Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File:                     jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier:          w4rFQbTFd2CvmiHZRE7+XL8Vdqlx/iHaaLGKfBr+zdI=
Subject key identifier:   90:A2:BC:39:66:BE:AD:43:D4:4F:B6:10:6A:E0:50:92:27:7E:47:8C
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer:       /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial:       01967AFB6BCD2D8FB62248243C06CFE244EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number:          1463
Signing time:             Mon 28 Apr 2025 06:00:19 +0000
Manifest this update:     Mon 28 Apr 2025 06:00:19 +0000
Manifest next update:     Tue 29 Apr 2025 06:00:19 +0000
Files and hashes:         1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: UlrTleArEmDpz5Ek2uGi53VQfz1fO4DCSaSPzqEbpa4=)
                          2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:fb:6b:cd:2d:8f:b6:22:48:24:3c:06:cf:e2:44:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
        Validity
            Not Before: Apr 28 06:00:19 2025 GMT
            Not After : Apr 29 06:00:19 2025 GMT
        Subject: CN=90a2bc3966bead43d44fb6106ae05092277e478c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:eb:7e:89:bb:f4:cb:7c:a1:10:da:87:89:
                    31:47:01:97:9b:fa:45:39:25:30:6d:b0:1f:bd:39:
                    c6:2c:61:51:5a:cd:1c:39:c3:5d:ab:49:23:4e:56:
                    db:f5:09:9b:84:91:1a:38:f2:81:ce:cf:24:72:f4:
                    75:c5:3d:c8:ee:e7:a7:54:ff:e1:db:b5:a4:e3:70:
                    8a:fe:d2:06:e1:86:4c:d7:e7:43:02:44:4c:fb:13:
                    fb:c8:1b:3e:50:8d:0a:9e:7d:c8:23:d5:e2:8f:6f:
                    44:7b:7f:86:cd:e5:0a:bf:91:6a:fc:5e:bd:8f:02:
                    47:80:09:6a:4f:68:16:1a:b0:3a:26:74:55:06:ad:
                    25:e4:79:de:fc:9c:53:16:e5:b1:c3:43:55:13:04:
                    55:06:bd:14:8b:33:b7:29:8a:2c:2b:9c:c7:bb:e2:
                    87:e1:5d:cc:f1:33:1a:fc:4d:29:01:59:3e:c6:45:
                    19:bb:05:44:14:da:20:b8:e0:b9:4c:21:c8:96:a6:
                    fc:aa:52:2a:15:8c:b9:ea:02:40:b7:5e:fa:5d:19:
                    45:a2:15:1f:b1:3d:bc:df:f6:04:93:ce:ce:75:99:
                    3b:ab:b3:fb:be:34:81:2a:28:84:6e:4d:9c:33:37:
                    96:c2:1d:9a:a1:99:f5:1c:42:ad:7e:20:43:ef:be:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:BC:39:66:BE:AD:43:D4:4F:B6:10:6A:E0:50:92:27:7E:47:8C
            X509v3 Authority Key Identifier:
                keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:34:a2:db:c6:ac:00:20:ac:b8:fc:74:96:ad:76:78:88:b8:
         ac:05:2c:d9:e0:f6:0b:df:22:a3:8d:c9:f5:a6:4d:19:e3:78:
         2f:ab:69:3c:57:b0:d5:bf:8f:10:a1:97:bd:9f:28:f9:32:78:
         1f:97:9b:3b:67:e7:93:d7:9b:c6:7c:65:b3:9e:98:64:75:10:
         a5:6f:05:a3:4e:d7:f5:1a:9c:28:0a:7f:1d:df:9e:19:6a:54:
         61:bb:32:c0:01:c4:b8:22:24:03:a1:a7:7d:96:32:56:3d:4b:
         31:d9:ec:79:da:f1:77:4a:64:ea:ad:af:00:9a:34:80:34:39:
         0d:6c:13:ea:56:27:d6:b6:b5:db:b2:95:db:70:85:d3:f4:03:
         56:94:01:a3:20:34:40:fc:b7:a7:82:6b:d6:23:46:79:ac:96:
         0f:06:3e:58:7a:5b:6d:1e:c5:b3:62:d5:fa:ea:cc:c7:64:08:
         b5:27:17:1c:d0:01:cf:40:94:79:84:db:1a:38:a1:9c:f7:1f:
         ab:22:3c:1d:38:2f:12:fa:12:18:ea:77:49:4e:88:6c:99:e1:
         0e:e0:b4:4d:7f:e6:b5:4c:5c:b6:8e:b0:1f:63:ae:3c:06:49:
         cf:16:c0:e3:69:c9:97:b3:89:5c:d3:32:75:9d:ba:1f:9a:bc:
         41:b8:e6:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6+2vNLY+2IkgkPAbP4kTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2
MzBiYmEwHhcNMjUwNDI4MDYwMDE5WhcNMjUwNDI5MDYwMDE5WjAzMTEwLwYDVQQD
Eyg5MGEyYmMzOTY2YmVhZDQzZDQ0ZmI2MTA2YWUwNTA5MjI3N2U0NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyHrfom79Mt8oRDah4kxRwGXm/pF
OSUwbbAfvTnGLGFRWs0cOcNdq0kjTlbb9QmbhJEaOPKBzs8kcvR1xT3I7uenVP/h
27Wk43CK/tIG4YZM1+dDAkRM+xP7yBs+UI0Knn3II9Xij29Ee3+GzeUKv5Fq/F69
jwJHgAlqT2gWGrA6JnRVBq0l5Hne/JxTFuWxw0NVEwRVBr0UizO3KYosK5zHu+KH
4V3M8TMa/E0pAVk+xkUZuwVEFNoguOC5TCHIlqb8qlIqFYy56gJAt176XRlFohUf
sT283/YEk87OdZk7q7P7vjSBKiiEbk2cMzeWwh2aoZn1HEKtfiBD776kmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCivDlmvq1D1E+2EGrgUJInfkeMMB8GA1UdIwQY
MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt
NTczMDlkZjY5NjQyLzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy
LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTSi28as
ACCsuPx0lq12eIi4rAUs2eD2C98io43J9aZNGeN4L6tpPFew1b+PEKGXvZ8o+TJ4
H5ebO2fnk9ebxnxls56YZHUQpW8Fo07X9RqcKAp/Hd+eGWpUYbsywAHEuCIkA6Gn
fZYyVj1LMdnsedrxd0pk6q2vAJo0gDQ5DWwT6lYn1ra127KV23CF0/QDVpQBoyA0
QPy3p4Jr1iNGeayWDwY+WHpbbR7Fs2LV+urMx2QItScXHNABz0CUeYTbGjihnPcf
qyI8HTgvEvoSGOp3SU6IbJnhDuC0TX/mtUxcto6wH2OuPAZJzxbA42nJl7OJXNMy
dZ26H5q8QbjmUA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:53:20 2025 by rpki-client