Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File:                     JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier:          e6IxJA3OJ9uD5nRYNC05ssHHQAvUNjX0Wgk33KLyziM=
Subject key identifier:   54:8F:9E:1B:23:9D:55:F2:A9:E3:47:C8:D3:71:89:4B:D3:54:C5:FB
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       019848F755BAE03B4EC46C00FA45D85142CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number:          0E2B
Signing time:             Sat 26 Jul 2025 23:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:25 +0000
Files and hashes:         1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: 8rjLcIeGzM7WAqpCQuAdnFRm9kJz5XFAKJa4fJ4ItQY=)
                          2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:55:ba:e0:3b:4e:c4:6c:00:fa:45:d8:51:42:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Jul 26 23:00:25 2025 GMT
            Not After : Jul 27 23:00:25 2025 GMT
        Subject: CN=548f9e1b239d55f2a9e347c8d371894bd354c5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:16:94:62:90:93:dc:3f:49:80:ea:aa:97:
                    66:3f:78:43:99:45:65:e7:6b:db:09:03:b1:58:e2:
                    0d:81:9d:88:d7:9a:57:9c:f2:5a:d8:f7:43:88:cb:
                    34:17:0f:5c:35:4d:e9:be:8e:cc:ce:f5:f2:b9:7f:
                    4e:75:7e:ed:66:4b:7f:83:1b:2a:79:25:af:cf:73:
                    a3:ff:2d:2b:07:2e:e8:28:88:9f:7b:95:0d:6e:ec:
                    08:d8:63:e1:28:78:7b:06:48:94:02:1c:fb:4e:33:
                    6b:f7:31:5b:21:2b:86:11:cb:47:3e:cd:fe:45:4b:
                    ad:2a:80:66:c4:5d:88:74:5a:3d:9c:e3:5a:8d:15:
                    58:e9:4f:04:fc:9a:38:cf:e9:f1:87:d0:d5:18:c5:
                    05:0c:2d:5e:ee:99:ca:fd:ad:d7:a4:3f:bb:59:d6:
                    48:22:1e:0a:e7:ac:5a:1d:1f:69:0b:c4:55:aa:c5:
                    53:02:87:b6:10:08:6b:6b:2c:b6:9e:a9:f4:b9:7f:
                    6a:e2:80:3c:6d:7f:ce:fc:38:49:67:f4:a4:d2:ac:
                    84:16:ea:9a:61:92:e3:3d:fc:fb:2d:db:a5:d2:4b:
                    6d:d5:93:b5:e6:3e:07:72:56:b2:45:71:d0:61:6b:
                    b1:cc:77:19:f9:d1:45:02:7f:23:bc:65:98:4f:15:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:9E:1B:23:9D:55:F2:A9:E3:47:C8:D3:71:89:4B:D3:54:C5:FB
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:45:58:df:b9:77:00:09:a6:86:e4:b6:bf:8d:d6:52:bf:f8:
         e2:2e:10:d9:aa:df:3f:a2:ac:ec:e0:e5:64:c6:e5:8b:a7:27:
         3e:a7:90:83:63:60:61:fd:0b:8a:20:91:7a:17:bb:d6:05:48:
         94:f8:4c:fe:55:e9:9e:1c:10:67:3a:ba:a9:49:5d:6f:56:1a:
         64:0e:33:39:6d:14:61:02:2d:69:90:97:d2:9c:b0:0f:5b:c9:
         fd:e6:75:41:ef:35:ea:b0:80:5c:40:af:d1:11:3d:15:57:f3:
         c8:32:94:03:12:18:9b:c6:b3:82:48:ca:0f:42:ac:9e:a6:cc:
         89:54:6e:ea:f7:47:ee:76:dc:b8:a4:1b:79:33:9d:87:16:a4:
         99:6e:59:1a:0f:87:70:16:e7:15:04:04:e0:64:a2:46:ce:9b:
         0c:f9:74:68:18:3e:08:31:f9:1e:d2:b5:ab:51:bf:d7:20:b0:
         a1:0a:a1:8f:ed:20:5e:8c:fe:3e:2d:71:e1:ae:f1:14:b2:cb:
         92:9c:c1:f0:70:a0:03:a6:4d:f9:4c:49:45:93:83:da:72:9f:
         5d:3f:b6:5d:df:8b:33:5f:ca:70:79:6b:cc:15:c6:89:57:30:
         6b:74:50:69:e6:08:01:81:ba:f9:ae:d4:59:be:ba:de:f0:21:
         fc:8d:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:50 2025 by rpki-client