Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File:                     JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier:          fb80/7L3u1iYOsrp4SjdZquuBBVYMo01egx02lF8wiM=
Subject key identifier:   DB:41:0B:4E:68:75:37:B9:3F:93:24:CE:AE:C6:08:A2:64:EA:D8:DB
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer:       /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial:       0198744FADC85D0CC00EDB77F3E708462DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number:          095B
Signing time:             Mon 04 Aug 2025 09:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:35 +0000
Files and hashes:         1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: X0b25v89KRCVQ7MNzeD4oegjYbsbprMq50PPbmmkOjo=)
                          2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:ad:c8:5d:0c:c0:0e:db:77:f3:e7:08:46:2d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
        Validity
            Not Before: Aug  4 09:00:35 2025 GMT
            Not After : Aug  5 09:00:35 2025 GMT
        Subject: CN=db410b4e687537b93f9324ceaec608a264ead8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:4a:73:90:f2:07:2d:ec:2a:7d:92:38:66:
                    08:a1:d4:7f:13:22:be:ef:b2:d7:1f:d6:b1:36:60:
                    de:5f:6d:37:39:56:7a:34:cb:e2:fb:88:46:99:cc:
                    54:75:6c:e6:55:ff:9f:84:02:e8:72:ba:0a:d7:67:
                    45:94:77:9b:d8:32:39:0c:8a:bd:e2:de:cd:fe:90:
                    e9:08:af:f9:4a:b1:80:5f:76:31:98:bd:c4:39:a9:
                    2a:2a:f5:97:f1:b7:33:1e:e1:72:be:17:05:71:cb:
                    14:7e:41:91:22:4d:ba:e2:3f:05:dd:7c:fc:1d:4e:
                    99:21:4a:b3:75:b6:a3:1d:c5:0c:50:30:eb:32:a9:
                    a1:cf:63:be:f0:19:e1:4f:59:e9:fb:36:7d:d9:6e:
                    e0:26:47:c2:fe:71:9d:f8:9e:22:27:1a:e9:74:4a:
                    ef:eb:09:00:36:56:36:af:00:17:af:ea:3d:6f:ef:
                    3c:50:2c:13:4b:96:36:eb:30:18:1f:78:35:92:1a:
                    db:84:d8:05:89:5a:f7:ee:eb:ed:a9:93:a8:24:0c:
                    79:4f:23:c4:a3:91:f5:ea:2c:62:d6:bc:bc:54:80:
                    ba:af:40:35:7c:1a:11:69:d9:0f:fe:4e:c9:82:f7:
                    d0:a6:af:ee:f4:02:d1:0e:fb:8a:12:03:79:91:35:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:41:0B:4E:68:75:37:B9:3F:93:24:CE:AE:C6:08:A2:64:EA:D8:DB
            X509v3 Authority Key Identifier:
                keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1d:a8:d4:b6:0c:60:00:f1:53:11:3b:aa:4c:58:c6:f2:49:
         8f:ea:72:c3:a3:0d:8d:3f:fa:d2:a9:76:3d:b8:7c:a4:bd:5d:
         4e:ea:6c:f6:39:73:b7:b3:9d:f9:6d:77:50:f4:7c:2a:ea:ec:
         54:1b:59:f2:30:4a:57:54:f2:8b:b3:9a:9f:e2:60:a5:ad:93:
         5c:4f:0c:6b:83:29:88:11:62:df:03:13:45:2b:c6:03:70:bf:
         d5:fb:f9:3c:c7:a3:e1:1b:3a:bc:8b:10:df:3f:25:bc:69:15:
         12:2c:66:f2:45:b3:e4:2f:01:65:d2:a9:d6:3d:87:26:a1:58:
         a8:e9:19:f3:58:2c:7c:4e:e8:d6:80:39:1e:9e:ab:68:29:49:
         db:44:ac:63:52:8d:60:a6:a2:1c:60:3b:73:4f:d5:7d:56:13:
         96:41:25:3a:36:dd:59:85:0a:ba:cc:09:21:33:3f:83:05:43:
         d9:09:df:04:cb:8d:e3:9a:db:ad:c1:0c:50:d6:d0:31:7f:7b:
         b8:fd:a6:a7:c9:94:e6:d9:dd:e0:17:25:d0:48:ee:4d:ae:d0:
         07:b5:82:8b:9f:18:8e:fd:35:db:3e:3a:ef:23:c4:34:94:44:
         a9:4e:15:fe:45:41:8f:15:b1:a8:50:de:eb:02:27:20:96:2e:
         84:1f:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:39 2025 by rpki-client