Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          9RXsPeHEQzRdSWeqvYcGjoWYTLrcF1GOTFNJHPMgaj0=
Subject key identifier:   86:5D:FD:69:6D:A4:27:FA:C5:1E:8B:6C:95:91:63:56:2E:84:D6:7F
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       0198D54E26DB58F96E40DC205FB487E68E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0D29
Signing time:             Sat 23 Aug 2025 05:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:05 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: sBQaYsN8NIAy7hnDkFIOmmRsNiWB7PAPZXfjZmKnzos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:26:db:58:f9:6e:40:dc:20:5f:b4:87:e6:8e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Aug 23 05:02:05 2025 GMT
            Not After : Aug 24 05:02:05 2025 GMT
        Subject: CN=865dfd696da427fac51e8b6c959163562e84d67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:83:06:c5:76:49:91:76:81:a0:3e:ac:ea:
                    a5:b7:20:c3:37:5d:a0:a7:f9:7c:db:0b:c7:1a:fa:
                    20:52:6f:bc:96:21:ce:78:fd:69:ed:df:f3:db:db:
                    48:f0:d7:61:d4:a8:42:5f:2a:92:9c:33:b6:ec:a5:
                    3c:47:14:94:76:e2:3a:60:ea:a3:8e:ea:d3:88:05:
                    5d:af:5b:99:e7:52:bc:ff:74:84:6b:26:9c:86:ee:
                    2e:5b:ca:8e:58:ac:fc:15:79:be:0a:4e:7b:af:75:
                    2c:9b:20:1b:2d:e1:06:2b:c0:3d:b4:9e:40:85:0a:
                    ab:27:e0:c5:3a:50:83:37:32:68:3a:bc:be:8b:e3:
                    e6:87:69:9c:13:1a:c5:d1:de:94:e9:ad:27:7b:fe:
                    e7:5d:83:e7:8c:f0:89:60:f2:ff:15:e9:02:8b:c0:
                    07:70:8a:d4:22:31:08:d1:99:b1:11:f7:e8:1f:ad:
                    31:d2:3c:de:94:c8:46:4c:c5:80:1f:3e:70:87:4c:
                    7f:ae:ca:91:f0:c3:7e:08:42:59:65:44:25:26:d8:
                    16:7e:d0:3e:70:77:16:0d:e3:fe:6d:d7:25:5c:09:
                    19:46:39:f4:3a:85:d5:76:ab:23:90:af:f4:f4:0e:
                    93:11:7a:52:f9:38:92:c8:42:c7:75:1f:9b:16:6e:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5D:FD:69:6D:A4:27:FA:C5:1E:8B:6C:95:91:63:56:2E:84:D6:7F
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fb:7b:59:11:4b:7c:32:4f:4d:48:91:9e:b4:82:ae:c2:ef:
         16:a0:60:10:6c:9f:58:06:18:ae:05:89:d4:90:02:8f:99:66:
         b1:66:58:36:d8:a1:2f:b0:db:a0:3f:4d:49:dd:b8:af:cd:de:
         ce:8c:fe:07:ba:a5:41:3a:c0:75:03:90:10:1f:75:6d:3a:6c:
         a7:11:da:f2:51:93:44:14:a7:d9:66:cf:7e:12:7b:1a:ac:72:
         cf:b8:c6:89:c7:1b:1f:49:e8:c8:f1:09:0d:43:1c:de:84:fd:
         5b:58:09:ed:08:94:4d:02:d3:43:1f:b3:2e:28:c1:d2:52:f6:
         de:5b:95:5d:2a:15:62:eb:54:be:f0:f9:85:76:72:3f:1a:0b:
         15:53:11:83:5d:81:56:9c:b5:61:81:9e:b8:09:2a:0f:16:8f:
         07:66:bd:b7:23:bc:eb:55:3b:82:6d:1f:06:eb:b8:b6:41:08:
         08:26:ab:4f:c2:92:2f:17:35:e3:4c:6e:91:92:c8:5e:3b:0e:
         8c:c5:5c:eb:80:32:dc:7f:7d:4e:0f:e3:fb:58:7b:43:8e:ef:
         e2:d5:d1:ef:3b:06:ca:03:a1:df:0a:9c:45:3a:68:57:c7:f9:
         84:ac:9a:4e:be:ce:42:7f:90:df:5d:b7:b4:fb:e2:c5:df:4f:
         4f:d7:27:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTibbWPluQNwgX7SH5o51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Zjk4ODhlNzNkZWU3Y2I1Y2RjZmQ5M2IyNjI4ZmJjMTBh
M2U5MGIwHhcNMjUwODIzMDUwMjA1WhcNMjUwODI0MDUwMjA1WjAzMTEwLwYDVQQD
Eyg4NjVkZmQ2OTZkYTQyN2ZhYzUxZThiNmM5NTkxNjM1NjJlODRkNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXSDBsV2SZF2gaA+rOqltyDDN12g
p/l82wvHGvogUm+8liHOeP1p7d/z29tI8Ndh1KhCXyqSnDO27KU8RxSUduI6YOqj
jurTiAVdr1uZ51K8/3SEayachu4uW8qOWKz8FXm+Ck57r3UsmyAbLeEGK8A9tJ5A
hQqrJ+DFOlCDNzJoOry+i+Pmh2mcExrF0d6U6a0ne/7nXYPnjPCJYPL/FekCi8AH
cIrUIjEI0ZmxEffoH60x0jzelMhGTMWAHz5wh0x/rsqR8MN+CEJZZUQlJtgWftA+
cHcWDeP+bdclXAkZRjn0OoXVdqsjkK/09A6TEXpS+TiSyELHdR+bFm7/0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZd/WltpCf6xR6LbJWRY1YuhNZ/MB8GA1UdIwQY
MBaAFCb5iI5z3ufLXNz9k7Jij7wQo+kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGIt
MWY4MmJhZGY1YzFlLzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGItMWY4MmJhZGY1YzFl
LzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJft7WRFL
fDJPTUiRnrSCrsLvFqBgEGyfWAYYrgWJ1JACj5lmsWZYNtihL7DboD9NSd24r83e
zoz+B7qlQTrAdQOQEB91bTpspxHa8lGTRBSn2WbPfhJ7Gqxyz7jGiccbH0noyPEJ
DUMc3oT9W1gJ7QiUTQLTQx+zLijB0lL23luVXSoVYutUvvD5hXZyPxoLFVMRg12B
Vpy1YYGeuAkqDxaPB2a9tyO861U7gm0fBuu4tkEICCarT8KSLxc140xukZLIXjsO
jMVc64Ay3H99Tg/j+1h7Q47v4tXR7zsGygOh3wqcRTpoV8f5hKyaTr7OQn+Q3123
tPvixd9PT9cn5w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:08 2025 by rpki-client