Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File:                     jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier:          XkAu/K4m+9xVJu8DMJHIu58Wpibvjyr0JMLmIU/n300=
Subject key identifier:   EC:62:58:78:30:C3:EA:1C:14:53:1A:3F:06:FD:66:C0:E1:3B:FE:81
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer:       /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial:       0197711B32698F61F258DB28D607FA0285A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number:          0B39
Signing time:             Sun 15 Jun 2025 01:01:37 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:37 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:37 +0000
Files and hashes:         1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: FwOm8hDKysWlrVJwxZ0CGpXh6EbtJ7FszYutUETE6Nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1b:32:69:8f:61:f2:58:db:28:d6:07:fa:02:85:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
        Validity
            Not Before: Jun 15 01:01:37 2025 GMT
            Not After : Jun 16 01:01:37 2025 GMT
        Subject: CN=ec62587830c3ea1c14531a3f06fd66c0e13bfe81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:b6:c5:df:5b:81:e6:a2:81:83:17:11:dc:
                    a3:5a:e7:c1:0a:d9:31:14:6d:d8:d4:cd:f9:7a:59:
                    5f:19:9e:cf:72:16:77:fa:bb:ab:7e:4a:e7:ca:cd:
                    a7:e5:1b:46:f6:78:f0:82:fe:c4:c3:ab:74:e7:83:
                    9f:14:e8:5a:35:0b:bf:48:ac:48:d6:0d:44:6d:a1:
                    31:4f:f3:5d:f4:c9:4f:99:a3:36:4a:11:38:f2:55:
                    d1:d1:67:b9:4f:9e:9e:93:4d:c3:cf:ad:54:34:ee:
                    23:af:55:df:4b:24:21:23:57:70:fa:f6:b8:79:db:
                    c4:9b:8b:29:41:4b:79:ca:4a:74:56:49:5d:77:02:
                    5d:09:aa:51:2e:87:04:d6:56:6f:98:2a:8e:0f:d1:
                    ba:ab:bf:0c:56:13:fd:e0:d2:c6:69:51:d7:a8:ac:
                    76:c5:74:29:c3:d4:6b:7b:27:aa:e7:d8:7d:82:2d:
                    5c:99:a7:e8:bf:9f:62:e8:d6:5f:6c:81:cf:84:e2:
                    b4:00:a4:9c:07:7b:4a:34:3b:b8:37:4b:05:f2:fd:
                    fe:e8:ed:e1:18:48:d1:4c:9f:21:e7:61:47:18:f5:
                    84:60:96:c1:b6:e7:96:29:ea:29:e1:8c:76:f9:d2:
                    02:cb:8d:5f:84:51:d2:ba:93:c4:22:5f:6f:cc:9d:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:62:58:78:30:C3:EA:1C:14:53:1A:3F:06:FD:66:C0:E1:3B:FE:81
            X509v3 Authority Key Identifier:
                keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:f8:bf:dd:9f:28:ea:71:e9:62:36:d4:92:bf:94:c5:06:
         3f:7a:4c:34:09:a4:6f:ab:85:72:80:f5:95:0a:b6:5b:48:c4:
         35:f5:ad:81:26:65:6d:2f:04:b0:cc:6c:db:75:59:f8:e2:86:
         f9:19:91:07:f2:4a:9e:54:f4:52:89:49:c2:0f:e4:14:e7:ba:
         8a:bb:52:94:3f:9c:24:04:9e:d5:28:55:a7:a0:e8:c7:55:1b:
         83:ca:a7:b5:7b:3c:5e:21:0f:cd:ca:85:69:48:10:ac:e9:35:
         01:70:87:7a:7f:4c:bd:53:3b:d2:3c:ee:09:6e:dc:cc:dc:12:
         eb:9f:71:a5:5c:4c:f0:3e:af:0d:08:30:a7:c6:75:33:f7:5a:
         1c:10:51:e7:bc:53:da:4d:8c:23:69:ca:ff:05:64:cd:f3:13:
         7d:92:58:a2:09:30:e8:d0:a6:cb:1b:88:55:f6:23:d8:5c:a6:
         4e:67:00:e8:f3:3d:93:72:f2:b2:a2:fb:1d:cf:d3:d8:d7:e5:
         d7:af:24:84:1e:61:b7:d8:95:ba:8b:e2:31:b8:7e:e0:ca:11:
         67:91:4a:46:07:26:09:1d:cf:11:62:b1:68:bf:38:69:da:b7:
         c3:6e:10:7c:1e:62:a1:7b:ea:be:e2:eb:2b:80:84:d5:a8:3e:
         20:91:89:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGzJpj2HyWNso1gf6AoWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzIwOWE5ZWE4MWZlZjMyYjE4NTM0YzFkMTFlZGEzMjk5
OTcwZWYwHhcNMjUwNjE1MDEwMTM3WhcNMjUwNjE2MDEwMTM3WjAzMTEwLwYDVQQD
EyhlYzYyNTg3ODMwYzNlYTFjMTQ1MzFhM2YwNmZkNjZjMGUxM2JmZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2W2xd9bgeaigYMXEdyjWufBCtkx
FG3Y1M35ellfGZ7PchZ3+rurfkrnys2n5RtG9njwgv7Ew6t054OfFOhaNQu/SKxI
1g1EbaExT/Nd9MlPmaM2ShE48lXR0We5T56ek03Dz61UNO4jr1XfSyQhI1dw+va4
edvEm4spQUt5ykp0VklddwJdCapRLocE1lZvmCqOD9G6q78MVhP94NLGaVHXqKx2
xXQpw9Rreyeq59h9gi1cmafov59i6NZfbIHPhOK0AKScB3tKNDu4N0sF8v3+6O3h
GEjRTJ8h52FHGPWEYJbBtueWKeop4Yx2+dICy41fhFHSupPEIl9vzJ0XMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxiWHgww+ocFFMaPwb9ZsDhO/6BMB8GA1UdIwQY
MBaAFI1yCanqgf7zKxhTTB0R7aMpmXDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYt
ZDliMTM1MzY2N2FhLzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYtZDliMTM1MzY2N2Fh
LzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuf4v92f
KOpx6WI21JK/lMUGP3pMNAmkb6uFcoD1lQq2W0jENfWtgSZlbS8EsMxs23VZ+OKG
+RmRB/JKnlT0UolJwg/kFOe6irtSlD+cJASe1ShVp6Dox1Ubg8qntXs8XiEPzcqF
aUgQrOk1AXCHen9MvVM70jzuCW7czNwS659xpVxM8D6vDQgwp8Z1M/daHBBR57xT
2k2MI2nK/wVkzfMTfZJYogkw6NCmyxuIVfYj2FymTmcA6PM9k3LysqL7Hc/T2Nfl
168khB5ht9iVuoviMbh+4MoRZ5FKRgcmCR3PEWKxaL84adq3w24QfB5ioXvqvuLr
K4CE1ag+IJGJgA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:03 2025 by rpki-client