Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File:                     JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier:          EoyUM+vig0TS9coCrkFnyXk675K/D2DfLVwNOsEhyTI=
Subject key identifier:   01:07:9E:BB:1B:28:F2:7C:63:93:32:47:12:0D:5F:55:60:7E:DD:83
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer:       /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial:       0198744FB350309D615DA64BE26F7CDBB1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 09:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:36 +0000
Files and hashes:         1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: Pw8kNLygXx6fUKG26w/45l0b15TDOWcCAeV6pSHJZ8E=)
                          2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
                          3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:b3:50:30:9d:61:5d:a6:4b:e2:6f:7c:db:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
        Validity
            Not Before: Aug  4 09:00:36 2025 GMT
            Not After : Aug  5 09:00:36 2025 GMT
        Subject: CN=01079ebb1b28f27c63933247120d5f55607edd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:bc:ac:2c:ec:86:26:f3:b6:58:fe:9a:96:
                    44:f5:02:dd:32:ff:b5:1a:07:33:ef:6f:ac:23:36:
                    08:05:96:5b:77:89:8d:46:2e:c9:de:34:24:af:5a:
                    93:11:04:5c:6c:b0:bf:a6:32:6e:c2:d8:6e:09:a4:
                    04:d0:88:15:45:6e:5d:52:83:21:78:97:e5:59:63:
                    f8:76:1c:c1:7a:0b:cd:39:1b:c4:f2:22:f4:b2:51:
                    b0:f0:08:5a:99:e8:b2:ad:eb:20:d7:05:2e:f2:99:
                    9b:97:bc:b8:60:65:13:7b:7b:6a:63:dc:21:37:96:
                    38:e5:36:cd:c0:32:73:84:0b:e8:4d:af:a4:51:9c:
                    3e:2f:ac:45:f2:17:e4:e8:8e:cb:1f:18:41:58:df:
                    cd:36:c3:4a:88:fd:a5:eb:3b:c7:a0:87:6a:8a:b7:
                    23:c9:2e:46:73:1c:d7:1f:05:71:64:bb:61:fc:c0:
                    39:a0:b8:d9:c4:dc:7b:53:d8:d5:c9:b5:3c:30:15:
                    24:b5:eb:1a:9e:22:e3:3f:69:17:c7:29:8e:8c:de:
                    00:19:82:1a:ed:7b:0e:92:83:f5:94:05:43:25:76:
                    0f:c9:cd:80:12:6d:3f:a0:71:1e:e8:25:9f:c6:9f:
                    18:5e:70:38:c5:2a:e9:ee:17:e6:58:d5:cd:3d:21:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:07:9E:BB:1B:28:F2:7C:63:93:32:47:12:0D:5F:55:60:7E:DD:83
            X509v3 Authority Key Identifier:
                keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:0f:9f:ec:ac:44:a1:d4:71:05:af:74:06:c5:c6:25:4b:
         f9:a2:bf:ee:b3:3c:f6:a0:69:cb:7f:6c:58:30:61:c8:24:c7:
         0d:1b:69:34:e9:05:92:88:49:e0:50:03:2d:25:5c:fc:79:bd:
         0b:9f:65:2e:7b:4f:9d:e7:0d:07:ab:a0:b5:72:9b:b9:5e:b0:
         d6:c5:9c:d4:5a:e2:1f:fc:98:c6:0c:12:f7:71:00:b0:7a:4e:
         71:16:17:71:3c:01:40:ac:e7:d7:4e:e2:59:15:6b:5d:db:1b:
         41:0d:0e:9d:fd:ce:a5:f5:5d:87:0c:4a:ba:52:ab:c2:65:87:
         fa:65:2b:ba:88:40:c7:19:e2:b9:af:d3:7e:d3:5b:0e:3b:f4:
         ef:92:69:ec:53:3b:10:dc:5b:04:7c:ec:69:f4:6c:75:73:0f:
         7d:ec:b9:ff:6a:02:36:2f:85:a8:50:51:49:80:0a:d9:9c:5e:
         db:b8:31:08:d2:e8:10:a2:ae:33:9d:9d:33:94:63:94:e2:31:
         9a:55:4c:ce:96:ea:73:bd:0d:62:85:aa:84:a1:65:68:90:e0:
         62:0e:7f:96:9c:1a:eb:30:1a:fe:42:92:e3:0b:f9:be:74:32:
         26:e1:37:09:3c:c8:e6:94:d8:ed:a0:54:38:70:49:02:a7:3f:
         b2:b5:0d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:35 2025 by rpki-client