Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File:                     JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier:          hQlBBY35G4Qq5Q7pEAFvhEDTxjoNYhJSIoGooxM124k=
Subject key identifier:   BB:6E:9A:01:C1:4C:52:C5:4A:6B:63:46:7D:4C:53:D3:D7:41:9B:8C
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer:       /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial:       0197759C6EAAD32D9A17E3A1ECB2ECA1C17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number:          1595
Signing time:             Sun 15 Jun 2025 22:01:15 +0000
Manifest this update:     Sun 15 Jun 2025 22:01:15 +0000
Manifest next update:     Mon 16 Jun 2025 22:01:15 +0000
Files and hashes:         1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
                          2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: DZRNByYlQ7f6LwphscumqRldr+kZP4+lRGJVveFxxDc=)
                          3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
                          4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:9c:6e:aa:d3:2d:9a:17:e3:a1:ec:b2:ec:a1:c1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
        Validity
            Not Before: Jun 15 22:01:15 2025 GMT
            Not After : Jun 16 22:01:15 2025 GMT
        Subject: CN=bb6e9a01c14c52c54a6b63467d4c53d3d7419b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:58:ff:ef:b0:77:b6:de:81:07:c1:5b:56:
                    23:d2:b1:59:73:f8:96:e7:80:fa:ff:78:77:3b:f4:
                    12:14:bb:d6:c1:da:f2:52:df:ec:b6:54:37:05:75:
                    40:dc:54:6f:bd:d4:94:80:42:1a:8d:dd:a8:08:c1:
                    b3:a9:b0:64:9d:e7:34:7a:ca:33:84:b2:ef:fa:ed:
                    37:9f:8f:93:82:dd:2a:9a:5e:58:63:00:da:f0:09:
                    53:34:a0:c9:00:7f:e6:63:f4:64:7e:ea:3e:1f:d2:
                    c7:06:14:fa:9b:4d:cb:4c:94:e4:24:05:08:02:fe:
                    9b:c1:68:93:45:10:d4:fc:63:d8:cf:ae:d8:d5:52:
                    38:14:56:a6:20:c4:98:3f:00:43:a5:61:8b:bf:e5:
                    9f:22:71:4a:2e:e7:fd:13:c1:80:10:81:9e:04:5c:
                    eb:e8:63:30:42:99:9f:2c:9b:70:5c:4e:4f:02:b9:
                    e5:b6:9c:3a:af:a9:af:33:36:f4:ec:62:45:7c:be:
                    42:be:e7:a6:57:70:aa:e0:86:25:53:a4:d2:8a:69:
                    e0:2f:06:79:9b:df:42:5d:b2:25:45:cc:9a:f7:b4:
                    12:6c:c5:86:ae:0b:88:b4:23:70:ae:9a:f6:82:2a:
                    ca:8f:34:24:71:d6:11:8e:60:57:5b:1e:46:98:6a:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6E:9A:01:C1:4C:52:C5:4A:6B:63:46:7D:4C:53:D3:D7:41:9B:8C
            X509v3 Authority Key Identifier:
                keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2e:51:54:90:05:bd:5c:d5:a6:14:b2:9d:ea:f0:17:08:20:
         a8:8c:4a:18:70:43:00:c5:7d:9e:da:89:63:77:aa:af:a5:6f:
         ec:12:19:16:52:88:42:7a:52:97:b4:9e:3f:af:df:0c:b9:c6:
         73:03:62:cb:cc:2c:57:97:5b:96:b4:68:99:6b:3d:e8:cb:48:
         9d:c4:9d:c6:86:f4:4d:a2:65:a3:35:ba:8d:11:07:06:4b:d6:
         6d:10:b3:5a:4b:d6:7b:6c:03:04:44:4b:c0:dd:ed:09:77:dd:
         14:55:6f:8c:d5:87:3e:af:10:f0:d8:c9:f6:c6:d9:76:b7:60:
         48:7f:39:65:08:86:d3:53:11:03:52:0e:74:cc:06:f2:41:04:
         64:b2:5a:dc:42:18:40:25:f1:19:2b:a7:6f:b5:8c:b0:dd:50:
         c3:b7:74:25:99:95:83:24:57:ac:59:ef:2f:2e:e7:e7:b1:b7:
         3c:fd:62:d5:a5:5b:04:c8:c0:8c:bd:59:bc:c4:d8:b2:fa:42:
         50:84:a2:b5:34:01:75:8e:7f:99:53:72:08:98:57:74:bf:4e:
         27:15:b5:b6:48:ad:57:11:a6:ca:0d:e9:e7:7b:2b:78:14:c5:
         08:91:b9:bf:ab:69:f0:97:8b:29:41:68:e2:2a:8d:43:13:d7:
         df:94:d2:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1nG6q0y2aF+Oh7LLsocF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDM4MjkzZjY2OWRiNDhiNmQwYmQxMDM2YWRmZGVmNmJk
M2QzNzUwHhcNMjUwNjE1MjIwMTE1WhcNMjUwNjE2MjIwMTE1WjAzMTEwLwYDVQQD
EyhiYjZlOWEwMWMxNGM1MmM1NGE2YjYzNDY3ZDRjNTNkM2Q3NDE5YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubtY/++wd7begQfBW1Yj0rFZc/iW
54D6/3h3O/QSFLvWwdryUt/stlQ3BXVA3FRvvdSUgEIajd2oCMGzqbBknec0esoz
hLLv+u03n4+Tgt0qml5YYwDa8AlTNKDJAH/mY/Rkfuo+H9LHBhT6m03LTJTkJAUI
Av6bwWiTRRDU/GPYz67Y1VI4FFamIMSYPwBDpWGLv+WfInFKLuf9E8GAEIGeBFzr
6GMwQpmfLJtwXE5PArnltpw6r6mvMzb07GJFfL5CvuemV3Cq4IYlU6TSimngLwZ5
m99CXbIlRcya97QSbMWGrguItCNwrpr2girKjzQkcdYRjmBXWx5GmGppJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtumgHBTFLFSmtjRn1MU9PXQZuMMB8GA1UdIwQY
MBaAFCbTgpP2adtIttC9EDat/e9r09N1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTIt
NDQ4YjliOTViMDllLzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTItNDQ4YjliOTViMDll
LzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC5RVJAF
vVzVphSynerwFwggqIxKGHBDAMV9ntqJY3eqr6Vv7BIZFlKIQnpSl7SeP6/fDLnG
cwNiy8wsV5dblrRomWs96MtIncSdxob0TaJlozW6jREHBkvWbRCzWkvWe2wDBERL
wN3tCXfdFFVvjNWHPq8Q8NjJ9sbZdrdgSH85ZQiG01MRA1IOdMwG8kEEZLJa3EIY
QCXxGSunb7WMsN1Qw7d0JZmVgyRXrFnvLy7n57G3PP1i1aVbBMjAjL1ZvMTYsvpC
UISitTQBdY5/mVNyCJhXdL9OJxW1tkitVxGmyg3p53sreBTFCJG5v6tp8JeLKUFo
4iqNQxPX35TStQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:48:49 2025 by rpki-client