Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          VdJtcVRReuNOhdXEQiUtQvgk203iv37PlYdJ3MexLYE=
Subject key identifier:   4D:48:7E:F8:FA:66:70:E3:FC:7B:02:6B:E4:34:A5:DD:2E:3E:A1:39
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       019846641B0A69A28A9B1D340D8E4F5A34CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0CDF
Signing time:             Sat 26 Jul 2025 11:00:22 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:22 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:22 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: zap2kQEBoLOLwr5j/YAlegSy/1+178p0mSEkW6tgeyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:1b:0a:69:a2:8a:9b:1d:34:0d:8e:4f:5a:34:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Jul 26 11:00:22 2025 GMT
            Not After : Jul 27 11:00:22 2025 GMT
        Subject: CN=4d487ef8fa6670e3fc7b026be434a5dd2e3ea139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:ed:80:e0:be:e1:39:db:32:80:38:3c:79:
                    dd:cc:dd:90:08:f0:5a:5a:19:51:0f:ce:43:69:f2:
                    24:73:68:a9:16:6b:bf:bf:0d:c0:cd:0d:a3:cc:e7:
                    7f:ba:7d:4e:7c:1d:a3:b1:2f:d1:7e:31:d6:f2:39:
                    5c:f3:ad:08:a9:6f:02:78:09:74:bc:99:e0:cc:b4:
                    40:7b:93:ed:0e:c9:ff:d4:75:c4:2f:b9:bf:b8:a5:
                    56:d3:23:c2:ff:81:d8:27:0a:cd:1c:e9:08:f5:e7:
                    8c:1b:92:16:4c:06:3b:9e:3c:8e:4b:cc:62:5e:d3:
                    94:fc:ae:26:bd:47:a3:e9:cb:0a:b9:e0:55:6f:e2:
                    6a:35:2c:70:c9:19:a2:2c:5a:76:d1:2e:f0:0b:2f:
                    19:f1:83:1a:ea:2f:0a:71:93:31:24:ba:67:ee:f4:
                    21:70:0b:d1:b0:c0:a3:b6:9c:cf:5d:d5:90:e7:5a:
                    a4:b8:db:15:c5:cd:40:18:43:4e:2f:7e:ba:92:6f:
                    bd:11:1b:c1:54:e3:b6:82:fe:a3:db:0c:41:93:26:
                    02:42:86:dc:18:85:7b:8f:a9:c3:29:95:d5:4b:ef:
                    ea:60:d4:5d:19:37:79:b9:a3:47:58:f8:be:c9:88:
                    7c:c9:db:f2:20:fd:4a:b9:49:57:a1:57:d5:a2:50:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:7E:F8:FA:66:70:E3:FC:7B:02:6B:E4:34:A5:DD:2E:3E:A1:39
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:88:15:1d:ed:e5:eb:1f:bc:ce:cb:12:0d:f2:3b:73:27:39:
         d0:0b:3e:e3:99:0e:c8:dc:d4:aa:93:b8:58:e8:65:bb:da:de:
         73:df:85:ff:51:78:b3:50:4a:a9:e7:37:c6:47:21:5f:e7:54:
         fa:34:ac:f9:84:6d:4b:fd:bc:7b:23:7f:0c:a1:2b:bd:06:35:
         22:5c:af:62:03:80:0f:cd:61:e5:55:bf:12:5f:47:23:10:97:
         1c:4c:99:d5:72:5e:84:8d:aa:05:4d:4f:22:af:8c:d3:66:e5:
         af:13:4c:43:9f:e2:79:f3:f5:cc:45:06:fa:8e:36:4a:5c:e5:
         1b:39:f6:4c:0b:1c:94:1a:ae:aa:e7:b4:fa:44:83:3d:70:7a:
         0a:47:60:20:f8:5c:f7:fd:ab:2f:d8:1c:5e:4b:55:ce:9c:4e:
         cf:f3:d0:bd:10:7e:5c:2f:bd:0c:0f:11:69:7a:c5:f6:02:73:
         bc:ef:5b:64:95:42:2f:be:7f:a0:ec:6b:e9:6c:18:85:21:c4:
         0b:19:16:ac:aa:d5:e2:45:a4:ef:85:9b:45:f9:7c:9d:77:c8:
         c3:d4:b7:9d:91:fc:66:6b:a8:1d:51:c6:a6:c0:f1:c6:b6:b3:
         d7:ee:3d:6e:3d:7f:89:67:2b:46:b3:e1:3f:cd:77:c0:d3:9b:
         ba:40:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:54:34 2025 by rpki-client