Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File:                     JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier:          Y0wx4vuuMXUWdoABdKBUj054vtItuXAxTqMJZLLOG/4=
Subject key identifier:   30:B3:05:47:AC:91:88:E5:21:64:B3:60:52:C6:60:B2:87:75:D6:E1
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       01988A33479152D0246D778143185136CDC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 15:01:13 +0000
Manifest this update:     Fri 08 Aug 2025 15:01:13 +0000
Manifest next update:     Sat 09 Aug 2025 15:01:13 +0000
Files and hashes:         1: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: mUnlmYtumRaKkDQi6c695aZxvqGlFhbhvPkQEennVZ0=)
                          2: aBjEn09c9jlvq3tyQ6uQKbAuHow.roa (hash: k2Il8Q6rfTX6EoDV8IvCybU7+NvXuouKuK8ZTUniptc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:33:47:91:52:d0:24:6d:77:81:43:18:51:36:cd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Aug  8 15:01:13 2025 GMT
            Not After : Aug  9 15:01:13 2025 GMT
        Subject: CN=30b30547ac9188e52164b36052c660b28775d6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:68:e1:13:14:13:6f:68:9a:53:cd:ac:37:
                    ff:10:41:ac:f9:a0:49:23:7c:89:78:52:28:ad:d6:
                    25:c0:93:4f:63:92:9d:10:9e:57:81:46:fb:5e:84:
                    3d:f7:0e:06:b8:d3:54:34:ad:fa:0e:64:00:e4:e4:
                    05:ce:37:04:0b:7d:62:20:95:d7:bc:89:2a:a4:be:
                    da:c8:53:65:33:ea:0e:af:2a:06:b2:e7:80:1f:0c:
                    e6:a8:74:b7:17:3f:bc:9d:00:37:9a:24:fc:ea:c8:
                    c0:c2:1c:e6:90:52:9c:81:6b:aa:32:d5:b7:b6:b0:
                    6d:64:3a:cb:5d:58:87:fe:bd:99:0d:d4:38:a0:04:
                    69:e8:18:97:d3:54:6f:62:17:bf:7f:66:d3:f2:09:
                    a8:c8:1c:b8:d3:16:cf:67:d4:f4:b3:b4:85:6d:54:
                    5d:37:88:16:d8:1a:5b:ea:04:e1:a1:99:0d:0b:f9:
                    b3:a2:29:b2:de:f5:85:45:85:52:11:46:18:10:3e:
                    0c:17:35:fb:dd:06:fc:f8:f7:d0:5c:5c:90:62:ff:
                    a5:67:88:cd:ae:5a:cd:23:2b:0c:a5:c5:20:42:3d:
                    a4:f5:81:2f:95:48:d9:f2:a3:43:20:3f:65:66:db:
                    69:15:1d:a7:11:52:68:2a:ab:54:51:3d:94:15:99:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B3:05:47:AC:91:88:E5:21:64:B3:60:52:C6:60:B2:87:75:D6:E1
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:a6:c2:88:79:53:19:80:2c:59:0b:26:7e:b8:80:ba:5f:
         3e:39:36:f3:fe:ed:cc:3d:33:62:9d:93:f8:61:fe:3a:58:76:
         cd:e0:ad:b0:62:ff:20:35:75:88:63:1f:65:58:bd:f7:02:93:
         bc:4c:a5:6d:6d:0a:47:db:36:88:f6:23:15:90:27:21:ec:90:
         4b:1e:45:fd:bf:65:39:7b:3a:29:cc:92:ef:17:45:1d:f4:63:
         a4:11:c0:42:6b:43:80:25:61:e2:16:2e:c7:76:c7:1d:32:af:
         7e:34:c7:d0:2b:9e:a8:62:a6:77:a4:f0:27:9b:82:14:da:4c:
         a4:dd:b3:34:19:37:79:59:73:72:3b:b0:ab:2a:83:e9:b6:f1:
         4a:1f:9a:04:58:5a:57:0d:d7:39:7c:72:6c:98:f2:79:47:e2:
         9c:92:dc:12:88:13:51:c2:8c:e4:39:11:1d:d2:a8:5a:95:a4:
         17:93:e1:47:b2:55:38:81:65:23:a5:63:b5:22:4b:42:8d:96:
         09:6e:e6:d4:4b:1e:d4:79:45:1b:b1:cb:13:f0:10:f9:59:73:
         a5:2f:5a:3e:af:e7:89:57:36:07:af:fa:eb:41:1b:d8:31:1b:
         64:17:32:10:91:b4:e7:7b:40:16:b3:e6:38:e7:95:fe:33:48:
         15:28:b8:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKM0eRUtAkbXeBQxhRNs3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OThhNTc1NGRlZTllZWY2ZjIyNDU2MmNiODIzOWFjOGJk
YjA1YjgwHhcNMjUwODA4MTUwMTEzWhcNMjUwODA5MTUwMTEzWjAzMTEwLwYDVQQD
EygzMGIzMDU0N2FjOTE4OGU1MjE2NGIzNjA1MmM2NjBiMjg3NzVkNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp1o4RMUE29omlPNrDf/EEGs+aBJ
I3yJeFIordYlwJNPY5KdEJ5XgUb7XoQ99w4GuNNUNK36DmQA5OQFzjcEC31iIJXX
vIkqpL7ayFNlM+oOryoGsueAHwzmqHS3Fz+8nQA3miT86sjAwhzmkFKcgWuqMtW3
trBtZDrLXViH/r2ZDdQ4oARp6BiX01RvYhe/f2bT8gmoyBy40xbPZ9T0s7SFbVRd
N4gW2Bpb6gThoZkNC/mzoimy3vWFRYVSEUYYED4MFzX73Qb8+PfQXFyQYv+lZ4jN
rlrNIysMpcUgQj2k9YEvlUjZ8qNDID9lZttpFR2nEVJoKqtUUT2UFZlZ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCzBUeskYjlIWSzYFLGYLKHddbhMB8GA1UdIwQY
MBaAFCaYpXVN7p7vbyJFYsuCOayL2wW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMt
MGYwODU1OWQ3ZDE4LzEvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMtMGYwODU1OWQ3ZDE4
LzEvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBWmwoh5
UxmALFkLJn64gLpfPjk28/7tzD0zYp2T+GH+Olh2zeCtsGL/IDV1iGMfZVi99wKT
vEylbW0KR9s2iPYjFZAnIeyQSx5F/b9lOXs6KcyS7xdFHfRjpBHAQmtDgCVh4hYu
x3bHHTKvfjTH0CueqGKmd6TwJ5uCFNpMpN2zNBk3eVlzcjuwqyqD6bbxSh+aBFha
Vw3XOXxybJjyeUfinJLcEogTUcKM5DkRHdKoWpWkF5PhR7JVOIFlI6VjtSJLQo2W
CW7m1Ese1HlFG7HLE/AQ+VlzpS9aPq/niVc2B6/660Eb2DEbZBcyEJG053tAFrPm
OOeV/jNIFSi4Og==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:10 2025 by rpki-client