Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File:                     JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier:          O42vm2QYbefTEBYjZ7AB0JK4qf61zPEIDycSp0rSfNU=
Subject key identifier:   D5:15:E3:CE:73:3B:90:71:6D:D5:88:CD:B4:82:8D:1A:A3:0E:EF:5D
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer:       /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial:       019873E390181648516084C5A5271EC742D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number:          095D
Signing time:             Mon 04 Aug 2025 07:02:29 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:29 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:29 +0000
Files and hashes:         1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: iCxhJrOf6Vj0W7GFent3x/cwdireoV3nOTVxBrWpYeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:90:18:16:48:51:60:84:c5:a5:27:1e:c7:42:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
        Validity
            Not Before: Aug  4 07:02:29 2025 GMT
            Not After : Aug  5 07:02:29 2025 GMT
        Subject: CN=d515e3ce733b90716dd588cdb4828d1aa30eef5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:6b:a0:e0:5c:36:26:35:c7:8a:30:ff:82:
                    2a:2e:e0:0d:aa:4a:f9:b2:f1:3f:7c:7e:a5:bc:a3:
                    6d:a3:cc:0c:e6:d7:07:6b:e1:c4:ce:f3:33:f2:e7:
                    64:5b:d8:4a:b4:9b:04:c8:c0:a2:a1:00:bf:b6:de:
                    16:8f:e5:90:01:f5:90:89:9b:a1:0a:c6:72:20:d8:
                    95:92:07:0c:8f:cb:d1:0b:d3:52:93:d7:b6:0d:2a:
                    37:d7:f4:a2:74:29:35:ef:23:12:66:04:3b:f3:f7:
                    2f:21:5e:8f:fa:cd:29:77:f5:a5:3e:d8:7d:96:47:
                    5f:a6:41:66:dc:f9:ca:9d:28:ce:18:78:7d:57:0a:
                    6d:b1:e3:b4:7f:63:cd:88:66:ff:3f:58:ec:cd:25:
                    f3:2b:dc:cc:5f:18:a7:77:93:a8:22:17:2a:e6:a6:
                    9f:84:a6:e2:38:2e:7d:f2:c9:55:1f:58:0e:90:91:
                    93:c0:35:2d:fb:8b:da:22:7d:65:26:e2:e9:ed:da:
                    75:03:30:75:98:76:51:09:9e:a4:00:63:54:3b:c4:
                    50:6a:fd:8e:d9:66:24:ef:ac:e7:03:68:06:59:7f:
                    7e:00:8e:b0:84:0e:aa:f9:82:a7:10:2e:2f:15:57:
                    1f:69:12:eb:14:17:e7:51:f7:c3:9a:57:d7:7c:09:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:E3:CE:73:3B:90:71:6D:D5:88:CD:B4:82:8D:1A:A3:0E:EF:5D
            X509v3 Authority Key Identifier:
                keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0e:25:8d:38:8f:59:2f:05:8a:26:65:56:4d:d3:d1:0a:c1:
         87:fb:8c:54:d4:d9:ae:7a:af:c6:d1:cf:53:bd:ae:86:23:8b:
         18:0e:ec:d5:94:b0:4a:74:88:a9:9c:98:a6:a8:31:b1:9a:fb:
         48:aa:ef:1f:f9:4a:30:02:65:be:5b:3d:b8:df:1a:1e:bb:11:
         a6:ec:ca:f8:31:80:77:5a:ae:55:60:71:2f:71:c6:01:8b:1e:
         09:a4:32:b3:4e:3d:01:0c:c7:da:82:c1:56:f7:ee:a2:3e:81:
         42:ba:8a:f3:67:0b:c0:31:9d:ad:aa:1b:ea:d8:b8:e2:7a:94:
         90:ab:b9:32:66:fa:7e:cc:80:cd:72:f1:ae:bb:c8:91:18:4e:
         88:56:e8:fb:af:aa:d4:c6:b9:47:5c:65:62:fd:df:9b:db:34:
         b6:c3:e8:f4:62:86:47:41:08:b6:b0:6c:44:53:2d:05:36:6b:
         1e:6e:4e:45:70:da:5e:1d:49:ab:33:bc:c0:82:f8:e0:1b:f0:
         23:32:6f:d0:61:f6:6f:5d:c9:4c:64:dc:d7:dd:be:4b:39:11:
         32:bf:6e:00:f2:7f:d7:d4:61:5b:df:b6:56:49:7b:54:32:dd:
         95:0f:75:31:bc:ea:eb:cf:d4:1d:3d:d0:32:9b:ac:b6:48:45:
         d5:17:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:15 2025 by rpki-client