Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File:                     JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier:          enJIGlOYa+1l8yJsSbcx4sWcFhQHT+WgHaq11tnkO1E=
Subject key identifier:   CD:DC:9B:91:C4:4B:0F:AE:2C:19:33:E1:94:12:15:F3:7E:CC:F0:3B
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer:       /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial:       01988B1012F843916697352F0E22FF5B5CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number:          04E9
Signing time:             Fri 08 Aug 2025 19:02:23 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:23 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:23 +0000
Files and hashes:         1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: 0yXyQ3w7E9uiXdqzrBh64HnDww3wRKgZIC0c6ZW5i4M=)
                          2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:12:f8:43:91:66:97:35:2f:0e:22:ff:5b:5c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
        Validity
            Not Before: Aug  8 19:02:23 2025 GMT
            Not After : Aug  9 19:02:23 2025 GMT
        Subject: CN=cddc9b91c44b0fae2c1933e1941215f37eccf03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:95:a9:39:76:50:11:b4:1b:d5:25:12:0e:
                    b8:85:90:e5:ed:5c:4c:cc:ff:ee:7e:f2:5a:1f:0a:
                    46:0a:b3:b3:0f:a6:46:18:8a:03:24:8a:53:68:8f:
                    b4:9d:b5:ee:1e:fa:73:01:4a:ce:c0:a6:af:8d:59:
                    0f:00:cb:86:01:04:ab:b6:a4:48:75:79:f8:c1:9a:
                    8e:fb:1a:22:e1:de:5e:6a:3a:01:60:01:0e:90:dc:
                    b6:4c:21:2c:7a:3d:3a:37:01:46:e6:82:8d:71:48:
                    6e:c9:2b:b1:6a:ee:01:98:49:03:28:1d:36:0f:01:
                    a1:7d:84:07:63:11:ed:94:5d:92:e2:ee:f4:3a:07:
                    01:8d:94:3b:a8:9d:11:5f:4d:3d:da:6d:51:76:56:
                    a1:00:fd:19:8d:38:13:19:93:ed:95:a0:df:71:55:
                    ce:fb:ae:e5:27:4e:2b:ba:24:c7:8a:61:0f:eb:d2:
                    aa:de:b5:15:6c:ec:ac:86:9e:12:0a:81:79:31:46:
                    5e:14:b8:87:1c:4c:d7:bd:1a:89:73:35:a5:a6:be:
                    03:7d:bf:20:e7:0c:95:9e:db:48:c1:c0:d1:46:96:
                    64:40:e1:6f:7f:33:2e:d5:79:9a:33:cc:a8:e8:71:
                    74:58:13:6e:6d:96:94:7a:a4:62:3f:7d:14:cb:c3:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:9B:91:C4:4B:0F:AE:2C:19:33:E1:94:12:15:F3:7E:CC:F0:3B
            X509v3 Authority Key Identifier:
                keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:f6:57:51:81:0e:de:d9:db:c2:70:d7:54:10:4f:1f:7f:
         7e:4c:78:af:22:66:ca:1c:b2:98:79:cc:dc:77:39:07:3c:82:
         dc:f4:54:75:c6:99:5d:b8:51:4e:d9:40:78:79:4f:10:04:11:
         9d:76:a1:52:ac:7b:63:57:84:78:ca:1d:12:59:b8:40:4f:dc:
         aa:96:3f:6a:31:3d:66:c1:42:33:bb:44:84:be:9e:3a:5b:e8:
         18:1a:7d:1d:c7:c5:a4:8d:8b:86:9a:45:03:f3:62:02:5d:62:
         f1:81:2a:2e:ad:9e:84:78:18:79:6d:b2:16:d5:17:1b:62:15:
         ec:9b:15:c5:ae:ab:19:52:67:2c:0a:d3:c8:d4:44:9f:a3:e5:
         3e:3b:fb:fa:a2:f9:d0:4d:c5:9b:68:7b:7f:6a:32:ae:a8:8c:
         5e:76:db:97:f4:e7:cd:97:22:b6:e2:f1:80:3d:1d:ed:42:28:
         23:6a:1e:ca:d3:bf:bb:53:a6:43:af:e7:13:aa:05:94:dc:d9:
         a0:d1:f1:aa:e3:cc:11:46:04:94:47:08:f3:3b:67:1b:4c:01:
         8f:be:69:22:da:d6:7d:5b:14:31:c3:da:9a:83:b3:8b:d3:0a:
         e5:29:43:25:53:48:db:a8:44:6a:10:63:74:98:d8:46:29:56:
         47:5e:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:06 2025 by rpki-client