Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
File:                     JNnaT_sbttJz3hutXbvw0f9H8M8.mft (raw, json)
Hash identifier:          vAx04LPXlKhAGOHU/Zym1QA12Ed3PxWmiaSrv61Uibo=
Subject key identifier:   59:E6:88:E3:F5:4A:87:D1:6C:89:E1:59:81:15:58:64:06:B7:9E:66
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Certificate issuer:       /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial:       01988FC72103D6985243F19F449A5C59AE5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
Manifest number:          097B
Signing time:             Sat 09 Aug 2025 17:00:48 +0000
Manifest this update:     Sat 09 Aug 2025 17:00:48 +0000
Manifest next update:     Sun 10 Aug 2025 17:00:48 +0000
Files and hashes:         1: DLrHttKiIGju_8yity8U1uxWhCc.roa (hash: VHk4A+B9UE0pVFEOd4dpibicEXnriGB+QdFyrbAlkf8=)
                          2: HshlQ1_hQoUx34cWtNGYJmAR5X8.roa (hash: CD1pnkIl3YCWldHhhtx8HjRRaHpatz1VABmgxVAMvto=)
                          3: JNnaT_sbttJz3hutXbvw0f9H8M8.crl (hash: Ioj4jG7RvEKwugDPBh/RgMrjHWiVKDFiOhULCzLJjYQ=)
                          4: Src3e8VuS0hETCVSGIFEjeLOMa8.roa (hash: njCoKOW4dwM2EVWN+8GygMrZoisLQ05lRLtnj2idXYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:21:03:d6:98:52:43:f1:9f:44:9a:5c:59:ae:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
        Validity
            Not Before: Aug  9 17:00:48 2025 GMT
            Not After : Aug 10 17:00:48 2025 GMT
        Subject: CN=59e688e3f54a87d16c89e1598115586406b79e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:9c:7b:38:dd:dd:39:80:9a:ff:09:4c:b9:
                    be:4b:8f:f5:92:08:b6:d1:b0:ff:da:e0:05:8d:71:
                    e9:4f:d0:0e:d5:8b:05:45:6a:29:e2:97:6f:91:16:
                    c3:a1:a6:9c:9d:a4:bb:e6:ef:7c:5e:18:a5:a3:e4:
                    ed:4e:45:34:91:bb:21:b9:47:1b:a2:35:1e:49:b7:
                    b6:ff:dc:89:2d:14:ac:20:32:fd:c6:97:71:4a:4f:
                    7e:dc:78:9c:2d:d5:b6:06:76:51:95:ff:e2:a1:1d:
                    3b:25:d1:80:3d:4d:fb:8c:34:f8:6d:8e:d6:61:93:
                    dd:fb:f3:ee:9b:c8:f7:c8:f6:a9:0b:6d:e2:59:dd:
                    78:67:9a:e3:ba:e9:25:08:af:67:cc:33:b5:01:f7:
                    de:62:20:a6:66:04:de:63:dd:cd:ae:2e:76:6c:e8:
                    9a:e7:7f:4c:00:e8:53:b4:15:19:77:f0:fe:61:90:
                    b7:1d:5f:dc:01:36:b3:42:6a:75:5e:7f:8b:ba:ff:
                    6a:ab:58:dc:a7:6e:09:b3:10:66:72:66:72:c7:01:
                    ce:b0:f6:1a:11:5f:15:42:91:03:88:95:12:74:84:
                    eb:3e:07:81:52:8d:dd:c7:f8:49:61:37:1b:9f:36:
                    aa:13:33:0d:be:7b:5b:c0:5d:65:51:5e:fb:45:e5:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:88:E3:F5:4A:87:D1:6C:89:E1:59:81:15:58:64:06:B7:9E:66
            X509v3 Authority Key Identifier:
                keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:a6:86:91:7a:2b:af:40:bd:7a:89:c9:d9:02:f4:0a:a3:
         e5:a8:4e:6a:92:b9:10:13:c0:59:a0:8a:e4:54:18:07:89:2e:
         51:c6:4a:a3:15:a6:45:88:95:fc:e5:82:2e:8e:93:20:62:c1:
         25:9a:cc:5c:a0:a1:ca:3b:20:b9:10:c9:92:8e:38:75:d9:95:
         47:1a:cb:f0:7c:72:dd:85:e2:73:b6:6d:c7:3f:a8:1b:bf:dc:
         2f:2f:c1:f1:c7:b1:1f:29:f2:e5:fd:26:fe:f3:c4:95:7a:19:
         47:06:51:ac:c8:f0:0c:0a:ff:f9:d3:1d:34:c9:bd:86:1a:15:
         fa:fc:c3:98:4a:ae:95:84:d8:c5:b1:ae:41:b5:7a:af:74:ad:
         55:a5:68:c9:e3:7d:24:ab:1c:f4:57:bb:4d:86:eb:d3:7f:5d:
         d4:24:ae:8f:72:7c:b1:59:d1:a7:4e:30:64:93:8c:5b:87:3c:
         c2:24:cf:25:74:36:34:60:f6:86:9b:80:0d:d5:3f:c3:d6:18:
         e4:2d:cd:75:b8:35:ce:72:4f:5f:f8:78:41:c8:35:13:0a:f7:
         a9:b6:86:aa:31:f3:93:a1:a2:1a:b2:ed:76:0b:59:a7:75:79:
         dc:46:5b:ca:80:00:b1:ec:11:a5:e7:fd:6a:4a:c5:56:36:4e:
         dc:1a:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:39 2025 by rpki-client