Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File:                     JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier:          d6xqIR03CcJsT1q5KOXhej5APzXsHeAOCROsEppjX9A=
Subject key identifier:   62:A3:15:D5:9F:BC:AA:C2:82:3F:C1:80:20:C4:32:AB:6C:9F:87:BD
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer:       /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial:       01987450A8639D39F9799180661EC56E655E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 09:01:39 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:39 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:39 +0000
Files and hashes:         1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: dnVtZcKMyYfmfDVKZ3Lz5bulZxhPXwloYsQKUGYDw8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:a8:63:9d:39:f9:79:91:80:66:1e:c5:6e:65:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
        Validity
            Not Before: Aug  4 09:01:39 2025 GMT
            Not After : Aug  5 09:01:39 2025 GMT
        Subject: CN=62a315d59fbcaac2823fc18020c432ab6c9f87bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:7e:39:5d:0a:28:7d:9b:55:26:85:ef:e1:
                    a8:78:c9:79:4b:a7:6f:5d:a0:1b:e8:fd:14:b1:08:
                    b3:0b:2d:95:9e:2d:74:3e:76:83:ee:bf:51:af:ac:
                    d6:8d:9f:d6:6b:e2:4f:91:f2:4e:1d:84:97:8c:ed:
                    90:91:b1:c9:76:84:ee:73:94:e8:8b:d5:eb:6a:4a:
                    1c:df:ca:cf:20:6d:14:13:90:ba:a1:5c:2c:35:1f:
                    80:5d:f5:fc:98:0d:ee:9b:2a:41:4f:69:03:c7:63:
                    90:96:ae:45:b1:17:b8:e8:e1:08:09:de:bb:83:bf:
                    b5:3d:7f:b4:25:15:c0:f8:44:60:1f:5c:ab:1b:63:
                    16:2c:bc:61:65:d5:18:c2:65:bf:ec:ca:fb:05:ce:
                    af:87:5b:18:34:95:37:1a:92:b6:7b:f5:53:ef:ee:
                    64:36:6f:ce:53:df:2d:f5:66:f9:02:64:c2:fe:bc:
                    4b:37:0b:7c:91:b0:f5:c3:41:66:25:02:47:78:35:
                    9b:5e:6f:01:e8:46:8b:1a:6c:dd:47:0f:98:57:da:
                    e7:01:a1:f3:04:b1:92:3f:dc:2b:6e:7c:ec:fe:f8:
                    1a:43:2f:11:dd:05:88:9f:fb:da:cc:d7:d1:c3:9c:
                    f3:74:c1:bc:ba:ef:16:6a:66:e9:ed:63:03:13:af:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:15:D5:9F:BC:AA:C2:82:3F:C1:80:20:C4:32:AB:6C:9F:87:BD
            X509v3 Authority Key Identifier:
                keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:22:27:a0:ac:3b:b4:c7:2c:42:08:a0:e7:3c:28:fb:db:
         e8:5a:83:14:67:be:31:29:ec:7c:9d:ec:59:95:38:80:15:b8:
         fa:57:e4:71:a4:b1:5d:08:03:78:87:f1:a6:13:54:b4:15:7d:
         19:8d:8e:4b:6c:11:59:93:3d:3d:97:29:44:8b:b5:d4:b4:b4:
         70:35:9d:ce:82:f2:12:11:c6:ca:d3:ee:0f:22:2c:36:ef:c6:
         45:2c:44:3b:f1:98:8f:50:25:0a:4c:c8:4e:79:10:50:0a:57:
         3c:91:d9:76:42:4f:dd:a0:94:47:4b:c0:6b:48:d9:16:03:42:
         21:89:a9:19:0d:87:fc:30:81:bd:70:8c:a9:b9:f8:a6:84:df:
         c5:c8:28:91:7a:72:f0:b8:36:35:48:a7:a8:a3:97:33:94:cd:
         68:ec:e9:9b:e2:13:4e:c1:a8:57:18:da:90:30:90:ba:29:d3:
         76:f8:24:08:ac:11:ac:1c:90:65:24:d9:79:19:8f:fd:54:b6:
         c3:b0:3c:16:cd:db:3d:99:e6:55:f9:47:ca:63:21:b2:1c:4c:
         7b:d6:a1:a4:44:ca:c7:b3:1a:93:f5:cd:03:dd:d0:0b:8c:d6:
         cd:7d:b8:e7:b1:07:65:10:1e:b3:a3:43:95:f2:95:05:f7:9e:
         f5:bb:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:09 2025 by rpki-client