Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File:                     JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier:          aX1a6OIXwygpeQm6yHEepkYavurDn4o6rrprjvk22mY=
Subject key identifier:   3C:1F:F2:32:C8:30:F6:47:58:76:64:BE:78:A2:2F:92:2C:E0:1C:EB
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer:       /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial:       0198D5BC278AC6A377EE259DFF787058B83A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number:          093F
Signing time:             Sat 23 Aug 2025 07:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:14 +0000
Files and hashes:         1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: el7JNWss8CWOtFryrOZ/IAZLxEmTKvIHdTtS38E6o+s=)
                          2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:27:8a:c6:a3:77:ee:25:9d:ff:78:70:58:b8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
        Validity
            Not Before: Aug 23 07:02:14 2025 GMT
            Not After : Aug 24 07:02:14 2025 GMT
        Subject: CN=3c1ff232c830f647587664be78a22f922ce01ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:d6:f3:47:4d:99:db:d8:ef:04:8b:ef:88:
                    8f:8f:43:9e:42:11:60:ba:cf:cf:0f:6e:f4:23:c6:
                    52:a3:b2:08:31:53:bc:23:5f:97:98:7f:95:74:fd:
                    b2:f4:bd:51:a3:5a:d5:1b:16:4b:65:7d:ac:56:52:
                    77:c5:f0:21:22:70:be:af:7f:fe:44:d4:db:a7:09:
                    44:4d:f5:49:32:a5:e3:d0:ea:15:a4:a0:c6:9c:5c:
                    32:26:f9:20:e1:4e:07:c1:e6:4b:d1:2b:4a:11:83:
                    74:79:ae:6a:fc:eb:8a:1e:44:96:7c:b3:a4:aa:cd:
                    c5:f7:77:1d:ce:51:b3:4a:3d:71:bf:cd:76:26:b6:
                    46:bd:26:ce:f8:5a:59:2e:48:7a:dc:e4:97:13:f0:
                    cf:dd:bf:4e:5e:15:ff:b8:dd:21:e4:ec:31:4a:7c:
                    b5:5d:14:c2:cb:25:d9:2c:c2:7c:fc:8c:19:8d:49:
                    85:24:a8:8f:f3:b1:7c:33:ff:2a:57:16:9f:58:b2:
                    c4:0d:43:43:27:c2:d5:37:7d:ea:98:d1:9d:b3:43:
                    8c:50:b6:3b:f2:80:b3:0f:47:fd:9d:62:34:9e:de:
                    e1:85:fc:09:fc:aa:46:1d:24:f3:ab:1d:cb:30:28:
                    0d:37:d4:72:2f:15:00:ce:21:44:44:92:08:19:59:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1F:F2:32:C8:30:F6:47:58:76:64:BE:78:A2:2F:92:2C:E0:1C:EB
            X509v3 Authority Key Identifier:
                keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:be:1b:47:f6:02:99:d4:d0:90:a4:f6:96:a3:0f:8c:96:
         80:01:ca:50:04:23:1d:f6:19:8c:9b:e8:cc:a5:d2:6f:d7:f3:
         65:0e:71:99:0d:ff:47:54:be:d2:c1:d1:53:b3:0d:e3:95:08:
         ed:9c:fe:2c:3d:3a:21:2f:a1:49:06:ca:3f:4f:d9:0c:1f:8e:
         7f:6d:5d:9e:d1:37:d8:8f:a7:91:b5:49:cc:d7:61:d2:a3:c6:
         b7:55:48:a9:3e:30:d0:71:17:c9:8f:ae:06:d2:f2:08:c7:dc:
         68:6d:42:36:8e:65:54:48:32:95:36:d1:3d:39:71:70:35:75:
         4d:40:08:97:9a:46:de:f5:42:6f:85:61:7b:94:3d:1b:4c:80:
         47:ad:14:95:73:c2:be:32:fa:af:4b:6b:1e:08:4f:84:c0:4b:
         86:5a:58:59:dd:63:16:52:ee:0e:8f:1d:30:68:22:d7:a4:5f:
         3b:05:ba:73:bd:51:df:1d:bc:11:7a:bc:77:d3:8f:25:ed:69:
         f5:58:e4:6e:b6:3e:27:5f:3a:89:18:f8:26:48:b2:77:ea:f2:
         56:ae:54:b4:c2:94:e3:dd:53:ac:0c:14:d1:0c:b7:94:54:4a:
         cb:93:63:1d:bf:9b:1a:c5:53:e9:5b:ff:95:c1:a2:c0:a6:cd:
         bc:0e:70:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvCeKxqN37iWd/3hwWLg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0OTkyZjMyZDc0ODZkZmI0YTMyYzJlNzgxMDg1NGFjNmE2
NjhlMzQwHhcNMjUwODIzMDcwMjE0WhcNMjUwODI0MDcwMjE0WjAzMTEwLwYDVQQD
EygzYzFmZjIzMmM4MzBmNjQ3NTg3NjY0YmU3OGEyMmY5MjJjZTAxY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9rW80dNmdvY7wSL74iPj0OeQhFg
us/PD270I8ZSo7IIMVO8I1+XmH+VdP2y9L1Ro1rVGxZLZX2sVlJ3xfAhInC+r3/+
RNTbpwlETfVJMqXj0OoVpKDGnFwyJvkg4U4HweZL0StKEYN0ea5q/OuKHkSWfLOk
qs3F93cdzlGzSj1xv812JrZGvSbO+FpZLkh63OSXE/DP3b9OXhX/uN0h5OwxSny1
XRTCyyXZLMJ8/IwZjUmFJKiP87F8M/8qVxafWLLEDUNDJ8LVN33qmNGds0OMULY7
8oCzD0f9nWI0nt7hhfwJ/KpGHSTzqx3LMCgNN9RyLxUAziFERJIIGVn9/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwf8jLIMPZHWHZkvniiL5Is4BzrMB8GA1UdIwQY
MBaAFCSZLzLXSG37SjLC54EIVKxqZo40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUt
NGIyZTY4MGM3NDkxLzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUtNGIyZTY4MGM3NDkx
LzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfa+G0f2
ApnU0JCk9pajD4yWgAHKUAQjHfYZjJvozKXSb9fzZQ5xmQ3/R1S+0sHRU7MN45UI
7Zz+LD06IS+hSQbKP0/ZDB+Of21dntE32I+nkbVJzNdh0qPGt1VIqT4w0HEXyY+u
BtLyCMfcaG1CNo5lVEgylTbRPTlxcDV1TUAIl5pG3vVCb4Vhe5Q9G0yAR60UlXPC
vjL6r0trHghPhMBLhlpYWd1jFlLuDo8dMGgi16RfOwW6c71R3x28EXq8d9OPJe1p
9VjkbrY+J186iRj4Jkiyd+ryVq5UtMKU491TrAwU0Qy3lFRKy5NjHb+bGsVT6Vv/
lcGiwKbNvA5wUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:42 2025 by rpki-client