Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File:                     JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier:          rrBzPVUJqTtVlP5Buwkz/57DiQMW6J0gqHuO7S740I0=
Subject key identifier:   26:00:17:23:CC:10:64:DF:6A:F3:DB:90:73:02:31:57:D9:D2:AE:24
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       0198D5F134A1431F27649C77513874698212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number:          0E74
Signing time:             Sat 23 Aug 2025 08:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:11 +0000
Files and hashes:         1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: 9xwKopYdPQ4I+TaigR9uuK0z1EJKSqzQQ3YNL2OCvt8=)
                          2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:34:a1:43:1f:27:64:9c:77:51:38:74:69:82:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Aug 23 08:00:11 2025 GMT
            Not After : Aug 24 08:00:11 2025 GMT
        Subject: CN=26001723cc1064df6af3db9073023157d9d2ae24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:d7:7a:35:79:b7:d6:80:61:4f:d7:40:31:
                    f0:b8:91:d7:07:b0:7e:a6:14:6e:53:5f:d7:03:22:
                    d9:b2:8a:b1:fe:2c:38:c4:28:c2:9e:0b:5b:22:c8:
                    0b:91:b8:26:b7:6b:0f:12:23:c9:92:d6:df:a0:e0:
                    b1:85:f2:14:d4:76:90:48:0d:2e:cf:0e:7e:ad:95:
                    c4:6d:c1:68:aa:50:56:b1:23:9a:c7:b5:92:72:80:
                    13:1a:f8:38:c2:46:77:d8:ad:0e:1a:db:a7:d4:40:
                    d8:1a:84:50:4a:0b:f1:97:0b:03:bb:47:15:73:e4:
                    bb:e2:a7:8a:1f:44:9e:16:fd:a7:20:a2:55:16:89:
                    5e:9f:a6:bf:ce:b0:4a:4d:d9:76:1d:64:70:41:4a:
                    9e:5a:4a:b8:ab:5f:06:3e:f4:e3:4c:86:df:05:f4:
                    f3:e6:de:d7:64:c5:48:47:ae:6c:b5:cd:87:5d:cd:
                    3a:2c:8b:81:2c:c1:e0:bc:14:95:7b:15:0a:d2:5d:
                    95:fe:f8:40:52:f0:e7:6e:03:7e:38:ed:44:b9:a1:
                    9e:97:af:52:3b:16:98:6b:2a:8c:f0:b4:ee:69:1c:
                    40:81:a8:fd:c8:b6:e8:4d:d0:0b:b4:d8:30:b1:c4:
                    46:a0:70:a6:e6:38:8c:df:e0:d4:ac:16:27:b9:92:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:00:17:23:CC:10:64:DF:6A:F3:DB:90:73:02:31:57:D9:D2:AE:24
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:33:9b:5a:32:a9:a7:e2:63:33:18:1a:fc:b0:f8:c7:9b:
         78:5b:d5:22:2f:86:c0:ff:0c:59:73:9e:48:b4:a3:70:31:e9:
         70:b4:3c:91:02:e9:01:70:4e:99:4a:7c:75:c6:dd:10:8c:16:
         8f:c5:92:99:f1:63:92:fc:ba:56:77:55:ef:bb:4e:bf:5d:3f:
         59:2f:7d:1e:aa:4b:fe:d4:f8:50:18:fd:26:58:01:23:47:0b:
         dd:7d:73:82:cb:10:65:65:9c:4e:74:31:e7:77:31:65:a2:04:
         8d:14:c2:ad:13:d6:f6:3a:af:0b:cb:01:28:ad:81:b4:a7:de:
         72:8b:2a:79:69:f9:fa:0d:81:09:7f:06:f8:d5:af:67:7d:7c:
         9e:86:da:a5:be:bd:11:e1:25:67:f5:8e:73:16:e6:ca:b8:34:
         7c:2e:3e:24:69:da:8f:89:fd:27:ae:42:3d:1f:df:49:42:43:
         28:55:0b:28:df:08:6e:42:7b:98:c9:44:ba:74:6d:9f:8d:fe:
         82:4f:5c:56:33:53:15:b9:af:3b:23:11:e1:55:e9:9d:59:9a:
         cd:e6:e5:2b:8a:25:2c:88:50:47:3e:a6:5a:f2:38:07:de:c9:
         74:a0:f3:2c:2a:06:6c:0a:81:e0:c7:44:64:77:5c:b3:26:df:
         e4:a1:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:31 2025 by rpki-client