Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File:                     JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier:          ALE2BhXiSHIfhc9Z3/msas9bXriX69zMdFWDGewmR/0=
Subject key identifier:   15:40:E8:D1:4F:C8:54:64:6A:04:F4:F6:39:3B:40:0E:1C:4F:AC:B0
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer:       /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial:       019884D5699829384C2DC6954C2ABD0E0825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number:          017E
Signing time:             Thu 07 Aug 2025 14:00:35 +0000
Manifest this update:     Thu 07 Aug 2025 14:00:35 +0000
Manifest next update:     Fri 08 Aug 2025 14:00:35 +0000
Files and hashes:         1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: q3wys88e/ogodGBYMjzc8KuHsEz+TO6lXkAV/vCVryA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:d5:69:98:29:38:4c:2d:c6:95:4c:2a:bd:0e:08:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
        Validity
            Not Before: Aug  7 14:00:35 2025 GMT
            Not After : Aug  8 14:00:35 2025 GMT
        Subject: CN=1540e8d14fc854646a04f4f6393b400e1c4facb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:20:67:f7:1a:9d:44:f0:33:ad:bd:06:0e:
                    9f:15:13:4d:eb:d7:10:b9:12:c4:9d:d8:82:86:fc:
                    1a:21:80:39:4c:bc:d8:74:c8:05:43:54:06:59:47:
                    b7:03:5c:14:cd:1b:72:6b:4d:b1:40:84:51:eb:a7:
                    6b:01:08:13:e0:b6:7c:f2:52:44:85:b8:70:81:14:
                    79:d5:57:b0:22:fe:14:05:2c:b6:3f:03:bf:c5:4a:
                    2f:82:96:ba:7c:c5:29:27:20:53:ca:b0:7c:7f:22:
                    e1:94:f9:81:7c:99:0e:71:16:f3:b9:fe:ed:cc:9b:
                    e7:d2:2f:fa:52:aa:1d:9a:3c:2c:29:89:de:48:f5:
                    8a:fd:1d:0d:6b:bb:34:a9:aa:63:e7:2d:46:11:da:
                    05:9e:46:31:e5:5a:95:55:8d:b4:93:88:df:9c:aa:
                    86:90:8a:35:5a:22:3b:8a:d8:8a:f4:b1:e4:ec:22:
                    f5:b6:37:a8:fa:00:8a:63:b1:19:6c:1a:9f:8f:3b:
                    a3:00:70:91:85:83:48:1d:dc:1f:d3:0f:58:46:36:
                    9f:ab:e6:4c:46:58:7f:14:cd:32:21:0d:2f:84:02:
                    9e:3e:4d:a4:11:80:b3:26:4f:88:5e:3e:49:ce:33:
                    82:25:6f:97:c8:89:42:72:53:f9:3b:72:f1:e5:91:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:40:E8:D1:4F:C8:54:64:6A:04:F4:F6:39:3B:40:0E:1C:4F:AC:B0
            X509v3 Authority Key Identifier:
                keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6a:65:be:59:7f:04:6a:56:b7:d4:43:82:92:a3:e5:56:60:
         b0:f8:7f:28:c7:e2:1a:99:13:a7:65:9a:c6:18:2c:90:bd:4e:
         ad:a9:07:eb:88:5b:1a:50:69:08:2b:48:18:79:5a:f7:9d:ec:
         7e:cf:70:ad:9a:1f:cc:37:47:bc:f3:62:a4:f6:c0:57:be:ce:
         b1:99:5b:67:37:73:ee:a0:33:1a:ed:de:fa:a0:83:2d:77:9e:
         ba:23:2e:16:ba:01:d8:66:71:5b:8d:1b:49:54:cd:36:dd:09:
         c9:51:bd:0c:2d:94:66:5a:52:c2:c2:d6:16:fa:c1:1b:9d:bd:
         01:71:36:a0:ce:e3:d4:22:1a:b3:7e:f8:e6:e6:71:aa:0c:55:
         53:95:9c:2d:a7:ef:c2:95:ef:96:53:bc:d3:0e:95:90:fc:0c:
         8e:64:ad:59:d6:e5:ba:8e:cf:cd:86:23:aa:37:bf:18:d0:9a:
         28:0f:00:a8:34:8b:c5:01:08:d5:5d:54:84:dd:a2:7b:05:49:
         f8:44:c7:6b:74:4b:8c:9a:65:b9:be:1f:66:e0:13:d8:ec:2e:
         a9:c6:c7:2a:56:6c:e4:0f:d4:09:f5:20:1c:32:d0:6e:c9:60:
         29:d0:e5:e4:75:7d:8f:59:4b:9b:b7:9d:6b:15:ef:84:03:e8:
         16:ef:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:01:41 2025 by rpki-client