Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          mo8/eC41QX4KCipSLek5WOVqR6KOkrJvRdm9b6GzJE8=
Subject key identifier:   62:00:82:78:EB:FD:32:02:37:E6:CC:97:2D:AA:8D:18:1A:5A:D2:99
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       01977BD4B6EBBB61EDC753370BC176FFCD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          1597
Signing time:             Tue 17 Jun 2025 03:00:27 +0000
Manifest this update:     Tue 17 Jun 2025 03:00:27 +0000
Manifest next update:     Wed 18 Jun 2025 03:00:27 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: WKsVeYCM/VwWCfFkcOJjJtWIcc7Bb3X68D/9cXwllXw=)
                          2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:d4:b6:eb:bb:61:ed:c7:53:37:0b:c1:76:ff:cd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: Jun 17 03:00:27 2025 GMT
            Not After : Jun 18 03:00:27 2025 GMT
        Subject: CN=62008278ebfd320237e6cc972daa8d181a5ad299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:14:07:c5:2e:4e:63:21:f9:6d:ba:01:58:
                    67:7c:98:63:4f:04:78:39:17:f7:92:34:ee:d4:d9:
                    a0:cc:d7:82:15:61:18:24:55:e8:30:c2:87:75:65:
                    43:9a:2a:2a:75:67:96:11:4f:b2:7a:6f:dc:36:ad:
                    47:b1:4d:91:ef:99:19:f2:6b:8a:79:5e:4d:1a:e5:
                    8b:11:fa:49:0f:ec:e7:a9:72:76:44:9a:88:8e:64:
                    12:8f:09:54:bc:c8:a1:f8:4e:ee:b6:87:2a:c9:13:
                    d7:18:08:0f:96:49:28:5f:79:5e:4d:fe:67:f4:aa:
                    ac:17:25:18:40:df:e1:d3:24:1e:11:6f:8e:c5:89:
                    ff:e9:ba:b8:3e:01:5c:98:82:fb:38:ba:c4:b3:d1:
                    9b:ad:94:d6:fd:ce:13:70:28:8d:c1:8d:71:3b:0c:
                    75:03:d9:a2:64:3e:cb:fd:6b:2d:d2:ad:37:98:a8:
                    64:8b:f3:ad:89:c4:e2:e9:ca:ee:7a:ed:12:24:c0:
                    35:9d:84:ff:46:8d:ae:91:cc:d5:ea:0f:e6:74:50:
                    53:c1:e3:eb:08:e0:ce:aa:8c:0a:03:f0:2a:45:63:
                    8f:67:88:7b:f6:29:36:a3:73:9d:e5:66:b9:d8:3a:
                    17:9d:34:1e:87:36:47:58:8c:57:d8:32:32:f5:61:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:00:82:78:EB:FD:32:02:37:E6:CC:97:2D:AA:8D:18:1A:5A:D2:99
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:39:6e:dd:e2:7e:55:fa:73:4b:7d:78:ee:08:6b:99:fb:c1:
         dc:5a:6d:cb:4c:8b:50:84:2b:8f:10:ad:03:6f:4d:21:dc:a8:
         21:71:f5:3c:8d:a9:b6:e8:1a:9f:66:06:65:45:2c:ed:53:51:
         7e:c6:e8:e3:48:a9:14:92:04:82:b5:86:53:f0:d6:4d:3c:83:
         10:e2:35:35:74:c2:ef:4f:47:13:87:0d:7d:84:15:a9:74:79:
         4d:eb:10:ca:37:34:08:8d:1a:32:ca:a1:e0:ba:f2:06:90:2a:
         05:94:6d:8f:25:03:b9:26:c8:46:fe:f2:2a:44:70:86:c5:9d:
         5a:8b:9f:b3:7e:42:6e:0e:ac:84:5f:9a:43:f2:13:0b:ea:05:
         ff:71:94:4c:65:6a:53:7b:58:0c:f6:ad:d4:70:2e:f2:fd:3a:
         1c:b3:9b:e1:07:6e:76:17:43:54:37:43:d8:dc:4b:c0:56:0a:
         16:67:d9:7d:fc:d5:14:3d:72:e6:f1:6e:e5:6b:23:2f:e1:9d:
         28:29:ee:32:90:7d:a2:2f:4c:41:79:ea:bb:f4:9a:49:a4:99:
         7b:2f:12:ee:af:12:64:36:22:9b:cc:22:bb:e3:5e:52:c2:cc:
         c9:9b:94:a5:e1:1a:4d:48:ec:16:07:4c:b8:33:cd:94:96:e1:
         5e:98:ec:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd71Lbru2Htx1M3C8F2/81rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1
YTE3N2QwHhcNMjUwNjE3MDMwMDI3WhcNMjUwNjE4MDMwMDI3WjAzMTEwLwYDVQQD
Eyg2MjAwODI3OGViZmQzMjAyMzdlNmNjOTcyZGFhOGQxODFhNWFkMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjMUB8UuTmMh+W26AVhnfJhjTwR4
ORf3kjTu1NmgzNeCFWEYJFXoMMKHdWVDmioqdWeWEU+yem/cNq1HsU2R75kZ8muK
eV5NGuWLEfpJD+znqXJ2RJqIjmQSjwlUvMih+E7utocqyRPXGAgPlkkoX3leTf5n
9KqsFyUYQN/h0yQeEW+OxYn/6bq4PgFcmIL7OLrEs9GbrZTW/c4TcCiNwY1xOwx1
A9miZD7L/Wst0q03mKhki/OticTi6crueu0SJMA1nYT/Ro2ukczV6g/mdFBTwePr
CODOqowKA/AqRWOPZ4h79ik2o3Od5Wa52DoXnTQehzZHWIxX2DIy9WE9OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIAgnjr/TICN+bMly2qjRgaWtKZMB8GA1UdIwQY
MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt
ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi
LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETlu3eJ+
VfpzS3147ghrmfvB3Fpty0yLUIQrjxCtA29NIdyoIXH1PI2ptugan2YGZUUs7VNR
fsbo40ipFJIEgrWGU/DWTTyDEOI1NXTC709HE4cNfYQVqXR5TesQyjc0CI0aMsqh
4LryBpAqBZRtjyUDuSbIRv7yKkRwhsWdWoufs35Cbg6shF+aQ/ITC+oF/3GUTGVq
U3tYDPat1HAu8v06HLOb4QdudhdDVDdD2NxLwFYKFmfZffzVFD1y5vFu5WsjL+Gd
KCnuMpB9oi9MQXnqu/SaSaSZey8S7q8SZDYim8wiu+NeUsLMyZuUpeEaTUjsFgdM
uDPNlJbhXpjsWQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 05:03:05 2025 by rpki-client