Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File:                     JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier:          Ywy/8d94vOdAvf/UC5dU3oR+XhNTyxugAACDtdZvchc=
Subject key identifier:   AD:58:AC:EE:F7:E3:1D:1A:33:04:3B:0C:24:ED:66:C1:E2:AC:41:A6
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer:       /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial:       019780C413D73F3FDCEE1ED4953A047F5055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number:          1598
Signing time:             Wed 18 Jun 2025 02:00:23 +0000
Manifest this update:     Wed 18 Jun 2025 02:00:23 +0000
Manifest next update:     Thu 19 Jun 2025 02:00:23 +0000
Files and hashes:         1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
                          2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: Ur2G+9SoViLP7iWuopmGNLPN5CxG0mYIc6QpPbURqsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:c4:13:d7:3f:3f:dc:ee:1e:d4:95:3a:04:7f:50:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
        Validity
            Not Before: Jun 18 02:00:23 2025 GMT
            Not After : Jun 19 02:00:23 2025 GMT
        Subject: CN=ad58aceef7e31d1a33043b0c24ed66c1e2ac41a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:0f:da:c3:e2:9b:af:f2:5c:3b:06:b7:54:
                    4d:1c:91:b8:d0:a7:c9:20:8f:b9:f5:c5:5f:28:31:
                    3a:57:74:6d:4c:3b:48:f7:ff:72:db:92:c0:b7:31:
                    d1:da:95:c1:d9:12:aa:01:48:e6:4b:03:21:66:ef:
                    6e:03:ad:60:1b:d4:a9:f0:52:70:cd:93:78:e6:b5:
                    a2:95:3b:65:23:25:2b:d2:02:19:22:bc:d2:da:3a:
                    cc:fc:33:4c:65:a0:ea:34:a6:88:4d:d1:e1:ef:25:
                    f6:53:10:d8:6e:09:59:bd:68:a8:db:de:cf:71:fc:
                    20:17:72:13:a9:fe:ba:96:73:dd:12:33:1a:0c:35:
                    9e:f0:14:2e:a2:21:e3:73:74:f8:7a:0b:12:ad:f8:
                    5b:a8:7d:95:6d:63:a2:39:d3:cd:bb:61:68:f7:df:
                    27:05:ad:a1:d7:bd:3a:93:31:b6:5a:79:41:23:12:
                    62:3e:d1:ae:b7:db:c3:34:c0:93:cb:c8:09:23:e4:
                    81:99:09:ea:85:a3:1d:01:eb:36:8a:20:00:62:00:
                    65:5c:da:84:f2:07:94:d3:88:68:af:41:f1:da:6b:
                    3f:58:ed:d5:fa:89:c9:8c:3a:12:ae:74:58:b9:0e:
                    24:ec:4a:e5:1a:86:9f:17:67:81:5b:ad:6a:05:1c:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:58:AC:EE:F7:E3:1D:1A:33:04:3B:0C:24:ED:66:C1:E2:AC:41:A6
            X509v3 Authority Key Identifier:
                keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:24:cb:48:4d:40:c9:b5:22:99:21:dc:ac:db:12:e2:d0:b7:
         2d:27:3d:95:f6:21:ce:15:88:94:57:d2:9f:b3:b4:79:6e:18:
         72:67:34:da:05:9a:5e:31:a6:ac:97:6e:fa:32:c1:e6:52:1c:
         bf:fa:6b:18:d5:a7:8a:8a:91:3e:6c:78:58:4f:95:be:ec:d3:
         00:40:5a:70:db:39:75:04:52:ab:77:aa:fb:00:b9:e8:7d:f3:
         96:1e:cd:c0:07:7b:c6:41:1d:b0:cb:3a:c4:37:e6:8f:ec:c4:
         c3:7a:cd:c3:92:ad:08:18:b2:02:96:ef:eb:60:1d:82:7b:09:
         5c:9d:ab:13:37:ca:e0:18:f8:96:9a:85:ef:78:d2:27:49:5b:
         c0:2d:0b:63:8b:e5:40:ca:14:d4:60:ad:e2:f7:1a:69:74:20:
         1f:e8:01:dc:e0:df:2d:bd:f3:b4:58:56:d8:35:b1:83:cc:51:
         3d:87:f5:73:d0:a0:e7:54:24:7d:db:e9:fd:fd:d4:81:38:61:
         cd:02:5f:ef:39:dd:77:4d:cf:0a:65:43:a9:4d:55:29:b1:cf:
         5d:4a:20:20:46:69:3c:bb:ff:84:a6:e4:1b:c7:c6:e6:52:11:
         56:8f:75:2c:48:bb:37:e2:22:8d:3c:9d:8f:72:7f:2e:e2:e5:
         6d:d9:ef:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAxBPXPz/c7h7UlToEf1BVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDVhNGVkMTdhNjgxODQyMTAyY2M4ZjZlZjAzYTU2OWUx
NTYxMmEwHhcNMjUwNjE4MDIwMDIzWhcNMjUwNjE5MDIwMDIzWjAzMTEwLwYDVQQD
EyhhZDU4YWNlZWY3ZTMxZDFhMzMwNDNiMGMyNGVkNjZjMWUyYWM0MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlygP2sPim6/yXDsGt1RNHJG40KfJ
II+59cVfKDE6V3RtTDtI9/9y25LAtzHR2pXB2RKqAUjmSwMhZu9uA61gG9Sp8FJw
zZN45rWilTtlIyUr0gIZIrzS2jrM/DNMZaDqNKaITdHh7yX2UxDYbglZvWio297P
cfwgF3ITqf66lnPdEjMaDDWe8BQuoiHjc3T4egsSrfhbqH2VbWOiOdPNu2Fo998n
Ba2h1706kzG2WnlBIxJiPtGut9vDNMCTy8gJI+SBmQnqhaMdAes2iiAAYgBlXNqE
8geU04hor0Hx2ms/WO3V+onJjDoSrnRYuQ4k7ErlGoafF2eBW61qBRxn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1YrO734x0aMwQ7DCTtZsHirEGmMB8GA1UdIwQY
MBaAFCcFpO0XpoGEIQLMj27wOlaeFWEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUt
NjUzNjhmNDA4ZGEzLzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUtNjUzNjhmNDA4ZGEz
LzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCTLSE1A
ybUimSHcrNsS4tC3LSc9lfYhzhWIlFfSn7O0eW4Ycmc02gWaXjGmrJdu+jLB5lIc
v/prGNWnioqRPmx4WE+VvuzTAEBacNs5dQRSq3eq+wC56H3zlh7NwAd7xkEdsMs6
xDfmj+zEw3rNw5KtCBiyApbv62AdgnsJXJ2rEzfK4Bj4lpqF73jSJ0lbwC0LY4vl
QMoU1GCt4vcaaXQgH+gB3ODfLb3ztFhW2DWxg8xRPYf1c9Cg51Qkfdvp/f3UgThh
zQJf7zndd03PCmVDqU1VKbHPXUogIEZpPLv/hKbkG8fG5lIRVo91LEi7N+IijTyd
j3J/LuLlbdnvtA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:17:49 2025 by rpki-client