Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File:                     jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier:          sUyJfCQXJp0L6156UXzdbj/s/knIo1mD0cUBdtL/Ty8=
Subject key identifier:   A0:1D:75:E4:E4:ED:E1:58:6F:F7:84:55:D0:0E:68:1D:3B:5F:61:B2
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer:       /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial:       0198D5837214A966DB7F6D0EF6A9000D4B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number:          159B
Signing time:             Sat 23 Aug 2025 06:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:18 +0000
Files and hashes:         1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: 2W/Uv3pX6AbhiFMMFDRhv3ViqCtj+yV37/YXRI7V0bQ=)
                          2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:72:14:a9:66:db:7f:6d:0e:f6:a9:00:0d:4b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
        Validity
            Not Before: Aug 23 06:00:18 2025 GMT
            Not After : Aug 24 06:00:18 2025 GMT
        Subject: CN=a01d75e4e4ede1586ff78455d00e681d3b5f61b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:ef:89:6a:80:ad:57:78:f4:c8:ce:7a:19:
                    5c:77:d3:d6:5e:1f:b0:b4:57:a9:49:71:e9:5b:4c:
                    a3:c8:7d:c1:44:a1:db:22:e1:5d:24:1e:49:b7:4a:
                    7b:26:38:64:38:1e:2e:c8:f0:23:37:1f:06:e8:77:
                    1e:d1:0f:82:81:82:ed:e7:a0:9e:88:d8:fa:0b:9e:
                    a9:de:43:91:ee:f6:0e:52:cb:7e:ba:76:01:13:5d:
                    41:4d:55:b2:a7:05:58:27:90:45:89:a3:a6:72:f3:
                    e0:53:1c:09:0b:91:0a:1a:d3:29:a5:24:f8:cf:d6:
                    01:96:71:1b:7a:08:6e:48:00:f8:96:a1:f2:6e:67:
                    9e:ba:c3:3f:13:82:ac:ef:f4:aa:7a:07:8d:78:cf:
                    2c:e2:5e:d2:58:d6:d1:14:fc:f9:5f:11:f1:68:e6:
                    eb:ab:0a:e6:dd:72:b1:58:d6:7f:c3:ae:74:44:bd:
                    3a:a8:6d:e4:17:af:d5:eb:13:83:2a:49:20:4b:9c:
                    55:60:8a:8f:1f:db:7e:38:de:b5:67:f4:46:2f:d2:
                    b9:61:ac:73:31:89:ab:cd:f8:0e:3a:b5:96:ce:87:
                    ab:fe:0b:b3:bf:60:20:ef:6f:3a:ab:ab:89:e9:30:
                    bf:2d:97:ec:04:bc:4b:aa:12:1c:24:e5:54:f3:5e:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1D:75:E4:E4:ED:E1:58:6F:F7:84:55:D0:0E:68:1D:3B:5F:61:B2
            X509v3 Authority Key Identifier:
                keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:89:08:f7:d4:4b:57:c5:28:ad:d3:98:b4:17:7a:54:d3:18:
         12:fc:81:9e:e7:69:1d:92:65:d7:48:64:30:f9:45:27:94:45:
         11:b3:97:17:2c:03:12:35:c3:82:f7:14:3b:3c:d7:0a:7f:44:
         2c:83:6e:5d:da:7f:3e:22:18:74:1f:f4:17:c9:a3:d7:81:0e:
         bc:5f:4f:d1:ef:f1:bf:4e:c8:14:91:96:9e:aa:11:3b:68:7b:
         c0:7e:6c:96:48:e3:30:a1:eb:2f:29:5b:99:8d:fe:92:a0:ef:
         00:bc:7b:59:f0:f7:20:1b:67:d8:47:bf:ff:06:4f:65:00:28:
         13:f7:7f:6c:66:8d:fc:a0:83:d4:15:65:72:4b:14:20:fb:83:
         e8:71:5c:60:2f:a8:0e:98:2a:69:a9:f1:10:bb:f4:71:4b:b4:
         7f:60:fb:da:21:fb:53:19:5c:9e:9e:46:92:08:10:88:07:82:
         37:6b:c4:9b:8d:d5:3f:6d:84:44:f0:6c:76:56:49:e0:32:62:
         4a:07:0e:d8:5f:23:b9:66:bb:6f:09:7e:6d:4e:64:b4:01:dd:
         06:4f:20:c1:f2:e5:4e:ca:a2:74:fa:b2:63:5a:4f:71:bc:1a:
         ac:e3:25:63:10:d1:a0:22:7c:ef:9c:f4:a3:7c:e5:1e:94:c7:
         5e:75:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:37 2025 by rpki-client