Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          +qMLUmV5PlYQJkxESRYn9+NinfEB7oZl2hbCRnHokA8=
Subject key identifier:   B4:A7:30:C7:B0:69:F3:11:4B:CB:D0:8A:0C:F9:AC:68:7F:55:D9:5A
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       0197808E94FCFDF44C1D470D4382D319E087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          159E
Signing time:             Wed 18 Jun 2025 01:01:57 +0000
Manifest this update:     Wed 18 Jun 2025 01:01:57 +0000
Manifest next update:     Thu 19 Jun 2025 01:01:57 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: ABIziFF7Ino23eoZPqLx8FnJQUlRgNRBoPBwTKNWP3g=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:8e:94:fc:fd:f4:4c:1d:47:0d:43:82:d3:19:e0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Jun 18 01:01:57 2025 GMT
            Not After : Jun 19 01:01:57 2025 GMT
        Subject: CN=b4a730c7b069f3114bcbd08a0cf9ac687f55d95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:e3:a7:cd:8b:e8:7d:d1:e3:c0:23:50:ae:
                    14:1d:e2:cc:40:21:54:55:a4:6c:9a:f1:91:6f:28:
                    73:b4:25:37:b5:81:f2:15:05:82:5d:1e:7e:8e:43:
                    4d:31:9e:2a:d9:d2:f7:d5:af:11:10:fd:eb:ab:96:
                    60:ac:38:f2:a8:dd:6c:2b:65:18:97:69:07:b0:f0:
                    1e:bf:f1:3f:40:3b:17:72:9e:2a:89:aa:d4:bc:2a:
                    57:76:82:bd:fa:9e:5b:00:ac:d4:75:e4:91:d2:6b:
                    86:79:c8:6e:28:bb:11:57:1c:70:84:50:86:2f:b7:
                    9e:26:3f:a2:a6:26:1d:19:9d:4c:d3:8f:54:95:c0:
                    9c:76:b0:8b:c5:5a:99:e7:10:91:0a:5e:2d:11:5d:
                    1d:68:82:ed:52:02:54:26:44:3d:fd:05:52:db:c7:
                    73:ea:31:e0:92:74:65:e7:01:76:45:4f:49:b7:5a:
                    d5:40:76:c5:51:ba:67:a0:84:36:64:6e:aa:c5:e7:
                    4d:c4:23:85:cf:97:21:34:00:fa:14:ae:48:fc:3d:
                    2a:ec:63:8f:10:4e:96:fb:64:ab:58:d6:1a:27:8f:
                    0c:16:8a:f9:12:ba:a5:f9:3c:2a:3b:bc:b3:88:6f:
                    8e:eb:dd:db:bc:3c:f0:52:13:1a:c2:6e:4b:f3:25:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A7:30:C7:B0:69:F3:11:4B:CB:D0:8A:0C:F9:AC:68:7F:55:D9:5A
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:66:24:2b:d3:7f:89:4b:ca:49:69:68:b6:e4:52:80:a3:
         c4:1e:9d:32:fc:57:38:f6:67:2d:ee:ea:f4:ef:e0:5c:f4:25:
         3a:af:63:15:b2:a2:8e:1c:67:7e:8a:41:7a:cc:a8:30:18:fb:
         d7:02:f6:14:7b:88:4e:10:48:89:f3:1f:3e:0f:55:90:d4:e8:
         94:fd:63:dd:4e:84:14:94:25:7f:29:df:78:7b:f4:52:5a:35:
         77:25:e5:86:fe:4f:1e:13:f5:d1:65:ea:cc:46:b5:ea:88:5d:
         c4:cd:a8:65:eb:16:b2:b7:06:b3:8f:9b:f0:18:8f:0c:84:c2:
         12:f2:c1:b6:27:d4:ee:07:39:69:6c:e4:b3:7c:3c:ea:82:68:
         95:d7:79:45:b0:fb:c3:0d:db:e3:c7:be:9d:e5:03:f3:41:5c:
         03:63:e0:c5:f2:1d:a3:6d:8b:8f:04:19:05:4d:c0:b0:ca:21:
         01:6f:46:6c:cd:b3:2b:e1:b3:12:44:ae:83:9f:8c:6b:11:39:
         db:84:0a:4a:ad:d8:be:1a:9d:d0:c7:b8:a7:52:9f:62:30:d5:
         17:86:66:80:98:56:f2:da:9b:b3:d8:a9:ce:3b:e4:23:dc:39:
         ea:d5:e7:dd:34:0c:7d:aa:a6:82:88:c1:05:49:e9:e4:7b:00:
         c4:ba:36:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAjpT8/fRMHUcNQ4LTGeCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0OGY1ZTI2ZjFjMDhmNDQ4NmM5OTExYzhiNjA5ZWFlOGI2
Y2I3NGQwHhcNMjUwNjE4MDEwMTU3WhcNMjUwNjE5MDEwMTU3WjAzMTEwLwYDVQQD
EyhiNGE3MzBjN2IwNjlmMzExNGJjYmQwOGEwY2Y5YWM2ODdmNTVkOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYTjp82L6H3R48AjUK4UHeLMQCFU
VaRsmvGRbyhztCU3tYHyFQWCXR5+jkNNMZ4q2dL31a8REP3rq5ZgrDjyqN1sK2UY
l2kHsPAev/E/QDsXcp4qiarUvCpXdoK9+p5bAKzUdeSR0muGechuKLsRVxxwhFCG
L7eeJj+ipiYdGZ1M049UlcCcdrCLxVqZ5xCRCl4tEV0daILtUgJUJkQ9/QVS28dz
6jHgknRl5wF2RU9Jt1rVQHbFUbpnoIQ2ZG6qxedNxCOFz5chNAD6FK5I/D0q7GOP
EE6W+2SrWNYaJ48MFor5Erql+TwqO7yziG+O693bvDzwUhMawm5L8yVI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSnMMewafMRS8vQigz5rGh/VdlaMB8GA1UdIwQY
MBaAFCSPXibxwI9EhsmRHItgnq6LbLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYt
MDEzN2IxZjc1ZDAyLzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYtMDEzN2IxZjc1ZDAy
LzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6pmJCvT
f4lLyklpaLbkUoCjxB6dMvxXOPZnLe7q9O/gXPQlOq9jFbKijhxnfopBesyoMBj7
1wL2FHuIThBIifMfPg9VkNTolP1j3U6EFJQlfynfeHv0Ulo1dyXlhv5PHhP10WXq
zEa16ohdxM2oZesWsrcGs4+b8BiPDITCEvLBtifU7gc5aWzks3w86oJoldd5RbD7
ww3b48e+neUD80FcA2PgxfIdo22LjwQZBU3AsMohAW9GbM2zK+GzEkSug5+MaxE5
24QKSq3Yvhqd0Me4p1KfYjDVF4ZmgJhW8tqbs9ipzjvkI9w56tXn3TQMfaqmgojB
BUnp5HsAxLo2aA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:01:59 2025 by rpki-client