Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File:                     JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier:          CzZbUMCRs0PsEbYkYK2uD77WNJaLULo1qfPuRUfmjEg=
Subject key identifier:   A0:A8:D9:7C:0B:86:69:50:CC:21:8A:51:9A:3A:A9:2D:1F:5F:E8:39
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer:       /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial:       01987A1B5E9AC0ECD3EF9EBDE5FBFB5DAD2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number:          06F3
Signing time:             Tue 05 Aug 2025 12:01:10 +0000
Manifest this update:     Tue 05 Aug 2025 12:01:10 +0000
Manifest next update:     Wed 06 Aug 2025 12:01:10 +0000
Files and hashes:         1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: sj2No2LhMjrNpkFtaLDgdSbvI2wpMekCZzOmu2bccwY=)
                          2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:1b:5e:9a:c0:ec:d3:ef:9e:bd:e5:fb:fb:5d:ad:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
        Validity
            Not Before: Aug  5 12:01:10 2025 GMT
            Not After : Aug  6 12:01:10 2025 GMT
        Subject: CN=a0a8d97c0b866950cc218a519a3aa92d1f5fe839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:29:fe:fa:db:08:25:1b:f1:51:45:da:db:
                    ee:02:ce:b2:49:c2:6c:4c:e2:d7:9f:d7:09:61:26:
                    a8:f0:d9:9c:ef:70:4f:05:c3:3b:6e:5c:43:b2:73:
                    3c:fb:10:43:76:7e:35:4a:47:05:e2:21:50:58:13:
                    59:da:e0:e7:ab:0f:42:d5:02:dc:ed:5d:62:30:41:
                    a0:cf:be:85:c7:f4:43:fb:a5:ff:f9:4b:fd:91:51:
                    84:8b:ca:c6:ef:e9:7a:ec:ea:c3:96:f5:95:f2:7a:
                    bd:f9:ed:26:66:8a:54:b8:96:d0:9a:5d:8d:32:f3:
                    15:d5:d4:d1:44:0e:19:18:9c:ab:d7:c4:01:cf:f5:
                    cd:cc:36:a2:07:ca:12:1b:da:c7:e8:b3:b3:1e:33:
                    61:3c:60:b6:2b:df:63:04:19:90:41:99:0d:d1:59:
                    ce:80:ad:b2:b6:15:15:6a:0a:40:c1:41:9c:43:d6:
                    5f:fa:da:73:f0:f9:d2:20:8d:52:53:51:e4:eb:0e:
                    d9:31:7d:0f:bd:5d:6a:13:73:1b:1e:1c:09:6b:47:
                    84:77:5c:e8:17:de:d4:24:e5:a3:16:4b:28:dd:d1:
                    2b:10:ea:49:1c:21:e5:6f:9b:9c:c6:1c:c0:d2:03:
                    b6:19:f7:de:6c:07:c2:66:e1:68:e5:29:39:69:41:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:D9:7C:0B:86:69:50:CC:21:8A:51:9A:3A:A9:2D:1F:5F:E8:39
            X509v3 Authority Key Identifier:
                keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:ff:7c:18:33:34:1d:ee:d6:b1:37:2e:12:cf:46:bc:27:
         a2:15:97:d8:b1:dc:26:ed:84:f4:68:5f:f9:7c:aa:de:77:dd:
         b9:79:96:65:3a:13:ee:d8:73:b6:08:c0:e4:b4:e9:ef:d0:ed:
         32:6d:82:1c:6b:4d:59:83:2b:74:99:ba:eb:90:ac:c6:95:d3:
         be:4c:64:7a:78:98:6a:db:c0:a1:41:c0:af:24:2c:61:19:d3:
         c0:27:47:7e:8f:60:ba:49:81:4f:71:20:3a:b3:91:74:e7:8e:
         aa:0a:9f:60:89:5d:27:81:cc:b4:56:86:08:96:39:27:88:00:
         82:91:c3:90:66:30:fe:6c:88:be:b8:40:d7:f4:b4:34:d8:b5:
         b1:d4:f5:22:c5:6c:36:64:d9:b3:9c:aa:6c:e3:e7:0f:89:c5:
         9e:ed:da:44:1b:31:17:f2:10:d7:98:36:97:ff:d6:6d:bb:fe:
         d2:1b:c7:1c:29:ac:c2:87:71:5d:16:7b:40:fa:52:65:76:4f:
         cb:0f:8b:46:00:ab:0c:51:8b:c8:2d:2f:aa:e7:45:fa:57:0b:
         95:5c:9b:0c:f5:a5:ef:e6:21:40:7c:83:5d:90:e8:05:0d:2f:
         fc:cd:cb:43:77:90:69:43:02:92:b2:ce:6e:6f:3a:1f:dd:c9:
         e6:03:ed:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6G16awOzT75695fv7Xa0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MWU3ODcxZmQzOGYyZGY5MTgyNDJkZGExYzZmYzM1Njg4
NDIzY2EwHhcNMjUwODA1MTIwMTEwWhcNMjUwODA2MTIwMTEwWjAzMTEwLwYDVQQD
EyhhMGE4ZDk3YzBiODY2OTUwY2MyMThhNTE5YTNhYTkyZDFmNWZlODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn34p/vrbCCUb8VFF2tvuAs6yScJs
TOLXn9cJYSao8Nmc73BPBcM7blxDsnM8+xBDdn41SkcF4iFQWBNZ2uDnqw9C1QLc
7V1iMEGgz76Fx/RD+6X/+Uv9kVGEi8rG7+l67OrDlvWV8nq9+e0mZopUuJbQml2N
MvMV1dTRRA4ZGJyr18QBz/XNzDaiB8oSG9rH6LOzHjNhPGC2K99jBBmQQZkN0VnO
gK2ythUVagpAwUGcQ9Zf+tpz8PnSII1SU1Hk6w7ZMX0PvV1qE3MbHhwJa0eEd1zo
F97UJOWjFkso3dErEOpJHCHlb5ucxhzA0gO2GffebAfCZuFo5Sk5aUHxYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCo2XwLhmlQzCGKUZo6qS0fX+g5MB8GA1UdIwQY
MBaAFCUeeHH9OPLfkYJC3aHG/DVohCPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgt
OGJlYWRhYWFkMGIxLzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgtOGJlYWRhYWFkMGIx
LzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfP/fBgz
NB3u1rE3LhLPRrwnohWX2LHcJu2E9Ghf+Xyq3nfduXmWZToT7thztgjA5LTp79Dt
Mm2CHGtNWYMrdJm665CsxpXTvkxkeniYatvAoUHAryQsYRnTwCdHfo9gukmBT3Eg
OrORdOeOqgqfYIldJ4HMtFaGCJY5J4gAgpHDkGYw/myIvrhA1/S0NNi1sdT1IsVs
NmTZs5yqbOPnD4nFnu3aRBsxF/IQ15g2l//Wbbv+0hvHHCmswodxXRZ7QPpSZXZP
yw+LRgCrDFGLyC0vqudF+lcLlVybDPWl7+YhQHyDXZDoBQ0v/M3LQ3eQaUMCkrLO
bm86H93J5gPtNA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:04 2025 by rpki-client