Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File:                     JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier:          mGw1Asb+IyUzZdmiMJ/mnJZQK2B/EnimvT568dR7+Ac=
Subject key identifier:   C7:CC:95:D2:14:97:09:92:3A:9D:A5:D2:A9:4D:56:36:07:64:91:61
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer:       /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial:       0198D5F1CEB4092FC73F6AE6E9E4FFF8F79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number:          047F
Signing time:             Sat 23 Aug 2025 08:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:50 +0000
Files and hashes:         1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: oEoXcdqAJze/3jS2GyQWi5IyRG/PunKtWc65Q6Q+flA=)
                          2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
                          3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:ce:b4:09:2f:c7:3f:6a:e6:e9:e4:ff:f8:f7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
        Validity
            Not Before: Aug 23 08:00:50 2025 GMT
            Not After : Aug 24 08:00:50 2025 GMT
        Subject: CN=c7cc95d2149709923a9da5d2a94d563607649161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:7f:80:7d:75:d0:a5:64:91:39:4b:ca:ea:
                    8b:eb:87:e7:b3:a7:91:07:4c:ff:1b:be:99:87:28:
                    5a:7b:8f:5c:9d:6e:14:c1:5c:f6:c8:5b:67:1b:59:
                    88:ec:cf:37:8a:dd:dd:97:ce:ff:27:e7:bb:a9:dc:
                    35:3d:d4:3e:c7:a9:bd:cd:7a:4e:66:ce:c1:16:d5:
                    8a:66:c5:d8:1f:22:50:5a:8d:1f:3a:80:cc:42:16:
                    06:00:4e:c0:e4:b0:61:a7:73:3d:e2:5b:07:7a:d3:
                    b5:56:92:71:05:60:30:0e:f2:e6:65:c3:0e:dd:45:
                    69:54:20:ce:81:49:17:9e:3e:d7:4b:18:8e:77:a8:
                    7a:75:59:07:f9:a9:06:4f:7a:7d:39:bf:e2:e5:58:
                    33:62:f0:4b:fa:c9:6c:ad:72:84:c1:2d:24:e7:38:
                    f1:48:a5:3a:38:da:23:7b:6a:87:a3:27:ce:22:69:
                    98:51:12:9f:5a:72:f9:42:0b:1e:75:78:8b:7e:6f:
                    e5:54:6f:68:f7:5b:af:cf:27:3e:66:50:72:5d:df:
                    1a:92:40:20:66:74:1f:6f:ab:25:ac:04:00:aa:c3:
                    15:85:9c:86:e7:26:19:1c:e1:dc:79:7e:95:6a:72:
                    39:9b:e2:c1:96:d2:0d:9a:d2:b4:fa:82:25:3f:fa:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:95:D2:14:97:09:92:3A:9D:A5:D2:A9:4D:56:36:07:64:91:61
            X509v3 Authority Key Identifier:
                keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:d6:95:94:23:82:9a:2b:ff:1d:fc:62:90:7b:cd:20:8d:
         0c:fe:ac:f9:b9:5f:4d:35:22:7e:f9:43:5f:8f:98:54:e6:3b:
         ad:6a:9c:7b:29:22:cf:90:2f:37:4e:e4:89:cb:81:0c:6e:64:
         f5:7d:ff:24:20:15:c7:98:b8:24:cf:e4:de:8a:b5:b8:07:b2:
         17:8d:62:85:8c:ff:04:bc:fe:08:5f:26:f5:4f:2d:5b:82:03:
         5d:eb:76:55:8d:cc:e8:5c:db:13:16:59:72:6f:23:fa:36:b5:
         75:4f:9c:76:49:bc:78:37:0c:ba:2e:28:da:db:3a:f7:6d:9f:
         46:cd:ff:52:75:75:8d:10:81:3e:15:3b:33:da:8d:b0:88:f4:
         4a:fa:bb:c1:18:ab:cc:25:d2:ff:b1:01:39:8d:7b:ba:89:06:
         ee:ab:ed:b7:e1:9d:dc:91:b4:f3:e9:b1:b7:01:39:13:ad:24:
         db:5a:bc:96:cf:d2:a5:d3:c4:d7:b8:9a:e3:ef:94:51:9b:2e:
         2f:49:ed:17:a1:b9:9e:54:21:d7:18:50:72:d7:a8:c7:67:3d:
         dd:8e:12:42:72:28:6d:18:92:68:70:3e:5a:5b:1a:54:44:00:
         6c:4d:fe:0e:c2:07:1f:b6:9b:cd:7c:14:ee:90:a0:67:d6:ac:
         ec:74:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:30 2025 by rpki-client