Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
File:                     jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json)
Hash identifier:          Dt/u/B87yB4UJxGE2rUy9WH/j5clQ9cDZHOyqPWVvO4=
Subject key identifier:   71:51:25:2D:DF:46:83:0D:BE:5A:A7:10:DA:00:9B:E4:14:9F:98:24
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Certificate issuer:       /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial:       01987298D1D6BAAE8332A7B78731B860F6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
Manifest number:          12CC
Signing time:             Mon 04 Aug 2025 01:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:14 +0000
Files and hashes:         1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=)
                          2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: dbE2rRs87mRP7yyXWr4lRI7y+VCeJeBoQAJ+Nt5K4ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:d1:d6:ba:ae:83:32:a7:b7:87:31:b8:60:f6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
        Validity
            Not Before: Aug  4 01:01:14 2025 GMT
            Not After : Aug  5 01:01:14 2025 GMT
        Subject: CN=7151252ddf46830dbe5aa710da009be4149f9824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:de:9e:7c:bf:3a:0c:76:69:72:26:7e:47:
                    9a:40:fb:41:be:6f:76:c3:be:c1:6f:a4:e1:0d:58:
                    82:50:ba:98:ed:00:b1:5a:a9:e5:0b:c1:14:49:7b:
                    43:67:96:d8:0f:00:48:7c:2f:2e:cc:f1:34:5a:f6:
                    fe:41:a6:71:cb:b4:43:ca:66:38:f7:ea:c6:ab:5c:
                    46:78:86:12:95:32:3b:5a:d9:cf:15:24:ca:31:91:
                    a1:ae:23:fc:68:16:9a:63:be:69:d2:eb:ff:c5:11:
                    08:33:a6:7d:35:b1:09:39:d2:07:b2:1c:a3:48:bb:
                    40:11:0e:20:d1:05:19:65:76:f4:f1:f6:1d:5b:fe:
                    32:34:58:6a:1c:2d:fc:e3:33:39:9f:4c:34:91:65:
                    55:cf:ba:4d:50:a5:46:d9:8b:39:f1:1c:41:43:ad:
                    0d:1e:c5:ca:e6:8e:5c:e2:8a:69:df:de:67:13:95:
                    8d:11:86:ab:71:5e:60:8c:9e:37:d2:af:71:eb:e8:
                    af:00:f9:ef:46:9c:40:db:5b:19:72:3d:23:61:f6:
                    c4:2e:31:74:a7:52:17:e9:ec:da:e4:a4:91:cd:61:
                    cf:d2:10:27:dc:c4:5b:64:8d:af:2a:57:e2:38:61:
                    eb:25:85:45:a1:cc:1c:19:6f:3e:a0:26:f5:9f:68:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:25:2D:DF:46:83:0D:BE:5A:A7:10:DA:00:9B:E4:14:9F:98:24
            X509v3 Authority Key Identifier:
                keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:35:c3:72:68:0d:5c:a6:e6:f7:e0:1e:cf:59:35:b7:97:
         1e:87:f0:bd:53:f5:37:d6:35:10:06:70:a3:09:b6:86:57:c0:
         4b:59:ec:8e:f8:45:32:c7:2f:42:57:dd:2a:83:2b:42:6d:d8:
         f3:8c:9e:25:63:b8:e2:3a:a9:17:23:ae:ef:db:e2:41:90:be:
         45:0d:70:9d:21:43:1c:f2:6a:b6:25:7b:3e:88:e4:c9:47:d1:
         2f:fd:1e:8c:9d:37:e7:46:87:de:95:6b:6f:97:ff:b5:f0:1b:
         e0:08:82:dd:21:8d:57:e8:e1:0d:c2:d7:d4:b1:f9:f2:ea:b0:
         08:e7:4d:c2:53:9e:f2:fc:bd:1b:65:6c:97:b0:6d:3c:66:16:
         11:ac:99:03:ba:3b:6c:72:df:f6:65:56:fb:8d:50:b6:1a:fc:
         3d:a7:ae:67:48:95:93:d6:03:cc:b9:49:65:69:a0:3a:84:39:
         4f:af:b0:8f:3e:6a:94:fd:04:aa:33:53:08:0d:05:9f:d7:e6:
         c2:17:93:1e:79:87:ae:8d:4c:be:fa:4a:10:c4:e8:5e:16:6e:
         7b:24:b4:87:3d:fa:40:9b:db:f4:57:01:58:c8:76:d8:bf:d7:
         81:74:41:45:d6:03:a9:9a:61:38:98:a7:83:50:10:d4:d5:e0:
         0e:be:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:08 2025 by rpki-client