Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          AR53+YCmiBTcwxjBbHbc5p0HrJtzVSK/0/MNV4SESd0=
Subject key identifier:   D3:0E:05:5C:DF:49:D3:4A:0C:0D:F7:4A:6B:CA:4D:EB:5C:EB:5B:8D
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       0198D773B1B4F41BC2E8E4087467498840B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          0DAF
Signing time:             Sat 23 Aug 2025 15:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:20 +0000
Files and hashes:         1: 5dtg3LCI8AxcnAadUkHS3_C52GM.roa (hash: Vn0K1zYewV4QvEpEk/45tt1gNO9Z9NhkFkfGztTyMls=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: mx2EU1ql/XFForGaYWTMSVsk46k2qzRKwMGdf/6LdWU=)
                          3: iHyMz7WaIpGFj9IV33M_hAhVH-k.roa (hash: LGMsJh4DFo99zD3c9hWW4b1EKTfexLADtFi5DHUXz6A=)
                          4: qcTZ9F_MrFUBfQXGS6Pdrvtd3hM.roa (hash: 6Y3o3xfek4OtHUqQEh7Mq+AHRFEDKhceMAsEbUlDjDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:b1:b4:f4:1b:c2:e8:e4:08:74:67:49:88:40:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Aug 23 15:02:20 2025 GMT
            Not After : Aug 24 15:02:20 2025 GMT
        Subject: CN=d30e055cdf49d34a0c0df74a6bca4deb5ceb5b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:c1:bf:c3:29:67:d6:73:e8:e4:d1:ec:89:
                    15:2e:2f:dc:8d:09:d3:81:d6:dc:07:e1:b1:43:e4:
                    da:d1:cd:9f:ce:ca:4d:74:75:38:c1:42:f8:b7:1e:
                    f4:f1:df:c8:cb:18:2d:d2:0c:86:a8:83:cd:d6:2f:
                    64:a1:a3:49:e7:c0:7a:ac:51:05:92:b7:d2:9a:8b:
                    c8:ef:5c:cb:b5:76:76:29:d9:4e:34:a7:8f:c7:f2:
                    89:f5:0c:f9:bd:8e:f4:08:6b:bb:a2:32:80:94:63:
                    01:6d:88:8f:da:11:a9:c5:e2:80:9a:db:8f:26:b4:
                    7c:78:9a:7b:82:f8:2d:06:e9:91:63:e7:56:a5:30:
                    2b:03:1a:91:00:78:0f:e8:91:e2:b0:21:b1:73:c1:
                    d2:9b:d8:95:a8:bd:0b:9b:49:1f:72:6a:0b:38:d7:
                    7d:6c:37:9d:4c:0a:86:81:b3:ee:b2:e6:aa:ef:38:
                    2a:02:13:60:87:fd:65:40:69:92:f4:d4:42:5c:9c:
                    29:96:ee:c3:78:95:d8:96:da:0b:97:fe:c9:8c:61:
                    2a:94:8b:de:ac:d1:88:32:db:4e:bf:47:54:23:86:
                    8d:98:2f:7e:f9:ea:67:20:82:1a:ab:8c:f4:54:3b:
                    c8:32:48:d6:81:82:20:3d:84:44:f2:14:a0:1f:af:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0E:05:5C:DF:49:D3:4A:0C:0D:F7:4A:6B:CA:4D:EB:5C:EB:5B:8D
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:5f:56:cd:7c:fd:28:95:b5:ff:30:3f:b2:20:cf:95:61:
         f1:92:ad:bb:6d:4f:1d:00:8f:3b:8d:04:af:37:13:82:5f:f7:
         14:50:37:ca:b6:c3:54:3d:5e:8b:62:18:39:05:f4:94:ea:24:
         16:f3:0b:fb:b3:34:ab:f1:98:47:84:8d:41:16:98:20:16:68:
         2e:05:ef:22:0f:0d:14:c7:94:b1:5c:70:aa:da:58:10:37:08:
         c0:39:9d:75:f2:a1:fd:cd:ab:4d:98:0f:80:bd:77:a1:1c:c6:
         7a:8d:31:3a:0f:cf:ae:fe:aa:40:5d:3b:29:e2:30:b6:c4:ad:
         0f:0a:ef:96:5d:c3:1a:cd:40:5f:52:39:81:e6:a5:1b:91:7c:
         bf:ac:a4:1d:a7:98:f9:76:3b:27:b2:3d:73:2d:a8:09:86:4e:
         03:06:94:fa:b3:34:a5:ce:ad:7a:99:ab:bb:41:a7:ee:32:3c:
         56:e9:a0:a5:64:81:1c:49:8a:d4:c7:65:35:2f:06:d3:4f:02:
         39:bd:c8:1a:4e:6c:aa:ac:57:bd:c1:05:46:5a:b4:dd:2c:ac:
         0f:a0:f7:01:20:b9:e2:79:a6:0d:5e:d7:35:3f:74:15:3e:89:
         f2:e1:8b:c5:42:c6:31:8f:40:8f:0d:44:39:bb:d6:cc:4f:57:
         d8:3f:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:34 2025 by rpki-client