Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
File:                     jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft (raw, json)
Hash identifier:          oAkDHoL4IF18K7NDch1vOSBbh6FHzIB+PqRPzg+3l8E=
Subject key identifier:   E4:9E:AF:68:67:22:3D:86:52:C4:D8:D6:81:7B:AC:CA:0D:BA:98:9E
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       01988BEA8069C92D5A77C12CC746AD92632C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
Manifest number:          0920
Signing time:             Fri 08 Aug 2025 23:00:57 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:57 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:57 +0000
Files and hashes:         1: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl (hash: kQGdGJD+FVgL30X2i9pxyg8x80htTgBCur+0OC2BEbQ=)
                          2: tGF0KepWs_QQSq5Gqg3jdlf7Wg4.roa (hash: TESttPZc3JvCUN0ojsF44ZWR9WcYNw/S3gDe81zvl7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:80:69:c9:2d:5a:77:c1:2c:c7:46:ad:92:63:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: Aug  8 23:00:57 2025 GMT
            Not After : Aug  9 23:00:57 2025 GMT
        Subject: CN=e49eaf6867223d8652c4d8d6817bacca0dba989e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:f9:5e:a5:58:0b:a9:4e:ba:4a:6f:0e:f6:
                    d0:04:d8:97:e9:dc:83:95:21:03:0e:3f:8f:11:f6:
                    fd:f0:0b:3b:fb:24:d5:18:cd:78:d1:ce:4b:e9:37:
                    cd:a5:9c:06:42:27:ab:9f:3a:a4:53:cd:0d:ad:bf:
                    c2:fb:76:2d:4c:76:3b:49:76:2e:5e:b2:e1:77:63:
                    0d:f2:b0:ff:aa:b6:dc:e9:26:51:03:04:ed:37:16:
                    be:d4:fd:84:e9:e7:91:6e:88:58:e8:9f:bd:02:38:
                    2d:40:9d:c6:cd:59:19:0a:2e:4a:2b:99:92:de:69:
                    6e:e3:43:e8:22:fa:d3:ba:71:70:d1:ef:f5:e8:56:
                    89:fb:c3:ac:9c:5f:6d:10:32:03:3b:22:7a:52:ea:
                    fe:2c:7a:41:89:7f:9d:36:47:37:98:09:3a:dd:c8:
                    46:8e:df:c3:cb:66:ab:00:d3:9a:ae:11:2e:63:78:
                    f2:a2:c0:87:71:b7:01:f8:7b:db:90:a0:9b:e2:ff:
                    e6:fb:e2:52:8a:bf:19:34:04:50:2b:2c:00:89:81:
                    d8:f6:3a:a5:3d:19:81:5a:1b:ff:fa:5e:e9:05:b9:
                    c2:81:c6:87:98:c2:74:02:54:85:a4:58:0d:d5:38:
                    ac:0b:fc:93:58:1b:34:2d:ca:b3:0b:c4:56:56:47:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:AF:68:67:22:3D:86:52:C4:D8:D6:81:7B:AC:CA:0D:BA:98:9E
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8f:d9:65:78:0d:f1:1f:96:4d:d5:59:20:eb:97:5e:d8:8a:
         a0:ef:1e:58:b0:ee:f5:78:91:93:f7:e1:0e:0f:91:25:7c:fe:
         0f:45:05:45:c6:bd:67:99:15:17:1b:80:ca:b7:10:00:a1:67:
         55:10:c7:3a:82:0e:52:7a:05:fe:8e:15:78:43:f2:4a:30:25:
         39:a1:c3:07:3a:29:63:df:d7:3f:cf:9d:63:0d:ef:df:4e:48:
         78:0c:24:e0:6d:80:a8:7c:1b:03:0d:17:cf:58:46:02:39:58:
         ef:d1:b6:83:65:2c:6e:6d:61:07:d3:09:f8:75:b5:27:73:bc:
         04:08:ab:43:18:a8:52:83:30:63:d9:b7:32:f7:14:c7:d6:24:
         02:40:d4:86:e4:05:39:c1:23:f7:1e:25:9f:f9:0d:8a:e4:0d:
         2c:ba:1c:ef:6e:43:1c:28:a7:b7:60:4c:de:65:1f:c8:7f:78:
         29:b3:25:fa:5c:7f:46:91:ba:98:88:7f:e1:ed:a3:e0:5c:46:
         ce:32:00:d5:a7:1c:81:1b:bd:60:3c:88:63:77:3a:3d:0f:38:
         d0:3f:c8:74:99:68:43:3f:73:1f:6a:f2:8f:00:a2:83:2b:08:
         0b:20:fc:77:1a:e3:32:ff:3a:24:0c:f4:75:77:eb:f3:fb:01:
         43:94:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:33 2025 by rpki-client