Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          rOgoi/oQHS1KP1dxep6PemGum3zlhdHxZ44mAc8Tbtg=
Subject key identifier:   FE:30:25:79:63:10:B3:FE:07:C7:8C:A2:D7:EA:76:01:58:98:2D:FF
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       0198D7060E00E018968796BA8BADA8A4B6A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          C4
Signing time:             Sat 23 Aug 2025 13:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:34 +0000
Files and hashes:         1: 1-hKq9wb4D_GY_fnZO_c_s4LLEX0.roa (hash: GBxwWVnB/Rc6j+xa3+zoxw/YNpQwaqrDeItK1vr3xY4=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: Ct3fJ72JhOFONSX23JqRZkhG6F4AYrkTjBLx1b8SG/8=)
                          3: TOkxEOih0AWVPHi1e8WKWrt7QXA.roa (hash: dzQs5/UcI04rskBqMhv8VF3TcibwTWfajt/YKT8d1pQ=)
                          4: eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa (hash: lAwc3uWm+AaQ5JvjoDVtmKeHt76LzcXeYzYWfm4Odtk=)
                          5: jZbpJpit-Lsd4dvBv-eijT1tPzY.roa (hash: 4vmUiP1P84jE5ddsRzTqHbpq5+SB2pApAR6uzAQoPmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:0e:00:e0:18:96:87:96:ba:8b:ad:a8:a4:b6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: Aug 23 13:02:34 2025 GMT
            Not After : Aug 24 13:02:34 2025 GMT
        Subject: CN=fe3025796310b3fe07c78ca2d7ea760158982dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:bc:e6:17:24:41:70:b8:e2:b9:56:07:13:
                    f9:f9:30:0e:59:b3:83:60:06:d5:5b:ec:94:ee:85:
                    b1:57:79:26:4f:d7:52:a6:5f:e4:04:9f:e4:26:48:
                    1f:31:2e:d1:6a:ac:6c:bb:8c:32:8f:c4:e1:18:17:
                    5f:7d:67:71:cf:d3:6d:d0:c5:76:cf:1b:25:de:4b:
                    91:75:03:51:1b:60:42:25:71:08:57:9c:14:fc:bb:
                    d0:0d:04:c5:df:20:3c:4a:75:41:f7:40:cb:48:0a:
                    9c:37:40:b7:57:93:a8:cf:7a:c5:6c:0d:f0:b9:a8:
                    26:04:17:79:4c:01:13:02:03:29:3a:04:6c:a6:e6:
                    22:2d:44:4b:d0:6b:af:44:ed:e1:4c:03:9e:58:f3:
                    3e:c2:20:d4:d3:8e:03:50:6e:70:f9:30:a5:c3:64:
                    2f:66:18:8e:bd:ee:d7:be:d2:08:d8:2e:a0:a9:de:
                    51:68:ee:ee:0b:13:c5:fa:ca:b4:e4:b1:af:79:be:
                    99:14:3f:c1:ed:f4:cf:eb:0a:a6:f0:71:4f:e1:df:
                    b9:41:c6:89:0c:d3:30:e6:91:97:e6:29:09:24:ac:
                    48:3a:9f:e9:f0:d3:13:27:89:74:d4:da:45:c3:95:
                    09:88:f2:83:81:57:b4:c7:70:46:49:d1:0a:22:f5:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:30:25:79:63:10:B3:FE:07:C7:8C:A2:D7:EA:76:01:58:98:2D:FF
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:5c:e8:ee:b4:eb:6c:43:a9:5e:7a:ce:38:af:ee:0f:ce:c4:
         5d:18:20:51:df:c5:a8:cc:20:3d:25:d9:3e:35:f7:b2:66:0b:
         cb:17:85:4e:36:a7:be:ba:bc:f8:91:8b:85:4e:e8:b5:62:2e:
         ce:b2:bd:ae:81:44:a5:b2:1b:18:86:0d:0a:7f:b7:43:a6:c9:
         df:20:10:91:bd:24:ea:df:ea:f0:5a:b5:a7:8f:ac:09:68:88:
         ee:f3:3a:75:e0:81:79:69:ee:67:c2:5b:8b:4f:a3:40:a9:ba:
         05:b6:0b:0c:d3:17:85:44:f4:dd:f0:a2:d2:9c:6e:41:e1:c2:
         e9:53:69:32:87:5b:e7:db:4b:77:35:54:a5:59:7c:49:65:9e:
         69:87:8e:e9:f4:ff:01:e6:de:63:9b:03:66:1e:22:e3:a2:ff:
         f2:b6:64:8b:f7:64:3a:18:d6:57:55:c2:b2:7a:a6:55:7b:e4:
         79:7a:41:04:d1:a2:a4:19:d1:4d:b7:e3:24:3f:f8:8a:44:7b:
         d3:62:e3:33:21:e4:3d:2d:7c:3e:1f:16:5f:53:d4:96:0a:4f:
         47:ec:6c:4a:15:db:7e:ee:84:6f:b6:32:73:6c:ca:5e:b5:e4:
         d1:78:df:89:88:37:eb:7e:df:a0:da:35:92:e8:ae:49:c6:72:
         23:ed:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:42 2025 by rpki-client