Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File:                     jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier:          pvjGA8PDNQCo2/UzNka/qkqmcyuIajl3chQNfpxqDRw=
Subject key identifier:   0B:07:EF:9A:78:84:87:91:5D:7F:30:7A:34:78:DF:25:49:45:19:E0
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       01964EC822BC365399D73B0326C46FE84BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number:          14FF
Signing time:             Sat 19 Apr 2025 16:01:01 +0000
Manifest this update:     Sat 19 Apr 2025 16:01:01 +0000
Manifest next update:     Sun 20 Apr 2025 16:01:01 +0000
Files and hashes:         1: 8DFREsz67roq72EhqNj788hY8vo.roa (hash: 0z/SHGgj6DLr9WZ0vWVXRQYl+WMBwxnXd13RzpBpoyE=)
                          2: gYXXaClMotLbmJoUOleGHhnd0Lw.roa (hash: FBHlvCazQHDRqfw7wpw/U/KCEUCJ9oh5ACEVfJCqvj4=)
                          3: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: cH2R8M+oCERwk8COr9gkPiWUPeIZ5bn+O0wykJEkT0Y=)
                          4: qbA_9GdwQHPtmS9g6PrCyj74AbM.roa (hash: bivTcz5xx7Jgw1fjpQZeDQON5L3d9aNyp2TKXc5yy2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c8:22:bc:36:53:99:d7:3b:03:26:c4:6f:e8:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Apr 19 16:01:01 2025 GMT
            Not After : Apr 20 16:01:01 2025 GMT
        Subject: CN=0b07ef9a788487915d7f307a3478df25494519e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:09:01:5a:28:6d:6f:3e:58:42:e9:22:9d:c7:
                    be:ea:ff:56:63:5a:fc:07:4a:1e:a9:98:7e:c1:28:
                    6e:6c:fc:e9:a1:d8:11:22:fb:1c:1c:45:7a:0f:46:
                    40:37:58:fb:71:a9:97:4c:3c:3f:f8:83:34:1c:9a:
                    98:4f:ae:be:c6:6d:5c:1a:2c:2d:d7:36:56:fc:b1:
                    53:ee:ee:e4:47:0e:b4:5d:0e:d9:b0:26:36:af:fc:
                    30:3e:4b:bc:48:3b:38:e7:94:92:04:20:de:cd:fb:
                    94:be:1b:18:d7:a7:a9:24:a1:63:d1:1c:29:21:f4:
                    7f:db:36:86:06:70:9d:7f:c5:1c:e0:ac:a3:f9:4f:
                    87:3e:d3:8d:7a:d1:b5:ae:9c:1d:7c:d7:a0:fc:72:
                    86:56:ca:b9:5e:73:39:c4:0d:51:6f:4f:30:cc:8e:
                    f6:a6:5c:d4:1f:ff:71:86:d4:b0:ac:01:ee:4f:48:
                    f1:a6:93:2e:32:c0:d5:16:eb:9a:14:a0:b2:b7:97:
                    16:33:cf:d3:42:aa:ae:e9:1f:f1:63:b1:15:a9:f3:
                    90:c0:62:3c:6c:21:69:e1:0b:5a:43:2f:9e:58:66:
                    1b:84:8c:6c:a4:3a:3f:84:21:4e:1d:a9:95:d4:8a:
                    3a:10:d7:ff:3b:c5:62:a8:9d:8a:d4:91:cd:7b:d8:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:07:EF:9A:78:84:87:91:5D:7F:30:7A:34:78:DF:25:49:45:19:E0
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c3:33:95:49:08:d2:01:04:d2:c1:59:de:51:e0:73:bc:69:
         5b:db:0f:a3:d7:5c:ac:4f:da:0f:67:33:d8:a4:da:15:27:9c:
         29:4b:26:8e:bf:16:fc:4b:4e:6f:0f:05:bc:b7:79:c4:f2:16:
         46:00:b2:09:d6:29:61:17:e7:df:f1:c8:a5:f3:84:33:1a:c1:
         29:c1:e7:e2:fb:64:4a:7a:ef:01:4d:9e:0f:a5:ef:cf:5e:5a:
         cd:2b:61:94:24:ab:c9:6f:ad:26:17:49:01:8f:dc:f0:18:1d:
         ba:53:60:5e:ab:d4:a2:32:5c:3e:ed:3c:3b:cf:85:b3:de:40:
         7d:51:b4:9c:12:70:85:d0:f8:39:21:9b:a2:00:6c:68:1a:91:
         46:59:de:1c:37:81:c1:11:c0:ef:87:84:6c:f6:b7:2d:bb:50:
         8a:6f:7a:a9:08:6d:f5:5a:15:53:9f:17:34:49:ba:5a:8f:38:
         24:33:b2:fc:e9:0f:2d:67:35:26:94:a0:3a:37:10:72:ab:70:
         cf:14:99:2d:0b:f9:f9:8e:64:c3:c7:95:ca:02:df:d7:93:ce:
         a9:7e:c5:d7:02:c4:36:16:cd:a8:bf:37:5c:51:7d:77:f0:04:
         39:06:ba:05:05:3a:4f:a3:6a:82:4b:91:ad:17:7d:db:fb:30:
         27:24:d5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOyCK8NlOZ1zsDJsRv6Ev+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl
YmQ2MWMwHhcNMjUwNDE5MTYwMTAxWhcNMjUwNDIwMTYwMTAxWjAzMTEwLwYDVQQD
EygwYjA3ZWY5YTc4ODQ4NzkxNWQ3ZjMwN2EzNDc4ZGYyNTQ5NDUxOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AkBWihtbz5YQukince+6v9WY1r8
B0oeqZh+wShubPzpodgRIvscHEV6D0ZAN1j7camXTDw/+IM0HJqYT66+xm1cGiwt
1zZW/LFT7u7kRw60XQ7ZsCY2r/wwPku8SDs455SSBCDezfuUvhsY16epJKFj0Rwp
IfR/2zaGBnCdf8Uc4Kyj+U+HPtONetG1rpwdfNeg/HKGVsq5XnM5xA1Rb08wzI72
plzUH/9xhtSwrAHuT0jxppMuMsDVFuuaFKCyt5cWM8/TQqqu6R/xY7EVqfOQwGI8
bCFp4QtaQy+eWGYbhIxspDo/hCFOHamV1Io6ENf/O8ViqJ2K1JHNe9h0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsH75p4hIeRXX8wejR43yVJRRngMB8GA1UdIwQY
MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt
MGJkOWRkZjM5NzBlLzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl
LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMMzlUkI
0gEE0sFZ3lHgc7xpW9sPo9dcrE/aD2cz2KTaFSecKUsmjr8W/EtObw8FvLd5xPIW
RgCyCdYpYRfn3/HIpfOEMxrBKcHn4vtkSnrvAU2eD6Xvz15azSthlCSryW+tJhdJ
AY/c8BgdulNgXqvUojJcPu08O8+Fs95AfVG0nBJwhdD4OSGbogBsaBqRRlneHDeB
wRHA74eEbPa3LbtQim96qQht9VoVU58XNEm6Wo84JDOy/OkPLWc1JpSgOjcQcqtw
zxSZLQv5+Y5kw8eVygLf15POqX7F1wLENhbNqL83XFF9d/AEOQa6BQU6T6NqgkuR
rRd92/swJyTVpw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:13 2025 by rpki-client