Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File:                     Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier:          Tz+9QUXRp6PPzlT039BEseiR34v/geSinduAa2qhXms=
Subject key identifier:   F0:FD:32:F3:26:27:DB:C8:B6:B5:CB:5E:2A:5F:06:86:3B:9B:1B:D5
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer:       /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial:       01976D74911CEC61460719C8F5B6C4A5E8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number:          13DC
Signing time:             Sat 14 Jun 2025 08:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:45 +0000
Files and hashes:         1: 4HxC1YnWdGWm4g8pwWn_Hlow4Qo.roa (hash: qpMp8mE7oIuGxE7UiKhcFCXTbJmQfeSevFyEhmL5FpM=)
                          2: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: Em1uJNn23wkh8r93mh5mOvKqvptJMRuXANDci2SBzL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:91:1c:ec:61:46:07:19:c8:f5:b6:c4:a5:e8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
        Validity
            Not Before: Jun 14 08:00:45 2025 GMT
            Not After : Jun 15 08:00:45 2025 GMT
        Subject: CN=f0fd32f32627dbc8b6b5cb5e2a5f06863b9b1bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:3e:1e:85:86:72:85:61:ca:ca:0a:0c:5e:
                    5a:ca:d2:f3:1f:a1:67:9e:30:10:42:4b:65:34:5b:
                    3a:b7:49:4f:30:9c:5a:06:53:b1:81:79:a3:ee:f1:
                    7b:db:43:a7:41:51:ce:eb:2e:f9:ca:4c:3d:da:2c:
                    40:d9:1d:c6:6b:0b:00:35:99:be:d6:b3:6f:fc:21:
                    7a:12:28:72:b0:dd:35:bb:7b:75:a5:2f:53:56:b2:
                    df:6e:54:4b:c8:4a:be:83:a3:fc:14:ec:9a:d7:26:
                    67:1a:25:fe:c6:da:68:dd:7c:a5:b9:14:87:68:48:
                    8d:d9:6a:34:55:21:61:a2:77:c6:9b:7b:13:28:70:
                    d7:85:37:f3:62:49:a2:57:be:60:45:e4:f2:9b:e5:
                    d1:48:35:32:a5:6c:07:69:a7:62:a3:dd:b7:a8:54:
                    74:77:1e:10:b5:63:68:54:b9:fb:9e:a4:a4:0c:8a:
                    e1:71:d5:8d:42:79:85:0e:1d:ee:bd:ba:30:cc:a5:
                    2a:2d:a2:6c:0b:7e:fb:51:94:dd:41:0d:17:37:0e:
                    ea:b6:82:76:46:e2:11:50:6f:e7:a4:52:60:18:23:
                    b9:52:97:b4:ca:1f:d6:bc:07:89:f6:13:b7:ec:ba:
                    ad:3f:85:3b:6a:c2:72:e9:74:1e:b0:4e:4b:c4:c2:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:32:F3:26:27:DB:C8:B6:B5:CB:5E:2A:5F:06:86:3B:9B:1B:D5
            X509v3 Authority Key Identifier:
                keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7b:29:b3:9b:70:25:0d:ce:11:61:8b:65:27:bb:e5:34:c1:
         68:2f:76:bb:a6:51:0e:f1:99:e4:a7:d2:53:a3:24:c7:64:f0:
         8a:59:cd:40:13:d7:41:4c:21:fe:44:07:5c:a4:6e:28:eb:44:
         47:8c:3f:4a:be:77:ed:30:b5:f5:68:74:c2:18:8d:b3:dc:3f:
         a8:64:c8:5f:c7:9f:cd:43:4a:b6:bc:d1:0f:9a:4e:dd:d1:15:
         eb:df:f7:5b:eb:af:ec:52:af:8a:23:1e:6c:97:54:79:79:89:
         aa:1c:18:f0:9b:b3:27:4b:ca:8d:0a:bd:f5:91:6a:01:09:7a:
         bf:07:1e:e3:f9:2c:cf:16:93:6b:cf:02:e3:72:53:74:04:f1:
         65:7a:65:81:d1:e0:af:b9:f6:40:26:fd:0e:fb:0a:90:5a:75:
         a1:d3:0f:59:a7:b4:9c:2f:51:2c:63:b3:43:c4:78:7d:38:94:
         0b:58:5c:25:3f:4b:22:cd:1b:8e:a0:49:21:dc:42:42:79:c8:
         ca:7e:a3:ca:fb:3d:03:aa:67:09:35:1c:d9:5a:d4:92:cc:37:
         4c:56:f6:f1:ad:61:0c:a6:41:21:af:65:88:ce:a9:43:7c:a3:
         fe:1a:36:07:7b:41:8a:0c:90:e9:21:af:cd:5a:de:58:4a:e3:
         87:a3:51:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdJEc7GFGBxnI9bbEpejSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx
N2FjZTgwHhcNMjUwNjE0MDgwMDQ1WhcNMjUwNjE1MDgwMDQ1WjAzMTEwLwYDVQQD
EyhmMGZkMzJmMzI2MjdkYmM4YjZiNWNiNWUyYTVmMDY4NjNiOWIxYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJo+HoWGcoVhysoKDF5aytLzH6Fn
njAQQktlNFs6t0lPMJxaBlOxgXmj7vF720OnQVHO6y75ykw92ixA2R3GawsANZm+
1rNv/CF6EihysN01u3t1pS9TVrLfblRLyEq+g6P8FOya1yZnGiX+xtpo3XyluRSH
aEiN2Wo0VSFhonfGm3sTKHDXhTfzYkmiV75gReTym+XRSDUypWwHaadio923qFR0
dx4QtWNoVLn7nqSkDIrhcdWNQnmFDh3uvbowzKUqLaJsC377UZTdQQ0XNw7qtoJ2
RuIRUG/npFJgGCO5Upe0yh/WvAeJ9hO37LqtP4U7asJy6XQesE5LxMKrtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD9MvMmJ9vItrXLXipfBoY7mxvVMB8GA1UdIwQY
MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt
MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli
LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3sps5tw
JQ3OEWGLZSe75TTBaC92u6ZRDvGZ5KfSU6Mkx2TwilnNQBPXQUwh/kQHXKRuKOtE
R4w/Sr537TC19Wh0whiNs9w/qGTIX8efzUNKtrzRD5pO3dEV69/3W+uv7FKviiMe
bJdUeXmJqhwY8JuzJ0vKjQq99ZFqAQl6vwce4/kszxaTa88C43JTdATxZXplgdHg
r7n2QCb9DvsKkFp1odMPWae0nC9RLGOzQ8R4fTiUC1hcJT9LIs0bjqBJIdxCQnnI
yn6jyvs9A6pnCTUc2VrUksw3TFb28a1hDKZBIa9liM6pQ3yj/ho2B3tBigyQ6SGv
zVreWErjh6NRAA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:03:42 2025 by rpki-client