Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File:                     jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier:          0KOkvf5DsYIDdoPItHR7z9EbNlTiIkYzOt8xQP1s3cY=
Subject key identifier:   0A:0A:29:E6:B7:66:3D:30:94:94:FE:09:29:D0:6E:B2:0A:6F:43:AE
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer:       /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial:       01987DC1248BCB09DDF7DDC2629B4EE2953A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number:          0C1C
Signing time:             Wed 06 Aug 2025 05:01:06 +0000
Manifest this update:     Wed 06 Aug 2025 05:01:06 +0000
Manifest next update:     Thu 07 Aug 2025 05:01:06 +0000
Files and hashes:         1: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: v9hEMR60lYhJeg0JHsjh1aFZzyXlYcEy84f5Z5gouRM=)
                          2: ySlLPEF0_k8P8U6yS6zwOctOeEs.roa (hash: r8YWQ1xdm6QLIVkwwxYzXaqNSyOxkQhbcdOP2vA+IBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c1:24:8b:cb:09:dd:f7:dd:c2:62:9b:4e:e2:95:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
        Validity
            Not Before: Aug  6 05:01:06 2025 GMT
            Not After : Aug  7 05:01:06 2025 GMT
        Subject: CN=0a0a29e6b7663d309494fe0929d06eb20a6f43ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:83:be:01:14:ef:f8:fe:7e:80:54:80:25:
                    a3:80:33:8e:01:87:99:cd:ea:3b:a7:09:01:8a:1d:
                    0a:56:d6:5c:d9:4b:01:e6:31:0e:8c:2b:ab:12:44:
                    59:69:15:d8:5c:d3:e1:54:ba:a1:1f:b7:1f:2a:fb:
                    e7:a3:a9:65:72:d6:a4:9c:76:e0:a0:09:8e:dc:47:
                    7f:5a:ea:7f:41:89:3e:f9:b0:54:75:85:20:d2:61:
                    49:27:dc:8a:9f:32:52:5b:95:e9:6f:2c:45:98:3e:
                    ca:d2:7f:3c:02:de:dc:f2:3a:df:30:38:ec:2a:6b:
                    f0:cb:b5:11:6c:a9:68:a7:5e:a6:8c:06:a2:44:dc:
                    96:7e:35:1c:41:0f:5b:cd:44:60:62:f0:ac:ea:95:
                    30:12:5b:50:61:7c:37:83:17:0e:5b:16:c8:24:70:
                    d2:0f:fd:0c:4a:c9:2a:8f:22:84:43:7f:2b:e8:6d:
                    c5:5d:81:be:ba:69:f2:42:a2:a7:55:25:2e:08:6b:
                    f1:20:24:c2:e8:47:84:61:71:50:1b:e8:a4:45:ee:
                    94:3b:19:3e:f0:94:67:fa:76:0b:3e:8b:f6:cc:04:
                    a6:20:4a:4a:f2:51:a6:39:71:33:32:3c:7f:77:a5:
                    a0:ff:fe:19:4a:60:ac:c3:07:ba:2a:a3:c2:82:e0:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:29:E6:B7:66:3D:30:94:94:FE:09:29:D0:6E:B2:0A:6F:43:AE
            X509v3 Authority Key Identifier:
                keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:af:f7:15:b5:72:8b:4c:ba:c0:21:c8:8f:f4:6c:74:be:
         55:db:fd:e8:84:86:65:91:37:c3:cf:9e:21:79:ce:f2:7c:fe:
         b6:01:b6:7a:c0:2c:a0:bc:ec:f5:56:19:4a:88:c9:ec:50:8b:
         35:11:45:9a:5e:13:2a:04:0f:9b:8a:83:d0:44:f7:a3:29:4d:
         7d:5f:de:5d:45:6f:a7:2b:2c:fd:72:45:a0:55:21:dd:45:88:
         01:52:68:15:2c:57:f6:bb:56:4e:39:11:dc:26:b2:48:fb:4c:
         7e:37:0c:43:b0:1d:66:87:b1:94:90:b1:6e:06:0f:01:ce:bc:
         72:e8:4b:78:39:e4:9c:68:b7:60:e3:03:3c:76:42:ba:67:36:
         c1:64:a8:75:44:56:26:de:45:b5:61:51:0a:13:c9:cd:57:40:
         01:7c:b5:6c:49:9a:08:ec:4a:c6:7c:d9:cd:40:8e:a6:85:ec:
         f3:93:93:0a:c5:3a:93:bb:94:67:62:b1:cf:9f:08:0d:05:52:
         f8:f3:dc:2d:14:d8:57:25:1c:01:bd:84:60:4d:ec:5b:c7:79:
         88:77:e5:55:a1:c1:52:16:0e:b4:f3:4a:7a:41:2a:fa:0a:6d:
         4e:f4:a7:83:db:98:2c:7e:ef:48:d0:3d:b9:b2:dd:53:7f:df:
         16:93:9c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wSSLywnd993CYptO4pU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzk1YWZmNzhiZDIxZGQ4ZTliZDVmNDUxZGZjOGY4MDJl
ZjY5MTYwHhcNMjUwODA2MDUwMTA2WhcNMjUwODA3MDUwMTA2WjAzMTEwLwYDVQQD
EygwYTBhMjllNmI3NjYzZDMwOTQ5NGZlMDkyOWQwNmViMjBhNmY0M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5SDvgEU7/j+foBUgCWjgDOOAYeZ
zeo7pwkBih0KVtZc2UsB5jEOjCurEkRZaRXYXNPhVLqhH7cfKvvno6llctaknHbg
oAmO3Ed/Wup/QYk++bBUdYUg0mFJJ9yKnzJSW5XpbyxFmD7K0n88At7c8jrfMDjs
Kmvwy7URbKlop16mjAaiRNyWfjUcQQ9bzURgYvCs6pUwEltQYXw3gxcOWxbIJHDS
D/0MSskqjyKEQ38r6G3FXYG+umnyQqKnVSUuCGvxICTC6EeEYXFQG+ikRe6UOxk+
8JRn+nYLPov2zASmIEpK8lGmOXEzMjx/d6Wg//4ZSmCswwe6KqPCguDxzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoKKea3Zj0wlJT+CSnQbrIKb0OuMB8GA1UdIwQY
MBaAFI7JWv94vSHdjpvV9FHfyPgC72kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYt
OTNkMGIwMGU3ZTA0LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYtOTNkMGIwMGU3ZTA0
LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9iv9xW1
cotMusAhyI/0bHS+Vdv96ISGZZE3w8+eIXnO8nz+tgG2esAsoLzs9VYZSojJ7FCL
NRFFml4TKgQPm4qD0ET3oylNfV/eXUVvpyss/XJFoFUh3UWIAVJoFSxX9rtWTjkR
3CaySPtMfjcMQ7AdZoexlJCxbgYPAc68cuhLeDnknGi3YOMDPHZCumc2wWSodURW
Jt5FtWFRChPJzVdAAXy1bEmaCOxKxnzZzUCOpoXs85OTCsU6k7uUZ2Kxz58IDQVS
+PPcLRTYVyUcAb2EYE3sW8d5iHflVaHBUhYOtPNKekEq+gptTvSng9uYLH7vSNA9
ubLdU3/fFpOcNA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:05 2025 by rpki-client