Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File:                     JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier:          0uMWqk5oo2i19k0MsaW44v/vqFtu+nqAdIOJG3HLQs4=
Subject key identifier:   32:16:E7:31:9A:06:DC:18:3C:B8:9F:F6:99:94:7E:FE:37:AA:C1:81
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer:       /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial:       01984B558462FA27A1C2F6C2B59A6E46F661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number:          12B8
Signing time:             Sun 27 Jul 2025 10:02:32 +0000
Manifest this update:     Sun 27 Jul 2025 10:02:32 +0000
Manifest next update:     Mon 28 Jul 2025 10:02:32 +0000
Files and hashes:         1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
                          2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: 1irauMfSIv9L96Qo74xrk31f5U/yAlndejC2M0xGYbo=)
                          3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
                          4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:55:84:62:fa:27:a1:c2:f6:c2:b5:9a:6e:46:f6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
        Validity
            Not Before: Jul 27 10:02:32 2025 GMT
            Not After : Jul 28 10:02:32 2025 GMT
        Subject: CN=3216e7319a06dc183cb89ff699947efe37aac181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:1f:be:a4:9e:30:a3:79:96:07:5b:90:03:
                    d5:e9:8d:33:66:4a:25:98:61:08:fc:60:16:ec:71:
                    62:22:12:7b:95:26:d3:d4:3a:ea:18:c2:05:fd:19:
                    c6:26:5e:d9:87:e1:80:32:15:33:ee:6f:ec:68:05:
                    c1:5d:ea:71:e5:73:4d:ab:78:5d:9f:69:f0:16:5a:
                    90:36:1e:c0:a8:cb:eb:32:52:cc:ad:94:4e:b5:61:
                    05:cd:91:d9:3f:a6:3d:ae:08:8f:89:74:9b:4d:8f:
                    1a:30:8b:30:29:b7:06:fa:8f:de:7e:5f:17:be:1f:
                    17:7a:4a:5c:84:69:9d:95:ce:3c:23:c5:6a:59:24:
                    db:34:c1:39:ef:88:29:43:68:89:e6:08:d3:94:61:
                    c1:6b:c9:d3:38:41:e4:7c:18:e6:74:7a:1c:25:43:
                    e9:2b:1d:0d:ec:38:d7:09:3e:30:2d:79:d9:bb:19:
                    59:d2:0f:49:40:79:a3:1b:c7:ca:c4:7f:f6:29:a7:
                    d4:01:33:a7:d2:8d:07:25:23:cf:bc:eb:9b:9d:ed:
                    36:7a:a1:47:94:0d:1f:a0:2c:73:00:61:fc:16:3c:
                    81:20:87:0b:64:c8:e5:f7:fc:3f:a6:f7:62:38:36:
                    6c:4a:2e:e4:ac:76:9e:1b:a8:38:4c:50:dd:87:77:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:16:E7:31:9A:06:DC:18:3C:B8:9F:F6:99:94:7E:FE:37:AA:C1:81
            X509v3 Authority Key Identifier:
                keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:36:68:b6:b4:7f:6b:03:37:5c:cf:08:72:b9:d1:3a:39:
         db:f1:e3:7e:98:cb:58:ad:3c:86:26:95:f3:f0:8c:e2:49:45:
         c0:2a:a5:98:93:0a:93:11:30:9b:56:62:9c:1e:84:0f:31:f5:
         19:37:a4:af:3c:5a:75:b6:6f:19:ce:12:51:e0:da:8b:6a:0e:
         e5:90:a7:73:80:c1:15:b0:09:31:40:bc:d8:4c:ca:19:17:54:
         15:01:d5:15:a0:86:3b:62:ec:01:62:ba:f3:07:85:ca:79:6d:
         35:30:aa:5d:ad:08:1b:a3:29:0d:bd:93:46:ef:fd:b3:ac:12:
         7a:92:70:fd:c3:1c:fc:28:50:27:19:38:c0:48:56:55:20:0f:
         61:c9:fc:20:41:21:7b:f8:70:f8:91:6d:c9:38:b3:0b:2c:66:
         ad:25:3e:26:38:67:fc:18:ed:83:f9:b5:f6:ee:79:d8:79:0d:
         17:d3:55:34:4d:c4:31:9a:1e:fe:b2:ca:b1:da:0b:d5:4d:7e:
         ee:1e:e0:3b:94:c4:5b:bc:d6:98:ba:87:d8:db:4c:1a:e4:b7:
         4f:a8:fb:eb:b7:22:49:c9:cc:e2:e3:bf:49:ae:2b:3e:1e:1e:
         03:21:20:fa:25:9e:9a:07:8c:0b:d8:f1:ad:6b:a7:fc:47:8c:
         33:ef:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:23:47 2025 by rpki-client