Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          O0m/saHPL1GgH6K3ka8BadPgP5LFkxlnXMDfpRCx0JA=
Subject key identifier:   27:DE:DC:A3:0B:F0:B0:C5:A0:E1:54:4E:7A:19:96:FD:89:36:55:C3
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       0198D6CD053BF12ECCDD9353FC32AD5C3844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 12:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:17 +0000
Files and hashes:         1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: s7NWl2xNod9FBdi99ud+I2NhpSISjw+WhCOLFK0rRkA=)
                          2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:05:3b:f1:2e:cc:dd:93:53:fc:32:ad:5c:38:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Aug 23 12:00:17 2025 GMT
            Not After : Aug 24 12:00:17 2025 GMT
        Subject: CN=27dedca30bf0b0c5a0e1544e7a1996fd893655c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:0f:ef:45:ad:55:85:23:02:ea:45:9b:4d:
                    39:7f:81:2d:19:bb:64:50:3b:8d:64:85:f3:55:8d:
                    6f:56:d5:c4:ee:26:9a:8c:27:b1:1e:c4:52:fb:1b:
                    b5:c2:d0:68:16:f5:6f:05:4f:f6:41:33:71:aa:81:
                    e9:87:12:a8:06:d2:73:04:76:34:93:6f:1e:2b:9b:
                    ed:49:a3:cf:00:fd:26:8d:41:5f:48:1e:b7:0f:10:
                    77:b9:29:76:d1:4c:ff:53:be:b0:93:ad:6f:57:a0:
                    8c:7a:1e:c1:d6:b6:0b:a3:c3:d9:63:da:94:47:90:
                    7f:12:34:d3:33:a9:8f:af:83:e1:89:d1:63:c4:7a:
                    7f:a5:1b:cf:18:27:55:43:5b:2b:f5:a1:25:c6:7e:
                    10:4a:fc:c4:9f:17:02:c9:cb:fb:3d:8d:90:27:ce:
                    00:df:9e:f5:13:c8:1a:02:69:ed:f2:f9:7d:d3:1d:
                    fa:79:3e:99:2a:f9:da:5e:4b:ad:8a:5d:65:42:dc:
                    c9:b1:71:5f:22:be:b2:ea:50:e2:ff:59:a1:19:a1:
                    ee:5c:8d:0c:53:eb:e0:bf:54:6c:f7:37:ed:c9:f8:
                    d5:10:7f:3e:8e:7b:23:07:48:34:25:d4:df:c8:f7:
                    7d:2e:b6:c4:b1:67:c4:a0:f1:19:96:4d:6f:81:c8:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DE:DC:A3:0B:F0:B0:C5:A0:E1:54:4E:7A:19:96:FD:89:36:55:C3
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6c:8c:60:62:87:be:9e:69:72:4b:fd:d5:cb:94:56:06:07:
         05:67:e9:16:8a:87:8c:05:d9:2f:22:a1:ca:7b:5e:1b:4e:19:
         0e:4f:a1:54:55:07:b5:c1:52:6c:27:9b:08:24:4f:14:65:1a:
         eb:cd:9f:53:1d:5a:ad:68:5d:50:10:28:3e:62:98:7b:4d:b7:
         bf:9b:6d:bd:c0:b2:63:1d:ba:0c:63:f1:d3:93:70:69:f0:16:
         d0:1c:d1:52:90:f9:47:02:34:b3:c9:4c:ef:04:f3:02:75:62:
         14:77:63:10:3e:56:36:c6:8a:a6:45:69:41:b3:82:a2:95:0a:
         35:77:6e:7f:ba:1e:a3:52:c9:23:2a:51:9d:3f:ac:60:70:87:
         f0:cc:65:3c:89:9b:f2:b3:6b:cd:f8:b5:b0:fe:65:46:26:97:
         ca:9e:e4:14:0e:7f:5b:c7:d6:71:0a:f7:12:a3:dd:9c:98:de:
         44:ef:1d:96:ae:c7:ec:33:9c:32:1f:42:38:10:f6:7c:47:d8:
         1a:6d:cb:1f:71:61:91:0d:80:f2:97:9c:78:33:43:84:46:87:
         2a:4d:25:9c:68:89:73:5d:e0:5b:bf:54:ea:27:f1:f9:6d:02:
         b5:be:d1:fc:fd:19:b5:63:2d:1c:87:75:58:2d:9f:91:fc:f1:
         d5:85:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:14 2025 by rpki-client