:
         a7:9b:e0:49:a5:18:92:32:e7:34:48:09:13:b5:14:79:7c:47:
         d3:2e:76:fb:7f:bd:58:b9:4c:00:79:90:ed:54:9b:72:72:e5:
         44:9f:f7:ac:34:39:9b:e5:ce:84:33:ff:75:e5:87:2c:ea:57:
         cb:42:88:b1:df:a5:bf:0d:89:21:c8:e6:9d:67:30:ae:7b:a9:
         9f:8e:67:68:aa:d0:fe:11:b0:a1:10:be:9d:44:58:fa:e3:43:
         05:c5:3c:61:74:c3:18:1d:94:d4:70:b6:07:d9:c4:5e:40:4b:
         ae:51:ac:79:95:21:92:19:d2:6b:8b:7f:1c:21:f9:47:58:ca:
         7a:2b:24:59:a5:e0:a2:40:5c:c9:9a:70:1a:e8:9c:a9:ac:57:
         5e:82:fc:cc:74:ea:0c:ff:d2:fc:67:26:2f:a8:dc:cc:21:af:
         26:ee:e6:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6aVsVaVyIMw3vN5W3VuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Mjc2MmI3M2JlMjI2YjE3MTk5OTQxMjYyNWFjYzcyNzAy
NDQzNDMwHhcNMjUwNjA4MDUwMDQ3WhcNMjUwNjA5MDUwMDQ3WjAzMTEwLwYDVQQD
EyhmNzZiZTJkNDA2OTNiMzY0NGY3YmVhN2YwMWFiYmE0YWYxYjE1YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG9hRd0DOctet4wFEPRBVUfd/WsO
mS9QJiRDnRRqgaAwU8EYSSg1DxRLWtwEXXK+xMkISijtyLLLf4TmGsOqHL2kIkLE
3gN9TudPvehRDwD/Vs9QhX1Z7pFmVRXpc4QE+kG4IrCkFQO/EShYaA5flA6Mbhyz
/3lYkT3XaZIXVh0yJicqaxnhA8QjfehtryfTzDVqv4sRV3+DFgDckVku02mDhk+a
IZbag3x+X61+j85JKnp4lc9DNQhJMO4uunxgfbS1t+fgeglO1BlZUIAO0bob24HJ
GTC3Ui0NMItjJZieJBLjTjwIE+6Ou7SOHbZaZstb+pPG33xb22ANfVeKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdr4tQGk7NkT3vqfwGrukrxsVqXMB8GA1UdIwQY
MBaAFCYnYrc74iaxcZmUEmJazHJwJENDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kYjU0N2UtZjQzMS00ZDc4LTlmMzgt
MmM0YzA2NmZjMjkxLzEvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kYjU0N2UtZjQzMS00ZDc4LTlmMzgtMmM0YzA2NmZjMjkx
LzEvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9rz8QGm
f5GT5taGl25gOXXo5joubqhzMK2eqxPDot+vWYybHYSDtAHK/Taq6F1ncu+bbZFX
L1NducQthXb6rWrceJu72+zSPJxjSWmSeQ9SGqbg4OJZnYVDp5vgSaUYkjLnNEgJ
E7UUeXxH0y52+3+9WLlMAHmQ7VSbcnLlRJ/3rDQ5m+XOhDP/deWHLOpXy0KIsd+l
vw2JIcjmnWcwrnupn45naKrQ/hGwoRC+nURY+uNDBcU8YXTDGB2U1HC2B9nEXkBL
rlGseZUhkhnSa4t/HCH5R1jKeiskWaXgokBcyZpwGuicqaxXXoL8zHTqDP/S/Gcm
L6jczCGvJu7mFg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:46 2025 by rpki-client