Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          9iqworfmTCnUUiNxhV9U2q5ozBn2IsfLI6pNGrqDADk=
Subject key identifier:   F8:6A:C8:4E:59:81:6B:87:D4:90:39:A5:E9:70:4C:8F:76:34:88:EB
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       0198D4A81B6885ADDC1A69C17B79CEBFB9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          065B
Signing time:             Sat 23 Aug 2025 02:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:43 +0000
Files and hashes:         1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: j0jrKAtV6KBnCI+CS3mVJCPmQ7mVU0cb4SMgfIHAMgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:1b:68:85:ad:dc:1a:69:c1:7b:79:ce:bf:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Aug 23 02:00:43 2025 GMT
            Not After : Aug 24 02:00:43 2025 GMT
        Subject: CN=f86ac84e59816b87d49039a5e9704c8f763488eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:2d:ca:8e:dd:25:49:d5:11:5e:09:17:d3:
                    d6:60:7e:b2:c3:07:ee:8b:f8:8d:96:e9:ed:73:8a:
                    d9:59:08:91:1c:c8:ce:af:92:ba:d6:25:cb:4d:6e:
                    39:14:ac:aa:70:a4:cf:75:e8:74:48:81:82:de:a8:
                    b1:ba:a7:23:70:3c:20:e2:78:5e:75:bc:82:83:f1:
                    10:92:bd:ec:c4:c3:74:79:33:cd:9b:b0:53:a7:2c:
                    fe:99:59:e7:b2:9e:6c:5d:82:f3:f4:e4:92:41:16:
                    0d:d0:b0:3c:7d:83:1d:a6:e7:70:18:b1:2c:d9:e6:
                    fb:9e:ed:79:7d:f1:b3:ed:02:8d:58:82:20:5f:d8:
                    26:ae:c5:e4:90:1e:db:c4:7d:3e:4c:79:b1:a7:d6:
                    17:e9:66:f7:ec:20:99:89:35:f7:8b:e1:19:49:06:
                    ce:43:7b:7b:2c:0e:a9:ec:ad:1a:f4:fe:b1:14:43:
                    81:8f:d3:b8:8e:52:c3:c7:41:40:f2:79:44:3b:d3:
                    b5:c5:77:16:2d:91:36:89:53:09:e0:d2:80:be:16:
                    1c:f4:d4:bd:42:70:bd:c7:8d:da:d4:f4:3c:d0:62:
                    08:89:00:7c:d8:b1:a9:e0:26:e6:13:b7:83:22:f2:
                    e1:32:7b:43:4d:c5:89:14:48:b3:aa:54:87:b6:77:
                    30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6A:C8:4E:59:81:6B:87:D4:90:39:A5:E9:70:4C:8F:76:34:88:EB
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:80:4e:42:10:cc:c5:11:24:b4:8e:9a:bd:d0:aa:da:83:
         c0:7c:db:ea:f9:3a:60:72:f6:42:af:c0:b8:49:2d:fd:ef:c3:
         2e:7a:09:3f:1d:0e:ee:ac:51:0b:dc:67:6a:d9:77:78:e0:2d:
         f2:0b:e2:47:c2:46:69:a8:5e:27:ee:c9:72:d6:8c:24:fb:d7:
         af:c0:05:95:67:8b:3a:c9:ef:0b:89:e7:83:b1:47:74:47:55:
         51:8f:46:bf:1d:3b:e4:4c:92:a4:ff:c3:10:24:d5:bf:aa:e6:
         58:c0:d6:1f:21:c0:5f:8a:b1:6d:81:a1:98:84:59:59:33:e7:
         e6:91:fe:4d:f5:d3:0b:2a:6b:55:9f:43:c7:f4:3a:6a:7d:5e:
         69:8c:64:8b:bc:65:9e:9d:60:59:9b:df:0a:11:d3:56:ee:52:
         e3:23:c9:b0:48:57:c9:2e:e8:64:18:87:26:21:cd:f8:a8:ee:
         a2:70:d9:19:47:bd:f0:34:6e:60:fe:ee:ae:99:88:1e:68:2e:
         df:af:9e:6f:58:4b:bf:5a:0c:30:03:9c:60:52:1d:32:cd:f5:
         0f:6e:b5:10:05:e3:55:0e:91:b8:c2:26:f2:33:9c:f8:ad:52:
         08:ac:20:2b:5b:ce:4b:38:b0:78:04:73:84:34:a7:8b:8a:8d:
         98:0b:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:10 2025 by rpki-client