Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
File:                     A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json)
Hash identifier:          Gm5v5BiYIutmruGXcX+H9kOS67JiNUDqhfh7uEA/Ggo=
Subject key identifier:   86:77:80:20:56:6C:62:68:DB:EF:9F:BC:BC:AE:5D:47:A2:A4:D3:E2
Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63
Certificate issuer:       /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
Certificate serial:       01984776D38F56F3F0E9D95BD0EF2CBB0D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
Manifest number:          0BAF
Signing time:             Sat 26 Jul 2025 16:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:26 +0000
Files and hashes:         1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: w0L+4JINdsdbhTcgXO9pMNZ25DQt4dc/J+Qq4Te1tWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:d3:8f:56:f3:f0:e9:d9:5b:d0:ef:2c:bb:0d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
        Validity
            Not Before: Jul 26 16:00:26 2025 GMT
            Not After : Jul 27 16:00:26 2025 GMT
        Subject: CN=86778020566c6268dbef9fbcbcae5d47a2a4d3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:86:b0:20:49:54:7e:4a:4c:37:f9:99:cd:0c:
                    e6:00:97:4f:c1:5f:36:71:43:09:2f:e7:53:e2:1f:
                    2e:a8:08:77:3e:2e:94:a8:b4:3f:d3:88:ed:ea:d9:
                    a0:90:4d:98:c9:91:1d:d9:eb:9a:87:dc:a5:eb:cf:
                    2b:3d:b2:fd:8a:d0:54:ff:e8:9b:4b:28:1b:b4:ca:
                    29:52:d5:86:ba:6f:87:ea:31:49:c4:14:5f:6d:fc:
                    f4:8b:b3:84:bb:31:02:78:69:ba:bc:0e:01:25:64:
                    65:e1:7a:77:3d:21:52:20:aa:bf:f2:09:64:7f:df:
                    ea:ba:eb:6f:de:95:6e:8b:3d:fb:a1:e4:6e:9f:55:
                    36:ea:82:fa:8e:6f:7e:cd:86:94:c8:1f:cd:7b:dd:
                    eb:d6:af:6e:7b:03:e2:b2:60:c1:9c:1d:4c:06:51:
                    78:ea:88:73:9f:77:4f:94:d0:20:ff:e7:4f:18:06:
                    9d:ea:07:ee:b7:1b:17:a3:2c:97:10:fa:77:0c:80:
                    15:ba:74:14:2b:e5:b0:bf:43:ea:f1:03:d7:a0:d1:
                    e2:7d:ac:5c:de:fa:3b:d6:5f:44:84:aa:5f:52:bf:
                    7b:57:42:14:7c:83:a9:32:d3:5d:3e:91:9c:01:86:
                    e6:cf:75:21:c0:7b:b5:f4:6c:29:08:40:3f:c7:48:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:77:80:20:56:6C:62:68:DB:EF:9F:BC:BC:AE:5D:47:A2:A4:D3:E2
            X509v3 Authority Key Identifier:
                keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:90:43:8a:2a:13:13:25:f3:93:e4:f1:cd:d3:5e:a0:ce:26:
         f2:7f:b2:f0:b0:62:c4:4d:a3:09:99:1b:37:c5:70:47:9d:77:
         8e:7f:7e:2b:c2:e1:4e:81:8f:be:75:31:29:d8:5b:5c:78:b8:
         cb:3a:0c:9f:24:86:05:19:0b:4f:cc:a1:de:4a:e6:66:a2:33:
         56:6a:77:4b:e1:7a:56:a6:cc:49:3b:e8:aa:5f:f6:f3:9e:15:
         b8:41:10:e1:d6:ee:7f:7f:dd:12:af:6a:e9:d2:9e:fb:5c:10:
         86:20:2b:1b:f1:8f:05:4e:74:0b:ad:3a:cd:eb:e0:d2:a6:74:
         07:22:24:1b:50:76:d1:f3:0b:a1:cb:cc:ce:9f:a6:7e:3f:7b:
         3e:af:94:9c:d5:2a:8a:76:2d:d6:b9:c1:51:3a:3e:7e:4f:e1:
         56:f7:54:eb:68:79:53:bb:3e:fd:b8:51:48:1c:88:c0:62:2f:
         bf:6e:12:75:4d:d0:ab:1c:e0:4c:e9:b0:f4:04:d1:3c:96:b3:
         74:db:58:47:a9:c2:b4:5b:5d:71:f7:34:3b:4e:e3:ad:aa:2d:
         48:73:f3:19:96:84:0c:f6:80:64:f8:58:39:57:e0:72:12:9f:
         e2:6a:20:36:91:b2:e5:44:14:ff:e1:87:28:43:68:c8:07:f5:
         6a:79:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:46 2025 by rpki-client