Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File:                     jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier:          yzsT/hsfS3+B6uVd5Mbo/Ulx4WTvTYG7ORVFk2X9yyI=
Subject key identifier:   D7:AD:5F:C8:B1:CC:AF:FF:65:CA:B6:2F:5F:12:59:81:36:C8:36:25
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer:       /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial:       0198744FDA6AF0C4B888CB7CD3531F152F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 09:00:46 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:46 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:46 +0000
Files and hashes:         1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: zDJjWBjJzQGMz5sIBZk4j9dKiY80FyiJOex2iJfq+TQ=)
                          2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:da:6a:f0:c4:b8:88:cb:7c:d3:53:1f:15:2f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
        Validity
            Not Before: Aug  4 09:00:46 2025 GMT
            Not After : Aug  5 09:00:46 2025 GMT
        Subject: CN=d7ad5fc8b1ccafff65cab62f5f12598136c83625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:6a:7c:3f:1a:28:86:98:20:17:bf:2b:0a:
                    3e:bb:a7:81:a7:2a:86:87:2b:f8:77:17:5a:dd:bb:
                    13:33:67:79:58:dd:0f:bc:a5:77:c1:65:c5:e8:6f:
                    8f:a3:80:a2:a7:30:64:49:5c:8a:2d:fb:72:1e:58:
                    01:83:e0:09:9f:3e:12:33:df:40:e6:78:8f:f7:56:
                    4b:e6:45:e5:9a:a2:55:9b:54:62:73:74:f5:d6:34:
                    a5:d8:10:1a:21:c2:8f:4c:22:f4:4d:81:a0:6a:49:
                    97:22:ca:ae:9e:66:0b:59:b2:84:3d:0e:10:dd:9e:
                    6f:1c:7d:53:2b:40:78:ca:f1:92:d9:54:cc:5c:20:
                    09:c1:f1:bf:6c:91:fe:e7:8c:11:a5:04:b9:e4:c9:
                    85:f8:36:6c:86:49:88:e8:8b:7c:d1:0d:60:60:07:
                    2a:52:9f:82:8c:29:f2:61:c0:2f:15:e4:c3:a4:5a:
                    d0:6c:31:9d:8c:6f:d1:91:87:cb:9c:7c:9e:00:af:
                    29:06:71:e7:ad:fc:a5:6f:03:0e:ab:3a:8c:c3:df:
                    fa:e5:37:d2:11:2b:81:d2:94:c8:90:3e:e0:f7:2a:
                    30:02:ca:48:69:a1:8d:7c:7a:12:98:a9:3a:d1:6c:
                    2e:73:0d:54:eb:cc:a6:40:fc:3a:8c:c8:b1:05:e3:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AD:5F:C8:B1:CC:AF:FF:65:CA:B6:2F:5F:12:59:81:36:C8:36:25
            X509v3 Authority Key Identifier:
                keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:47:0a:d6:58:c3:b5:db:5a:3d:6b:1d:00:ea:1e:ff:00:
         cd:30:3e:ee:da:73:a6:27:41:bd:4d:96:a4:74:da:d1:bf:dd:
         8a:0b:6d:4a:3a:a2:1e:06:25:ac:1b:8c:ab:ba:61:2f:50:7a:
         eb:49:3e:d4:98:7d:61:83:b1:36:60:47:a4:78:6e:4e:f7:52:
         a3:05:f3:02:3e:a6:10:ff:3f:26:19:26:d2:26:ec:26:a3:97:
         b2:b1:f4:7d:e6:db:3e:01:34:c8:50:f8:bd:54:1d:41:db:42:
         c7:3f:a5:53:60:c8:cc:4b:b8:4e:03:31:ef:3e:ef:1d:cc:5f:
         fe:25:b9:7c:72:5e:bd:e2:a9:fd:b8:ae:7f:11:c8:b0:c9:d2:
         85:d3:ef:26:39:e9:10:5f:3f:ff:f8:8d:d9:0d:96:b6:5c:05:
         95:b4:ba:44:e2:64:9f:82:86:2c:e2:ad:26:63:1f:24:fd:32:
         a1:6c:ee:cd:7b:98:9c:4a:50:dd:17:d5:63:15:06:50:ef:b2:
         97:41:cd:50:44:dd:15:de:b9:fa:04:37:b3:64:70:90:de:4c:
         8e:c0:b5:a3:3e:5d:58:7c:39:d6:fb:76:78:e0:52:09:78:63:
         47:5e:20:8e:8e:b0:e3:f3:16:6f:23:8e:f9:cc:b7:32:e0:e9:
         d0:1a:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:17 2025 by rpki-client