Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File:                     JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier:          Bl0g8Wn273bg/AbwsN43jbZqZoW17LGidT2DyFWZEbg=
Subject key identifier:   B2:82:29:DD:86:9E:0C:3F:C7:55:38:14:58:B7:8E:70:64:B8:2D:17
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer:       /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial:       0198960036D35A0C57C2317A89EC4A2FB1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number:          091E
Signing time:             Sun 10 Aug 2025 22:00:53 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:53 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:53 +0000
Files and hashes:         1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: f8MDrH9DYtnSK8J7zYc8DABZhpk3FU1F6CESu2yjae8=)
                          2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:00:36:d3:5a:0c:57:c2:31:7a:89:ec:4a:2f:b1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
        Validity
            Not Before: Aug 10 22:00:53 2025 GMT
            Not After : Aug 11 22:00:53 2025 GMT
        Subject: CN=b28229dd869e0c3fc755381458b78e7064b82d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:d5:90:49:24:c7:05:26:f7:7a:60:35:53:
                    59:fb:34:c4:60:33:bd:d1:d5:c3:ef:d0:6b:13:ae:
                    ad:b8:a2:f8:95:e5:ad:7f:a4:b1:4b:89:1f:53:55:
                    56:87:72:09:e4:20:3d:56:57:54:fb:01:06:f9:c3:
                    02:31:ee:84:32:41:04:c0:ee:5f:fe:7c:99:55:f6:
                    fc:1f:0c:05:33:bb:61:37:15:0e:0c:5d:78:a3:f4:
                    ff:24:25:df:e9:12:8a:46:9b:25:8f:97:1e:40:f2:
                    a4:fc:b5:43:5c:29:f4:89:1a:ee:35:32:69:52:23:
                    1f:ec:4d:b1:df:e9:e9:de:f8:33:48:3b:81:c2:ac:
                    da:bf:28:53:7f:a7:15:1c:cb:eb:f5:d4:71:ed:62:
                    6b:4a:4a:ce:54:f0:27:1c:b2:f5:d5:f3:88:aa:f3:
                    e2:43:0b:53:9f:9b:f2:0a:68:d4:05:f7:7f:3d:d3:
                    10:d6:23:fa:0f:f4:08:5d:dd:66:0c:9b:25:44:c3:
                    93:ca:47:0e:3f:56:d0:02:21:ec:68:64:78:23:b6:
                    07:42:32:d0:8f:6f:d6:0d:0e:5d:3f:2e:c9:5c:ea:
                    cd:16:01:3e:ee:f1:a5:d3:c6:6b:16:99:87:29:a1:
                    07:14:98:76:0c:7a:f7:74:f4:61:ce:c5:e6:10:15:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:29:DD:86:9E:0C:3F:C7:55:38:14:58:B7:8E:70:64:B8:2D:17
            X509v3 Authority Key Identifier:
                keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:19:23:69:51:70:71:85:d5:1e:24:ea:50:4a:30:af:be:
         00:01:f1:5c:ef:d9:17:0b:6f:ff:f5:fb:d9:c4:0d:48:c2:e2:
         8f:5c:58:f3:4e:8a:af:74:6a:b3:27:16:53:45:5e:8e:dd:13:
         95:5f:b7:c3:04:98:ea:65:ae:52:28:a9:b0:cb:de:06:55:09:
         8b:2d:6d:bf:f3:9b:0c:c7:4e:da:d7:5e:58:be:ea:97:c5:34:
         59:3e:bd:52:e6:33:15:c3:a5:3a:48:3e:c4:2d:d6:6c:66:5e:
         03:54:5e:9e:32:19:be:3f:52:62:fd:21:ba:f8:61:ec:32:ae:
         67:c2:c9:6b:73:b9:82:c1:1d:eb:53:ef:e1:a2:be:61:a0:2a:
         ba:b0:12:5d:10:70:b3:d8:b3:c6:df:63:59:b3:5c:b0:23:35:
         23:c5:8f:00:c3:c4:c0:26:97:b8:24:4c:ff:a2:6f:9f:63:0b:
         86:cf:4b:6c:91:a9:be:b9:bb:f2:c9:9f:7f:a4:92:a6:ac:67:
         df:3d:f4:ec:ee:6c:c1:ca:be:d6:93:1b:db:e8:1e:2a:1b:c8:
         fb:fc:1b:59:8a:33:54:9e:29:6d:78:36:06:63:7e:40:31:f5:
         46:55:4c:73:15:e8:12:ad:67:7b:98:d8:a4:04:98:43:04:85:
         fc:44:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:03 2025 by rpki-client