Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
File:                     JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json)
Hash identifier:          juCJfrRG3esAwr3aSOR5JFIeV/nrBvXxXrg+dm8uBnU=
Subject key identifier:   03:7E:BF:5B:C7:ED:B9:DC:B3:F8:F0:2D:09:C3:19:C9:99:7A:28:B1
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       01987D89AC354EB31CA0FFA396078CABEA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
Manifest number:          1357
Signing time:             Wed 06 Aug 2025 04:00:31 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:31 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:31 +0000
Files and hashes:         1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=)
                          2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=)
                          3: 8TY-Hfd5q5Rj4MUhE7CmY31LHyc.roa (hash: vPKsfH2lh7SZOShxHi9r8ed3IerCum4ryQQ50mXWvmI=)
                          4: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=)
                          5: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=)
                          6: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=)
                          7: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: LLyirLNH/QACsgTpxAvuPYaMgmD3+ka4JhDlTj7gKSM=)
                          8: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=)
                          9: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=)
                          10: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=)
                          11: VuBKMZZHrZ1QSjnK1f8rGYyQD34.roa (hash: Yy9aJSbZa8jisjdlzD3JGDY9sTvRVpXk74KknU+efOI=)
                          12: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=)
                          13: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=)
                          14: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=)
                          15: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=)
                          16: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=)
                          17: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=)
                          18: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=)
                          19: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:89:ac:35:4e:b3:1c:a0:ff:a3:96:07:8c:ab:ea:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Aug  6 04:00:31 2025 GMT
            Not After : Aug  7 04:00:31 2025 GMT
        Subject: CN=037ebf5bc7edb9dcb3f8f02d09c319c9997a28b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:18:d0:86:a5:5d:3e:fc:9f:74:57:5f:19:
                    c0:cd:78:4f:11:08:50:cb:28:4d:88:4e:7c:85:54:
                    86:6a:a2:d4:35:53:18:62:a9:c5:c5:e9:73:4a:82:
                    8e:cf:e4:f4:ce:fb:7f:7d:1f:0f:46:47:74:80:e8:
                    49:d6:ab:bf:22:da:03:e2:09:d9:65:2c:92:1f:68:
                    f7:9d:55:3d:a8:f8:ad:8b:fc:20:1d:48:8d:29:20:
                    83:c8:70:f7:d7:2f:0b:0d:49:2b:7a:17:9e:1a:c0:
                    9c:d1:76:35:3e:3f:f2:c1:c5:df:a5:2b:a8:9b:cc:
                    4e:52:aa:f9:fe:75:cd:45:22:36:e6:62:df:a2:52:
                    89:2c:2d:21:0e:a7:bf:29:4c:79:dc:93:de:c5:8e:
                    ca:a0:58:45:c3:02:61:04:9a:ac:0c:34:22:63:41:
                    72:46:fe:58:a1:9c:84:6b:81:4c:5e:bf:87:ca:cb:
                    0a:23:eb:bb:f2:93:4a:d0:6a:03:8c:64:f9:bf:89:
                    b9:9d:55:ee:36:61:0a:f8:8f:46:39:81:a4:f8:a4:
                    2f:30:d9:72:75:c2:97:45:73:f6:07:45:5e:d9:48:
                    ed:4c:98:fc:75:6d:d6:5d:87:87:d3:af:af:20:8a:
                    6a:2b:90:23:7b:13:82:43:5e:33:46:36:fb:8f:36:
                    e6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:BF:5B:C7:ED:B9:DC:B3:F8:F0:2D:09:C3:19:C9:99:7A:28:B1
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:3a:bd:e7:c7:70:b5:ac:87:0a:87:f4:4c:e5:c1:dc:8b:
         7e:73:3e:22:f6:3b:a8:d2:90:e2:64:bc:b1:e5:53:48:e3:3a:
         62:23:bd:ae:09:1c:81:59:5f:a8:77:04:89:ea:65:bb:7a:03:
         75:97:b1:fe:56:81:13:44:87:83:d1:04:b6:f2:fd:86:67:ef:
         48:f7:ca:da:98:ae:5c:11:38:24:99:93:25:92:b5:40:d3:ac:
         d6:84:86:53:15:73:e3:fe:d8:f4:ac:45:bc:00:91:cf:67:31:
         b5:39:11:ff:f0:c6:18:f8:08:57:2d:06:ac:3d:db:37:c8:1f:
         55:09:82:f3:f5:60:0a:6e:bf:4a:20:ba:16:71:df:b3:64:01:
         8a:8a:9b:bb:ff:ea:1b:c6:6a:d6:31:81:e4:6c:95:b2:4f:9d:
         08:50:0e:ae:bb:03:5b:41:01:29:5a:b5:12:61:b8:0b:12:61:
         c3:af:7e:7a:44:20:97:c0:2b:13:d8:f0:d6:f2:c1:19:2f:21:
         1e:c2:ab:c0:4a:82:40:d4:c4:ca:60:c4:89:54:00:46:33:52:
         ef:a2:e8:5c:e4:2d:c5:9c:ae:9d:db:39:d6:7a:3f:1e:81:a7:
         36:e1:40:26:e0:67:be:ea:2c:51:55:ec:36:19:b3:78:d2:e6:
         88:8a:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:17 2025 by rpki-client