Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          k4kkJ6XJC4gzfmcbKhFkUv8a42ZncBOVbaEEyc9H6cA=
Subject key identifier:   A9:21:DD:62:FA:E0:64:9D:E9:50:6E:7A:62:8F:00:D1:1B:F7:68:2E
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       01960A54C638CD2021A269B299EC4859560C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          14DB
Signing time:             Sun 06 Apr 2025 09:00:50 +0000
Manifest this update:     Sun 06 Apr 2025 09:00:50 +0000
Manifest next update:     Mon 07 Apr 2025 09:00:50 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          3: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          4: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: wvnzhoiGwPnSdUpdJP5x8HUS6bszNbfQrVA5gmqQnmc=)
                          5: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          6: myo0lOXlik6455mDWNn0s-P-G5c.roa (hash: GWM9iq3advWBN0WarVLZ14po4AhHo2qPitRczQuVb+0=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0a:54:c6:38:cd:20:21:a2:69:b2:99:ec:48:59:56:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Apr  6 09:00:50 2025 GMT
            Not After : Apr  7 09:00:50 2025 GMT
        Subject: CN=a921dd62fae0649de9506e7a628f00d11bf7682e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:ea:20:b6:3b:38:04:21:6f:67:ad:45:16:
                    ff:e4:0d:79:02:50:19:2d:da:88:16:a1:a8:3c:ff:
                    99:a2:a5:c5:65:e2:4f:d2:a2:7a:ca:33:c2:52:73:
                    41:d5:a7:3a:1f:4e:97:6e:8f:ac:29:39:0c:b3:ce:
                    56:e9:ed:5a:2f:ae:c5:12:8e:3c:b3:39:31:45:73:
                    70:22:47:26:33:af:75:7b:d7:cf:0b:ab:bd:61:74:
                    a9:d8:9b:72:37:26:66:72:92:76:61:09:83:75:d5:
                    6c:ed:70:58:96:e9:6b:8e:04:0d:2e:48:f4:de:05:
                    4f:71:a8:aa:7f:a5:1f:0a:3d:3c:ec:9a:a1:a7:9c:
                    4b:eb:f6:9d:12:55:1e:d8:80:c5:62:32:2d:02:b5:
                    8b:3f:99:b6:04:dd:ee:ba:cb:9c:0e:fb:e7:d9:de:
                    15:3f:41:98:f4:c7:bb:58:d6:c5:6b:65:e2:7d:98:
                    fe:d6:84:1a:af:e6:f2:7e:4d:bc:26:6b:49:86:a8:
                    6b:45:49:30:fe:ac:3f:b9:fe:26:5b:77:29:5d:62:
                    55:21:a7:2c:f6:88:94:2f:98:14:57:af:40:2b:28:
                    c4:91:08:2b:0c:af:77:4d:1d:32:22:54:dc:ff:42:
                    f5:f9:b3:70:09:22:56:85:92:69:71:7b:dd:74:27:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:DD:62:FA:E0:64:9D:E9:50:6E:7A:62:8F:00:D1:1B:F7:68:2E
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:e7:20:4c:11:7a:92:7e:71:6b:62:bd:ac:65:94:73:01:
         a2:d6:cf:c6:cd:18:c8:41:14:49:20:fc:a5:7b:4c:32:91:1b:
         e2:e9:f4:8a:cd:c5:e1:3f:66:8d:2e:d2:99:88:80:9e:f2:6f:
         e6:51:a2:9d:cb:ee:fe:2c:05:4f:5c:eb:22:80:8a:f2:2c:4c:
         71:3e:97:e6:58:34:23:a6:6a:4c:d4:88:2e:e8:33:5c:7c:17:
         0e:3f:69:c6:54:9d:c8:5a:4c:d8:9f:bc:03:52:22:ba:dc:c8:
         b1:01:59:23:c3:af:71:4a:42:f8:03:91:e6:d5:90:2e:c6:97:
         3e:51:2a:c6:02:2a:7e:3b:62:ed:95:b2:eb:25:bf:43:87:66:
         38:1c:69:66:55:d4:fe:2e:d0:76:06:a3:4f:83:ef:71:47:86:
         49:07:1b:3a:6a:72:a9:44:4d:31:e8:5d:73:21:87:b0:85:a7:
         b9:84:4d:80:f9:b0:1e:0f:38:38:cc:ce:eb:e8:dc:d9:aa:de:
         f1:0a:b2:ba:e8:22:99:12:7b:45:81:21:00:4a:e1:ae:8e:06:
         ce:c0:57:8f:40:1b:56:39:4d:4a:ce:96:31:85:80:b3:29:56:
         e1:56:45:6c:2b:87:03:a0:3f:c6:d5:60:fd:b5:63:1e:ff:44:
         c8:23:13:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYKVMY4zSAhommymexIWVYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg5NTM5NTIwMDA0MjcwZDM0MjUzYmRjMTZkODc3ODQx
NTZlMWEwHhcNMjUwNDA2MDkwMDUwWhcNMjUwNDA3MDkwMDUwWjAzMTEwLwYDVQQD
EyhhOTIxZGQ2MmZhZTA2NDlkZTk1MDZlN2E2MjhmMDBkMTFiZjc2ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4rqILY7OAQhb2etRRb/5A15AlAZ
LdqIFqGoPP+ZoqXFZeJP0qJ6yjPCUnNB1ac6H06Xbo+sKTkMs85W6e1aL67FEo48
szkxRXNwIkcmM691e9fPC6u9YXSp2JtyNyZmcpJ2YQmDddVs7XBYlulrjgQNLkj0
3gVPcaiqf6UfCj087Jqhp5xL6/adElUe2IDFYjItArWLP5m2BN3uusucDvvn2d4V
P0GY9Me7WNbFa2XifZj+1oQar+byfk28JmtJhqhrRUkw/qw/uf4mW3cpXWJVIacs
9oiUL5gUV69AKyjEkQgrDK93TR0yIlTc/0L1+bNwCSJWhZJpcXvddCen8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkh3WL64GSd6VBuemKPANEb92guMB8GA1UdIwQY
MBaAFCWolTlSAAQnDTQlO9wW2HeEFW4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgt
ZDAwNTI2YjkxNjA1LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgtZDAwNTI2YjkxNjA1
LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNPnIEwR
epJ+cWtivaxllHMBotbPxs0YyEEUSSD8pXtMMpEb4un0is3F4T9mjS7SmYiAnvJv
5lGincvu/iwFT1zrIoCK8ixMcT6X5lg0I6ZqTNSILugzXHwXDj9pxlSdyFpM2J+8
A1IiutzIsQFZI8OvcUpC+AOR5tWQLsaXPlEqxgIqfjti7ZWy6yW/Q4dmOBxpZlXU
/i7QdgajT4PvcUeGSQcbOmpyqURNMehdcyGHsIWnuYRNgPmwHg84OMzO6+jc2are
8QqyuugimRJ7RYEhAErhro4GzsBXj0AbVjlNSs6WMYWAsylW4VZFbCuHA6A/xtVg
/bVjHv9EyCMTSA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:43 2025 by rpki-client