Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File:                     JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier:          BlQmwTGHw5ZfVUj/rwqa6OHfcDNo31DT6p8qRCnQgvY=
Subject key identifier:   F9:D8:CE:F7:13:F2:8A:E2:33:4D:02:40:36:37:C5:B9:D6:A7:17:8E
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer:       /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial:       0198D4738FEC86D29F32B67EB5A1A57F88A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number:          097C
Signing time:             Sat 23 Aug 2025 01:03:19 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:19 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:19 +0000
Files and hashes:         1: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: q8DRXIxxw5+tvdGMcdQRXdXeWmJ/lka54fd5EMsYB3U=)
                          2: UsGWlIi-7uiN8zG8NI59NtV5c7I.roa (hash: 2oRhDUdkNy5+apDfmRqRD6+hJvX2S16eZftFWdMCk1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:8f:ec:86:d2:9f:32:b6:7e:b5:a1:a5:7f:88:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
        Validity
            Not Before: Aug 23 01:03:19 2025 GMT
            Not After : Aug 24 01:03:19 2025 GMT
        Subject: CN=f9d8cef713f28ae2334d02403637c5b9d6a7178e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:64:bf:7a:04:34:93:43:43:e5:80:6a:95:
                    e9:14:8d:09:39:58:f1:d3:47:91:1a:0d:fe:33:c5:
                    a5:43:b0:5e:cd:b2:2c:07:c7:e4:fa:57:0e:6a:81:
                    89:85:81:3e:46:cc:70:4e:86:d5:fd:42:f6:b1:ad:
                    68:52:6a:5c:d4:10:77:56:a6:80:38:59:50:0a:16:
                    74:7e:19:b3:59:4c:f1:fa:c3:e1:fe:37:dc:30:82:
                    59:83:16:84:5e:eb:de:ed:5c:95:64:01:8b:73:d5:
                    0c:c3:b6:52:d9:d3:2e:2c:50:32:be:94:31:ae:86:
                    6a:ce:c2:99:11:fc:13:ce:ad:66:63:f2:1d:8a:e6:
                    81:03:a6:25:ee:31:cb:aa:62:5d:f3:61:0e:3b:f1:
                    0f:57:66:8f:80:25:15:13:04:ec:a4:05:85:62:e4:
                    ea:21:7e:cc:fc:0e:f2:a9:a3:0b:66:ce:c6:f0:5b:
                    0f:a2:85:a3:ed:37:03:c3:39:26:71:e0:14:b0:00:
                    dc:f9:96:67:33:ef:b7:7c:18:d5:6c:88:82:90:4c:
                    ac:e6:19:a7:3f:a4:02:ef:32:41:a6:47:e4:c8:53:
                    4b:0d:2c:87:ca:15:cf:52:e5:34:33:f0:82:a4:ea:
                    23:60:6c:17:40:95:5d:9f:56:5b:77:5a:5c:d5:81:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D8:CE:F7:13:F2:8A:E2:33:4D:02:40:36:37:C5:B9:D6:A7:17:8E
            X509v3 Authority Key Identifier:
                keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:0e:a7:b9:51:a3:9f:14:b5:22:ac:25:ee:e9:d7:08:e5:
         93:ea:fb:6a:ea:15:be:33:d9:4d:b9:1f:ea:93:35:24:43:51:
         1c:54:5d:ce:ee:a8:56:db:ca:64:1b:10:8f:e2:8b:be:65:a6:
         71:e2:75:a5:3f:2d:f4:c3:b1:4f:3b:5a:7a:64:64:27:06:7e:
         27:33:50:1c:0c:1f:b8:7b:31:99:4f:14:b8:31:d9:eb:cc:ec:
         d7:ec:c9:25:98:48:94:17:0c:7d:36:62:2a:29:e6:68:7d:b8:
         64:d8:7f:b9:f6:71:9a:eb:90:eb:c4:bb:99:89:13:a4:2f:e5:
         dd:cc:0a:f8:cf:47:18:4c:ae:64:b5:d1:8d:b4:84:31:b0:48:
         24:84:12:df:fc:fd:64:03:48:4f:6b:bf:02:46:b9:a1:9f:0b:
         98:d2:45:ed:19:4f:80:d9:70:1f:3d:f6:fe:27:f2:1f:6b:4d:
         e1:20:03:d8:16:3f:7f:12:a4:3a:b8:ea:70:d0:00:da:0c:41:
         8b:1e:c3:0c:25:4e:30:f4:43:bd:d0:ac:c6:8d:66:d1:10:7f:
         1f:0f:1c:b5:49:0a:b7:b3:59:48:75:1a:0f:6e:f1:c4:7e:e8:
         b7:b4:bf:96:e8:a8:0e:ed:9a:51:13:74:e8:99:a3:f5:3f:eb:
         da:53:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:31 2025 by rpki-client