Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File:                     jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier:          807NrU7BPXBc2SIPtp5/XPt3l+BOfw671N7526nzpSo=
Subject key identifier:   5A:B6:5D:F8:0E:6F:DB:6C:D3:2B:89:6E:71:12:C9:EB:FC:61:B9:D1
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer:       /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial:       0198887BBCD9D6A8FB9E1582973620A4F419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 07:01:07 +0000
Manifest this update:     Fri 08 Aug 2025 07:01:07 +0000
Manifest next update:     Sat 09 Aug 2025 07:01:07 +0000
Files and hashes:         1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: 4VdXyyI3D/2WFJ+B1wZIE0uaoFfu3x/JeMZ5ZtK5Mbc=)
                          2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:7b:bc:d9:d6:a8:fb:9e:15:82:97:36:20:a4:f4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
        Validity
            Not Before: Aug  8 07:01:07 2025 GMT
            Not After : Aug  9 07:01:07 2025 GMT
        Subject: CN=5ab65df80e6fdb6cd32b896e7112c9ebfc61b9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:5c:ef:38:be:4f:bc:37:b6:8e:a1:97:6c:
                    4d:f9:6e:01:68:6f:40:48:62:b5:b5:24:e5:1c:92:
                    1d:17:a1:8c:c4:42:c2:1f:a6:11:88:fa:2c:35:63:
                    0f:fd:60:ee:8f:c2:a0:b8:52:41:71:38:d2:6f:89:
                    14:f4:83:8a:dd:8e:25:ce:7e:49:85:a2:56:2e:77:
                    16:54:ff:bb:1a:7e:95:fe:fc:22:c8:fe:5a:e2:95:
                    23:b6:ac:95:df:76:96:cd:ae:7a:8f:5f:46:d2:02:
                    ae:5e:6b:25:a7:b8:40:1b:df:95:10:d2:fb:ae:08:
                    15:1d:48:75:3e:b8:6e:27:8b:06:e0:1e:7e:44:cc:
                    a6:6b:bc:1b:69:69:2e:67:72:89:05:4b:ee:2c:33:
                    55:ae:b1:41:88:ef:a5:9e:87:73:00:bd:4d:da:9d:
                    6e:e1:8d:1b:b5:a9:26:14:a4:de:3d:a0:a3:a6:48:
                    26:15:b9:87:e4:a3:ba:fe:6d:09:87:32:a3:f7:ac:
                    d4:5d:1f:d7:4d:ff:ec:2a:c0:a9:b0:59:ae:d2:48:
                    06:61:68:ca:7b:35:fd:8d:6b:de:8f:bb:ed:45:60:
                    2b:3c:5c:20:0a:78:65:aa:a3:b5:b0:9a:b8:7e:97:
                    29:33:c0:a5:6d:f4:c3:e2:f3:70:33:0d:99:59:95:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B6:5D:F8:0E:6F:DB:6C:D3:2B:89:6E:71:12:C9:EB:FC:61:B9:D1
            X509v3 Authority Key Identifier:
                keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f4:67:03:b2:bc:0e:b0:26:c9:ea:c7:92:da:cb:b6:44:86:e5:
         ff:e3:70:fe:db:a8:a4:60:8c:00:3f:d5:ed:ab:12:f1:59:43:
         3b:00:7a:ae:e0:a2:1d:99:30:df:a1:01:24:b4:f4:3c:42:8f:
         35:87:d4:db:1c:a8:47:ef:0d:c7:c0:95:7b:30:47:1b:8d:7d:
         57:2e:05:0e:78:d2:e0:d6:f9:c3:2b:81:a4:48:ef:c3:00:c3:
         76:8d:fe:50:3e:cf:fa:13:85:7e:a9:73:d5:01:92:7c:a2:f6:
         d4:dc:62:a9:00:fc:ba:dd:e6:64:e1:c2:96:4d:b8:9e:e6:1e:
         04:17:64:40:a4:c9:11:d0:6b:b8:b7:df:ea:fb:05:b4:3e:f3:
         a5:6d:10:9c:ea:89:03:99:b2:26:c1:e1:d8:43:80:c6:e8:62:
         1d:ac:fb:68:2c:c4:08:6e:d0:e7:97:0f:a3:6c:c8:af:6c:ba:
         2f:df:c5:db:df:33:87:40:ef:22:63:9c:b0:9a:a1:9c:6b:29:
         98:54:ce:b0:3e:a7:e8:a3:2e:a0:e9:e4:ed:63:86:6b:58:2c:
         a4:78:08:49:ca:c2:f6:03:c3:87:81:05:59:16:db:3d:9b:14:
         10:76:2f:6e:e9:57:79:a2:de:35:00:9c:17:89:c4:dc:38:b3:
         d3:b7:73:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIe7zZ1qj7nhWClzYgpPQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2ZjZWQ0ZjM0ZTdmMzdlNzUxYjViNDVmMzBiOTljNjMx
MWY5N2UwHhcNMjUwODA4MDcwMTA3WhcNMjUwODA5MDcwMTA3WjAzMTEwLwYDVQQD
Eyg1YWI2NWRmODBlNmZkYjZjZDMyYjg5NmU3MTEyYzllYmZjNjFiOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDRc7zi+T7w3to6hl2xN+W4BaG9A
SGK1tSTlHJIdF6GMxELCH6YRiPosNWMP/WDuj8KguFJBcTjSb4kU9IOK3Y4lzn5J
haJWLncWVP+7Gn6V/vwiyP5a4pUjtqyV33aWza56j19G0gKuXmslp7hAG9+VENL7
rggVHUh1PrhuJ4sG4B5+RMyma7wbaWkuZ3KJBUvuLDNVrrFBiO+lnodzAL1N2p1u
4Y0btakmFKTePaCjpkgmFbmH5KO6/m0JhzKj96zUXR/XTf/sKsCpsFmu0kgGYWjK
ezX9jWvej7vtRWArPFwgCnhlqqO1sJq4fpcpM8ClbfTD4vNwMw2ZWZXfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFq2XfgOb9ts0yuJbnESyev8YbnRMB8GA1UdIwQY
MBaAFI5/ztTzTn8351G1tF8wuZxjEfl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUt
MGQwNTAzNThlNjU2LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUtMGQwNTAzNThlNjU2
LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9GcDsrwO
sCbJ6seS2su2RIbl/+Nw/tuopGCMAD/V7asS8VlDOwB6ruCiHZkw36EBJLT0PEKP
NYfU2xyoR+8Nx8CVezBHG419Vy4FDnjS4Nb5wyuBpEjvwwDDdo3+UD7P+hOFfqlz
1QGSfKL21NxiqQD8ut3mZOHClk24nuYeBBdkQKTJEdBruLff6vsFtD7zpW0QnOqJ
A5myJsHh2EOAxuhiHaz7aCzECG7Q55cPo2zIr2y6L9/F298zh0DvImOcsJqhnGsp
mFTOsD6n6KMuoOnk7WOGa1gspHgIScrC9gPDh4EFWRbbPZsUEHYvbulXeaLeNQCc
F4nE3Diz07dzPw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:07 2025 by rpki-client