Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File:                     JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier:          9UpcgPBhH/2nQ5+ZJWRSHdxySIkSdAIvSqYzx/ebzj4=
Subject key identifier:   5F:66:44:B5:D0:91:A5:27:45:1C:85:02:CB:FE:6D:6D:53:C8:97:1B
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer:       /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial:       0198499BF46096879B634293646F5C0B3FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number:          14D6
Signing time:             Sun 27 Jul 2025 02:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:14 +0000
Files and hashes:         1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: VkeYgcd56+nEd92NqzwC+CCox2ll5K4bgywH8P+Vaxs=)
                          2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:f4:60:96:87:9b:63:42:93:64:6f:5c:0b:3f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
        Validity
            Not Before: Jul 27 02:00:14 2025 GMT
            Not After : Jul 28 02:00:14 2025 GMT
        Subject: CN=5f6644b5d091a527451c8502cbfe6d6d53c8971b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:0b:de:67:8c:e6:8f:a6:9f:7e:c8:6d:15:
                    cb:b4:6f:05:59:6b:71:67:21:a8:a2:28:71:30:c9:
                    09:b5:23:dc:e1:6b:2f:c4:cb:68:2c:48:f1:3a:56:
                    87:1d:87:c0:f1:13:d2:4c:2c:e2:3f:70:6b:bf:81:
                    8a:9c:ae:11:3e:0d:26:1b:c4:2e:26:b2:e7:e5:22:
                    eb:e6:a4:63:b1:68:4f:b7:51:d1:84:2a:62:3a:01:
                    99:66:bd:5a:c8:79:01:08:06:63:ce:df:49:71:90:
                    30:9f:3d:48:b1:c7:17:e3:b1:4b:bc:06:8e:75:bd:
                    d4:ef:e2:29:de:39:74:28:9f:25:24:0c:5b:8c:89:
                    c4:d8:9a:ae:1f:ed:f2:96:b4:cb:8b:df:1b:0c:81:
                    f0:2c:43:6e:55:58:67:16:1a:be:ba:79:d0:ad:80:
                    40:98:ac:d1:7e:b7:a3:4e:2e:93:4f:f6:1a:ed:b0:
                    d6:c0:c5:8c:52:f5:52:3e:61:0c:94:85:f9:ef:0e:
                    a9:ac:43:ad:3b:cf:bc:28:e3:85:20:c9:da:90:df:
                    0d:52:fd:f4:f5:0a:aa:94:bf:00:aa:57:e9:42:b9:
                    e3:f2:e5:d9:6e:fd:83:7b:13:3d:f4:5c:8c:29:f2:
                    58:cf:71:2e:35:97:34:46:46:7c:bb:ff:4d:12:41:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:66:44:B5:D0:91:A5:27:45:1C:85:02:CB:FE:6D:6D:53:C8:97:1B
            X509v3 Authority Key Identifier:
                keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:83:95:74:2e:46:9c:e0:9e:9d:a0:84:da:9f:5d:e3:52:
         19:bb:f2:51:a1:83:85:a0:16:ac:8a:08:4e:63:ad:12:52:e6:
         90:89:c4:11:a0:ce:13:43:b4:47:85:1a:92:ff:f4:81:1e:bf:
         f9:98:12:e5:2c:35:82:bf:bc:2c:00:15:84:80:a5:d7:6e:30:
         de:41:42:19:26:86:ea:e6:f1:e1:97:81:ef:35:fb:64:c6:23:
         3d:f2:f5:7c:da:24:28:1d:72:c7:3c:44:aa:15:19:68:e0:87:
         f2:0d:52:5d:89:95:4e:48:0b:b2:b2:c0:86:f5:42:fb:b8:74:
         79:64:33:00:be:84:1f:88:eb:40:a7:3a:c9:2e:76:a7:e6:fb:
         5e:7b:e7:89:39:47:27:87:0c:01:bd:da:a2:4d:42:26:3d:20:
         9c:6c:83:28:fe:80:be:bf:4b:43:ff:ee:9e:32:f4:21:ac:ca:
         75:26:ac:f5:39:a3:32:9d:9d:76:62:22:38:73:74:16:e2:eb:
         ed:4a:86:2c:47:d2:80:52:ae:65:a3:20:2f:e3:7b:39:38:26:
         94:7b:33:66:a6:4d:15:96:01:a6:5d:d3:38:5e:48:35:12:ef:
         ff:42:f8:c7:c0:4f:6f:35:04:2d:7c:bc:2c:17:3b:28:48:5d:
         d7:ad:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:56 2025 by rpki-client