Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File:                     jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier:          TsH/m8RP/QcDltzM6vzj42ZtFsjn6qnMWBYwfotnyU0=
Subject key identifier:   E2:17:A1:2D:39:EA:0F:A6:7E:F9:51:D6:2A:86:0F:83:14:5F:9D:F6
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer:       /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial:       01976C2AE5211825B0D535AB1F6747D44154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number:          081A
Signing time:             Sat 14 Jun 2025 02:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:39 +0000
Files and hashes:         1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
                          2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: Vd2eDJdJobn4kLuiEhER6lzh44t+m6nEycsDWCaz7tE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:e5:21:18:25:b0:d5:35:ab:1f:67:47:d4:41:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
        Validity
            Not Before: Jun 14 02:00:39 2025 GMT
            Not After : Jun 15 02:00:39 2025 GMT
        Subject: CN=e217a12d39ea0fa67ef951d62a860f83145f9df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:56:17:97:98:dc:ec:13:ee:19:13:1c:97:
                    b3:05:1e:5e:0b:1a:07:3d:ea:31:05:70:d1:82:65:
                    38:7a:13:0d:3d:93:2b:3f:5e:45:e7:5a:8e:e6:6d:
                    58:ef:32:18:a6:bc:64:d0:30:85:0e:d7:13:af:16:
                    27:ec:12:db:ec:55:43:2d:24:37:9c:b5:f0:bc:00:
                    80:2a:14:2c:3e:97:91:a1:89:9a:3f:36:d5:c9:4b:
                    a0:ad:a2:f9:da:11:ac:4f:c9:d1:21:26:60:7f:04:
                    15:80:a2:4f:57:13:99:3c:57:01:7e:b8:62:5b:9e:
                    ae:87:a2:0d:54:4f:db:1b:68:43:52:4e:98:29:52:
                    c4:06:e6:ca:61:fd:d7:74:e0:17:47:c8:88:39:ce:
                    bd:d3:26:76:10:1b:e9:44:b4:2e:3d:a7:34:be:1b:
                    89:26:3a:4d:4f:15:c3:dd:e9:75:8c:78:d6:65:eb:
                    b8:d5:f4:7f:92:e1:52:d3:da:24:a1:f7:af:da:c7:
                    9f:8f:3b:ef:0a:9a:7f:93:8d:3a:fa:af:a5:27:8d:
                    f5:00:0f:40:dd:18:aa:27:40:db:db:00:00:fc:bc:
                    21:76:57:4a:6e:bb:6b:c3:f2:05:48:d9:2c:a6:17:
                    00:58:76:c3:a5:e8:7a:97:6d:9c:ff:31:47:89:de:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:17:A1:2D:39:EA:0F:A6:7E:F9:51:D6:2A:86:0F:83:14:5F:9D:F6
            X509v3 Authority Key Identifier:
                keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9d:58:66:b7:04:44:91:c7:45:5e:2f:8c:69:c8:f2:ff:01:
         05:4b:a2:71:08:c5:35:dd:16:3f:b3:d5:c8:2b:f1:b5:98:1a:
         da:63:d2:fd:1c:86:89:61:9d:e4:c5:a7:95:d5:50:bb:74:d9:
         b0:73:06:05:28:72:00:ff:5a:1f:2f:df:ea:d6:ff:82:81:fd:
         4b:30:b4:7b:3f:06:c5:4e:b0:00:1c:ca:e1:ec:cb:40:ad:c5:
         19:03:47:44:33:c7:92:2b:34:dd:13:42:19:fa:96:6b:61:20:
         1e:71:9d:f6:42:77:39:ac:a2:18:50:8f:8d:f1:38:7f:99:94:
         43:65:0f:8e:c1:2e:86:84:f3:65:29:3e:92:6e:d5:fe:f7:2f:
         4d:a6:e3:64:2c:20:2b:3a:51:72:2c:dc:20:c1:3e:12:9b:df:
         d5:4a:48:a1:00:9d:41:9f:f9:8d:eb:6e:af:ac:f4:ea:7e:d5:
         53:0b:d2:bc:71:eb:1a:ef:b0:00:1a:f8:cd:a5:32:bb:a7:82:
         3e:3b:7a:12:1c:fa:b6:fb:2f:f5:58:46:a1:ec:24:56:cb:8d:
         17:04:0b:9a:f8:c8:dd:f5:01:19:46:8c:45:db:9d:10:bd:fb:
         d9:90:04:57:09:fa:f7:5d:5d:97:4d:c9:4b:2b:3b:af:05:5a:
         63:6c:0a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKuUhGCWw1TWrH2dH1EFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTU2YjUyYjhlNGU3MDlmYTU2OWI1YWUzNzJjNmUyODI2
NmYyMzIwHhcNMjUwNjE0MDIwMDM5WhcNMjUwNjE1MDIwMDM5WjAzMTEwLwYDVQQD
EyhlMjE3YTEyZDM5ZWEwZmE2N2VmOTUxZDYyYTg2MGY4MzE0NWY5ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIlWF5eY3OwT7hkTHJezBR5eCxoH
PeoxBXDRgmU4ehMNPZMrP15F51qO5m1Y7zIYprxk0DCFDtcTrxYn7BLb7FVDLSQ3
nLXwvACAKhQsPpeRoYmaPzbVyUugraL52hGsT8nRISZgfwQVgKJPVxOZPFcBfrhi
W56uh6INVE/bG2hDUk6YKVLEBubKYf3XdOAXR8iIOc690yZ2EBvpRLQuPac0vhuJ
JjpNTxXD3el1jHjWZeu41fR/kuFS09okofev2sefjzvvCpp/k406+q+lJ431AA9A
3RiqJ0Db2wAA/LwhdldKbrtrw/IFSNksphcAWHbDpeh6l22c/zFHid7xAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIXoS056g+mfvlR1iqGD4MUX532MB8GA1UdIwQY
MBaAFI5Va1K45OcJ+labWuNyxuKCZvIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMt
Y2RlNzAyYzBlYzhiLzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMtY2RlNzAyYzBlYzhi
LzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs51YZrcE
RJHHRV4vjGnI8v8BBUuicQjFNd0WP7PVyCvxtZga2mPS/RyGiWGd5MWnldVQu3TZ
sHMGBShyAP9aHy/f6tb/goH9SzC0ez8GxU6wABzK4ezLQK3FGQNHRDPHkis03RNC
GfqWa2EgHnGd9kJ3OayiGFCPjfE4f5mUQ2UPjsEuhoTzZSk+km7V/vcvTabjZCwg
KzpRcizcIME+Epvf1UpIoQCdQZ/5jetur6z06n7VUwvSvHHrGu+wABr4zaUyu6eC
Pjt6Ehz6tvsv9VhGoewkVsuNFwQLmvjI3fUBGUaMRdudEL372ZAEVwn6911dl03J
Sys7rwVaY2wKjg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:10 2025 by rpki-client