Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          V9FN64TnSsdFq7rz1T3lRyzQclfGjJaz114iXWPruCo=
Subject key identifier:   BE:DA:4D:1B:42:6A:5B:B0:D7:CD:E4:F5:22:EA:A6:6D:F6:64:03:74
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       01984777044F0EC91A4B41718EBDCDAE2852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0CE1
Signing time:             Sat 26 Jul 2025 16:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:38 +0000
Files and hashes:         1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: uYG1X8wpSBRS+maWVwixaa9+pq0iC037M+HKuqidjdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:04:4f:0e:c9:1a:4b:41:71:8e:bd:cd:ae:28:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: Jul 26 16:00:38 2025 GMT
            Not After : Jul 27 16:00:38 2025 GMT
        Subject: CN=beda4d1b426a5bb0d7cde4f522eaa66df6640374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:55:e1:87:71:31:32:a2:49:b4:6f:d5:05:
                    7d:47:36:93:36:5b:15:9b:1e:8a:47:0c:07:ed:0d:
                    3a:53:6a:13:22:a6:7a:ae:d1:d3:6b:a3:9c:2c:5f:
                    75:c2:c1:a5:ff:02:90:a3:03:3b:6e:b0:5c:2e:41:
                    e6:7d:47:40:a3:e8:a4:35:10:0f:36:18:34:31:48:
                    7d:77:ae:5a:24:f4:00:00:1d:e7:2f:2d:e1:6e:04:
                    9e:28:4b:06:2b:4b:6e:00:aa:55:64:29:87:9d:48:
                    c4:03:18:e8:94:8e:70:7b:55:a7:97:67:b5:0e:43:
                    35:50:74:d5:ad:53:11:59:46:ac:d8:9f:5d:69:da:
                    48:45:e9:53:a0:04:22:5d:95:6d:20:0e:60:3d:4f:
                    94:3b:8a:c8:a3:8c:d5:de:7b:c6:a1:ff:a8:28:a7:
                    b2:70:3e:06:66:84:4d:78:af:ac:28:f9:58:4a:9c:
                    33:2a:d5:e5:44:53:65:8d:da:db:f6:af:f8:ef:d7:
                    de:67:38:89:2c:f1:ee:59:71:d0:37:6b:5e:f3:a0:
                    a6:4a:6b:16:7e:ae:8e:27:8e:e6:3c:5e:3b:65:b0:
                    14:7f:f8:f9:29:c1:3c:fd:80:93:13:36:55:47:f3:
                    5b:aa:ef:eb:38:98:c2:88:a6:11:1b:64:12:7f:61:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DA:4D:1B:42:6A:5B:B0:D7:CD:E4:F5:22:EA:A6:6D:F6:64:03:74
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d9:40:d8:41:a8:2e:fe:ba:b3:77:f0:ac:e3:1d:4b:9b:03:
         11:f4:f3:54:36:af:0b:e0:c0:fa:ce:74:47:53:bd:8a:fc:7d:
         71:e1:42:fd:94:9e:20:72:5d:05:31:88:58:9b:2f:05:3a:74:
         a7:0f:28:ec:1c:5a:f1:67:4e:7a:2a:3b:24:c1:52:29:ed:24:
         1f:f7:16:cf:31:45:bb:0a:e2:82:da:1f:2d:90:5d:0c:39:ad:
         c0:94:80:b8:29:84:31:a1:2e:88:5d:ce:2f:6d:80:0d:96:59:
         29:6a:0a:12:e8:db:b1:5d:89:23:4c:04:8b:57:8f:36:9c:e3:
         9d:f7:7d:d9:b4:a9:41:65:00:bc:74:7f:94:60:80:12:59:13:
         75:6e:55:35:54:96:05:3a:c1:90:95:e3:19:bc:d2:98:fb:60:
         f2:88:8d:91:b5:72:43:a3:02:61:e1:8f:a6:b1:a8:6c:cf:4d:
         76:65:b0:07:1d:b3:14:56:ca:37:93:75:92:ce:b9:60:4a:7e:
         0c:30:9a:ef:5a:43:16:63:e4:14:00:7b:c8:8e:23:fa:88:27:
         92:6b:fc:85:cf:27:9e:f2:ec:3a:98:34:27:a0:46:b6:1f:ea:
         2e:07:4b:43:e2:f7:af:ae:8f:4a:2e:85:5f:02:d2:c9:5c:1f:
         f0:84:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:28 2025 by rpki-client