Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          5bD/fVU8kh1i7srBZ/1vgKkQtzKt2mf5U6frZRY/Byk=
Subject key identifier:   45:70:AF:5B:AF:10:85:83:C7:D3:0A:3A:32:0C:B6:1D:6B:56:D6:83
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       019880549D18C460F2C5E7B1810AF3E91BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0CFD
Signing time:             Wed 06 Aug 2025 17:01:25 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:25 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:25 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: NCXIbOM2AnwEhv/lM78ZS9j1dQPx2k/nsj2i868Nyjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:9d:18:c4:60:f2:c5:e7:b1:81:0a:f3:e9:1b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Aug  6 17:01:25 2025 GMT
            Not After : Aug  7 17:01:25 2025 GMT
        Subject: CN=4570af5baf108583c7d30a3a320cb61d6b56d683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:f2:ca:7d:d5:96:f6:f9:2f:d8:fe:52:78:
                    1b:d3:19:3a:88:f7:58:9a:0f:23:62:aa:52:6d:e4:
                    8b:3c:6c:85:6c:99:36:f1:17:10:30:17:c9:a5:72:
                    d1:0a:d8:83:66:ec:fc:e8:31:d3:0b:6b:93:36:27:
                    ca:d6:e1:62:24:3b:6a:16:37:5f:d3:fa:39:61:60:
                    44:0e:45:26:56:a7:e7:d9:cd:ff:32:70:94:1c:57:
                    29:ff:b5:ec:f6:20:80:64:df:69:6f:ec:3d:3f:4c:
                    d7:06:1f:95:f6:f5:9d:78:e8:f5:aa:5a:65:ad:49:
                    13:fc:99:7e:14:f5:4c:47:f3:16:44:89:c5:f2:f9:
                    e0:c4:24:fd:ee:51:bb:9e:6c:0f:69:ef:b6:69:59:
                    15:9a:b2:c2:f0:21:8b:00:e3:e0:72:33:76:f5:1e:
                    1e:11:53:92:47:56:53:9e:f4:5e:27:ea:27:9c:47:
                    ee:94:1d:9e:1a:a9:99:08:f1:b4:fb:69:a1:68:e4:
                    6e:97:08:0d:54:a1:0e:94:48:40:87:f9:32:1a:17:
                    79:3f:6e:f5:1d:77:7c:58:d3:d0:e4:6b:1a:4b:fe:
                    e9:9b:ff:69:4d:e0:f0:85:63:cb:a5:a4:14:4e:f5:
                    78:6d:b2:55:0d:f8:b2:64:2e:50:71:0c:1a:3a:ec:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:AF:5B:AF:10:85:83:C7:D3:0A:3A:32:0C:B6:1D:6B:56:D6:83
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:61:34:21:c2:6a:c2:fd:0c:d5:aa:f3:52:9b:86:e7:5d:08:
         3e:c6:78:3c:88:92:77:de:36:77:25:9e:bc:5d:5a:98:46:20:
         4e:52:bc:d5:38:4f:fd:f6:23:c2:e3:fa:e3:d0:81:a1:95:28:
         1a:1d:f0:6d:0d:55:86:7e:30:17:b2:7b:69:8c:c6:78:f4:a3:
         af:d5:38:d3:61:fd:0b:3c:2f:ca:2d:81:24:6f:9d:9a:f5:c5:
         64:6b:7c:12:b3:60:6f:46:9b:79:f2:49:10:41:42:85:61:cc:
         1f:5f:2a:d1:f9:1b:6d:2b:d1:36:23:8d:ac:4d:a3:d7:c2:75:
         2c:14:ec:d0:4a:7a:ef:83:ce:36:9d:f7:c0:78:4b:4b:5d:82:
         90:95:22:76:49:03:88:bc:db:a4:4a:a4:15:db:9b:b5:2e:c7:
         bb:d5:62:77:69:f9:6f:05:00:5b:49:8b:31:38:14:d1:61:5f:
         30:a4:a5:0b:0d:c4:9f:e2:28:ff:4d:8d:2f:d9:09:5d:79:4c:
         d5:2d:2b:56:1d:0c:97:9b:84:a7:d2:ca:bc:9c:5e:d9:8d:79:
         95:2e:0c:03:75:d6:18:98:1e:9e:74:c1:2d:cf:28:fa:ef:bc:
         8b:6d:21:b3:a2:7c:42:58:d2:6b:b6:32:ce:8a:8b:a8:12:9d:
         3e:c4:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:42 2025 by rpki-client