Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File:                     JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier:          /eS7tCeW/V3LeQdkxdxJLJe8N2UzuZlae95doSZ/oZI=
Subject key identifier:   71:E2:57:F6:6F:29:7C:E1:27:18:12:4A:E2:BF:77:D9:64:68:68:E8
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer:       /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial:       0198D58343AAF080C12170F49C7255BA8326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 06:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:06 +0000
Files and hashes:         1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: XbOn4xLRfYk7JJxGDogo/tuUKuzyG+C+wFco9/SgROw=)
                          2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:43:aa:f0:80:c1:21:70:f4:9c:72:55:ba:83:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
        Validity
            Not Before: Aug 23 06:00:06 2025 GMT
            Not After : Aug 24 06:00:06 2025 GMT
        Subject: CN=71e257f66f297ce12718124ae2bf77d9646868e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:0f:6d:8d:c6:eb:77:da:86:db:71:da:30:
                    46:45:a3:29:e7:08:94:b4:f8:d2:c3:c0:16:39:27:
                    de:af:d4:02:ca:4b:44:57:a8:0b:04:1d:15:ca:38:
                    2c:08:ec:ca:6c:51:b6:52:89:56:27:0b:27:02:40:
                    3f:bc:c4:88:aa:b6:39:4e:96:a4:39:be:3d:4a:48:
                    81:d3:92:2a:90:b5:36:ac:da:46:8a:4f:16:ca:3a:
                    2a:81:63:2c:3a:3e:87:5e:83:ae:06:e2:41:0d:e4:
                    8c:23:f7:1d:3f:cc:ba:77:3d:3a:46:d0:2d:1b:3e:
                    83:c7:6b:7a:a9:5f:86:24:16:8d:cb:30:02:cd:3e:
                    fc:1f:a7:81:47:43:4c:91:58:8b:ef:44:7a:bb:a3:
                    1f:83:b0:6f:46:d1:f7:87:97:c8:a0:83:39:86:6e:
                    1b:06:0d:78:e1:69:17:0f:03:fa:7d:12:95:08:e7:
                    19:38:2d:11:bc:e6:1d:ba:7f:b3:33:af:8b:c4:ee:
                    09:18:59:88:9e:9d:36:c7:42:67:25:fd:78:e4:36:
                    ce:ef:d8:33:a1:87:3f:29:fe:2c:1c:c8:6a:b5:41:
                    28:fd:57:25:5c:47:7d:80:4a:07:3a:ea:42:59:00:
                    3a:65:88:a0:eb:87:0a:f4:11:2c:1c:55:ce:98:0c:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:57:F6:6F:29:7C:E1:27:18:12:4A:E2:BF:77:D9:64:68:68:E8
            X509v3 Authority Key Identifier:
                keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:0b:59:a1:b0:61:c5:a0:03:d4:23:7d:1a:d9:7f:b9:4e:
         c0:8b:7a:b3:a2:d3:6b:b8:83:10:37:be:05:19:7f:fa:13:cf:
         56:3a:92:02:e0:31:63:00:a3:2f:40:fc:37:90:fe:6e:e9:99:
         01:10:99:76:ed:02:6a:49:94:43:81:59:ab:5f:4e:8f:83:77:
         12:9c:97:b8:ca:0d:9f:f1:03:a0:b1:e4:df:ef:43:90:58:d3:
         9f:93:53:03:97:c0:25:af:ad:43:bc:d1:b8:a2:c5:f7:66:2e:
         90:91:ef:fd:5e:b5:2a:45:5c:7d:a5:e9:26:b8:d8:58:e6:04:
         9a:7b:17:fa:71:7b:6c:e3:cf:5c:de:4b:e9:95:e6:06:04:4d:
         4d:55:18:50:00:c0:49:d0:ac:67:62:62:7e:e1:9b:8b:88:c8:
         01:e8:f5:21:0c:3e:fe:86:a3:e4:37:e0:85:0b:58:8e:01:b7:
         09:d0:e4:50:c2:52:69:97:c2:63:7b:5e:12:7c:89:8f:a4:0e:
         51:c2:51:fd:f6:36:1d:b4:c4:83:c5:6f:ec:3e:1c:0c:df:dc:
         5e:58:6c:6f:41:ce:4a:b2:6d:73:a3:5a:8c:50:12:b5:f7:25:
         60:46:95:92:04:d8:5c:f0:a9:98:59:37:5d:63:cb:a2:7c:22:
         af:21:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:12 2025 by rpki-client