Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
File:                     JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json)
Hash identifier:          +M5KLI7sfQAW+fddT1APbGGzDwutHw11SDw3BN7JnYQ=
Subject key identifier:   D5:3E:47:19:C0:86:C1:1F:3D:58:6F:78:10:AA:05:4C:96:54:AA:CA
Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
Certificate issuer:       /CN=25a3f511d0095606a525084ae460836dc5d24397
Certificate serial:       0198D6CD27242F4B5304D5ADB6163D46FFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 12:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:25 +0000
Files and hashes:         1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: I/rwp4sRjiY4x8jcBzH4rsN3wahkK/XJXaaAfSp8Spk=)
                          2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:27:24:2f:4b:53:04:d5:ad:b6:16:3d:46:ff:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397
        Validity
            Not Before: Aug 23 12:00:25 2025 GMT
            Not After : Aug 24 12:00:25 2025 GMT
        Subject: CN=d53e4719c086c11f3d586f7810aa054c9654aaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:ff:bb:24:fd:9b:a5:03:a9:2f:15:4b:0a:
                    bb:14:25:ad:5f:ce:bb:95:9a:e4:78:5c:1b:1b:1d:
                    56:d2:40:af:a4:04:c1:cf:88:0c:02:e9:12:11:78:
                    c5:92:1a:12:72:2f:fc:70:93:41:78:7f:65:c2:69:
                    d8:03:6a:f5:44:38:90:dc:cf:21:15:db:30:b7:75:
                    e1:f7:e0:42:c3:6b:0b:45:9d:26:ab:5a:63:ad:e0:
                    6d:5f:70:a0:c2:13:ee:14:aa:fc:fd:d6:c6:f5:7b:
                    7e:2c:1b:f4:e6:90:43:4f:61:a0:91:7f:a7:a1:52:
                    81:20:20:90:f1:25:e9:8f:5e:f7:42:d7:5f:8f:40:
                    b3:14:1d:74:8d:f4:94:d6:99:f1:aa:5f:de:ce:11:
                    cc:ed:59:da:7c:48:b4:20:19:48:d7:00:ba:3f:ea:
                    f4:ab:6e:e3:0e:a9:c9:93:2c:aa:30:19:92:92:28:
                    b9:91:ca:d7:19:78:f8:bf:30:55:a8:32:fb:27:b8:
                    86:8a:30:6f:5d:21:de:16:0d:e2:05:82:64:19:b5:
                    fc:28:a7:67:ff:0d:32:fd:54:d9:74:1b:42:7b:50:
                    6e:8c:27:fa:1a:9a:75:a0:0b:15:44:09:2b:98:dc:
                    12:f0:3e:92:ca:54:f1:40:30:0c:d2:9d:41:95:7b:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3E:47:19:C0:86:C1:1F:3D:58:6F:78:10:AA:05:4C:96:54:AA:CA
            X509v3 Authority Key Identifier:
                keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:89:05:b8:94:60:d4:87:ea:e6:4c:62:47:71:af:9e:1d:
         35:ec:70:f3:58:4b:b6:81:49:7a:c7:c5:5d:3c:1e:c5:0f:b5:
         f8:ee:bb:36:6c:12:0e:52:a8:2c:0c:cb:e7:d0:25:f5:bd:82:
         d7:39:90:26:1c:a3:d2:b7:a0:a4:52:14:7e:6f:1c:c1:e2:26:
         5a:19:5c:30:17:8e:19:05:bc:26:30:ef:36:0f:bf:ee:d2:16:
         ba:5f:cd:86:6b:2a:bb:90:2f:d1:cf:db:7b:d0:e2:de:41:4a:
         61:f3:f9:ff:b3:10:e9:6d:db:55:28:91:16:ed:0d:b3:aa:9f:
         36:9f:49:4e:15:5d:54:81:52:3c:7a:25:8a:0b:b9:a3:46:98:
         da:1a:a2:24:d1:3a:01:24:eb:d7:b1:b0:6e:a1:1d:76:42:57:
         cb:9f:af:21:35:d3:d2:bf:bd:c9:91:e0:01:53:2a:9d:87:93:
         63:15:02:a8:17:61:97:a7:78:18:2b:8c:4d:7c:12:52:f8:17:
         bc:24:b3:30:c0:cd:ca:87:ad:44:c3:58:7e:87:25:9e:82:4a:
         42:72:9f:b8:34:08:34:ec:af:ed:db:8f:12:3d:fe:40:96:1b:
         5b:f2:58:e7:97:fc:b2:55:45:3e:88:db:ea:31:4f:b6:85:ff:
         d9:e2:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:19 2025 by rpki-client