Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
File:                     jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json)
Hash identifier:          XJp90+62LmjdEkH4Jo9Hd0zvNJVQWJexceF/rK7vvC4=
Subject key identifier:   AB:01:8F:85:7C:3F:EF:88:BF:4C:8B:87:49:D7:14:5A:68:38:04:A6
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Certificate issuer:       /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial:       0198744FC79149FE369FD3283F84EDC96491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 09:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:42 +0000
Files and hashes:         1: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (hash: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=)
                          2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: CK85bTg7TDX1qlV+4GFawSDfpM3NPXxO4pDOkRjo5oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:c7:91:49:fe:36:9f:d3:28:3f:84:ed:c9:64:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
        Validity
            Not Before: Aug  4 09:00:42 2025 GMT
            Not After : Aug  5 09:00:42 2025 GMT
        Subject: CN=ab018f857c3fef88bf4c8b8749d7145a683804a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:a2:c3:28:3c:09:ad:85:4a:14:f0:2f:cb:
                    b7:dc:e5:05:b0:c7:25:3f:c7:45:98:3f:33:84:90:
                    9e:99:9d:7c:38:57:b6:ed:46:3e:1e:85:7b:79:d1:
                    72:e0:59:51:b4:a1:a7:fa:44:1d:39:b2:2b:9a:a8:
                    93:41:4c:40:59:99:c9:02:ee:51:21:9a:15:ba:7a:
                    51:7b:e3:5d:73:9a:03:96:c6:02:ea:e3:59:56:45:
                    c1:13:80:3f:db:06:87:cf:42:bb:e5:e1:70:a2:94:
                    45:c4:f5:b1:20:a6:ec:50:d0:f6:fe:9d:1a:3e:9f:
                    e4:85:09:4c:4c:32:17:76:61:34:04:82:79:37:53:
                    77:2f:31:5d:35:83:7c:ee:21:4b:eb:01:19:a7:10:
                    3f:56:88:df:4f:c0:10:58:21:7f:66:53:c5:e3:f1:
                    a4:f6:c2:2f:d4:81:64:5b:3a:f8:d3:e6:53:b1:62:
                    49:b3:46:03:15:3b:f2:d0:77:6f:a3:30:99:08:d6:
                    24:84:af:ef:44:d4:b4:01:f7:79:b2:69:18:9f:df:
                    05:7d:f3:c4:8d:5c:d3:b8:f1:db:2f:46:6f:0f:41:
                    5e:8c:13:ed:cd:01:21:ae:a8:19:f4:c4:74:a0:ad:
                    35:21:b3:c4:82:18:c1:cd:0f:98:7e:8a:2e:ba:10:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:8F:85:7C:3F:EF:88:BF:4C:8B:87:49:D7:14:5A:68:38:04:A6
            X509v3 Authority Key Identifier:
                keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:0e:18:96:f1:5b:5c:48:ee:3d:2d:40:13:37:dd:41:3b:
         a7:7b:38:92:11:b5:b8:66:ce:c1:e0:7b:b6:e2:f0:6c:04:5f:
         a5:56:58:ee:a6:74:fb:c5:ec:06:12:a4:82:55:87:39:93:b8:
         cf:91:a6:43:2c:8f:d3:e1:d5:09:56:d1:e5:5b:6f:d1:93:0b:
         b9:d3:4c:dc:b6:ac:2e:fb:1d:24:4f:30:e1:66:01:ed:dd:a7:
         ad:0c:45:6d:95:33:f3:ce:66:b7:f8:f4:a8:5a:d4:82:fd:d8:
         8e:4e:c3:a2:f3:2a:eb:92:63:c5:6f:34:9b:7b:81:aa:db:c0:
         6c:f4:c3:95:36:25:b1:7d:5b:37:f6:ae:b0:5b:41:56:32:dc:
         2f:7a:1e:50:cd:d8:6e:f7:8b:ec:33:a6:f8:66:e1:00:b2:15:
         a2:d4:68:e1:a6:ea:6c:98:d3:be:eb:81:b2:ad:ba:c5:ec:7a:
         cf:b0:5e:c9:65:5e:25:a6:bb:2a:0f:c4:e4:0e:a5:1f:6d:9e:
         2e:5b:32:5f:a4:95:ac:dd:61:4c:3e:ef:cc:4e:55:0c:2b:e1:
         e1:63:56:56:fe:8a:a7:dd:ef:5d:4b:e9:8c:7a:3f:68:4f:6b:
         49:ee:f8:33:4c:f0:76:42:ac:ca:61:4d:02:79:15:cc:ec:9a:
         b4:2e:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:22 2025 by rpki-client