Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier:          Nars/E8NSPx0CLFIuJ4LJDOrTVHut6JyT7T/4ItYOxU=
Subject key identifier:   DA:DB:03:4C:80:70:4C:3D:18:60:FA:15:4C:C7:70:FE:AB:F0:8E:AD
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       01984708E4428B8B1852882B1B5470C2E74A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number:          0790
Signing time:             Sat 26 Jul 2025 14:00:21 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:21 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:21 +0000
Files and hashes:         1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
                          2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: Y0gA11UQC6j9vB0ToshjxQMX/Riwb4+XrvIS4FNBqSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:08:e4:42:8b:8b:18:52:88:2b:1b:54:70:c2:e7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: Jul 26 14:00:21 2025 GMT
            Not After : Jul 27 14:00:21 2025 GMT
        Subject: CN=dadb034c80704c3d1860fa154cc770feabf08ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:f7:2c:14:12:ab:fc:1d:aa:ba:ac:d0:ec:
                    de:9d:54:bb:78:b0:8e:ab:17:2f:34:70:2e:63:38:
                    d5:82:5b:49:df:39:3a:e5:02:ef:51:55:18:97:f8:
                    48:1a:ff:f3:83:1e:fe:dd:d5:01:2f:41:2e:03:39:
                    87:7e:c9:86:d6:2c:f7:2c:45:2a:54:9b:a4:1c:20:
                    eb:4e:36:88:54:a9:7c:94:44:f8:f9:08:d3:36:d9:
                    4a:ca:f8:1b:2b:55:64:d6:28:9a:50:3b:6e:5b:0d:
                    4c:be:31:df:49:23:c2:5f:7e:f4:c5:2a:77:a6:31:
                    f5:40:7e:69:8a:b1:61:db:33:5e:20:99:2b:66:9e:
                    41:8c:5c:0a:3a:33:fe:19:46:0c:8c:84:ec:ec:b8:
                    bb:ca:c7:23:9e:14:49:c1:ae:0b:de:b1:43:81:7e:
                    db:62:92:ad:92:c9:7f:9c:4d:84:f1:af:0e:3c:c8:
                    fd:34:e7:24:cb:be:ff:ae:40:ca:ac:ad:c0:07:2d:
                    a7:95:a3:56:af:44:3f:cf:c6:82:1f:55:1d:fc:d4:
                    67:5c:43:47:61:f5:e1:f6:9d:6d:48:47:98:75:33:
                    21:26:34:8e:91:96:79:93:0b:fb:e3:91:d1:76:18:
                    61:34:9d:9b:a7:88:3f:f8:fe:08:88:43:1c:e0:54:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DB:03:4C:80:70:4C:3D:18:60:FA:15:4C:C7:70:FE:AB:F0:8E:AD
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:d2:a8:f9:e5:13:aa:bd:5b:18:9b:90:26:08:6c:19:80:
         55:c5:a1:10:f9:43:8f:8e:7f:a9:06:b9:fc:b3:fa:72:cf:a0:
         30:10:07:01:24:3e:11:26:f0:e9:37:e6:23:93:7c:e7:f3:f1:
         14:d5:8f:5a:15:2e:57:7a:c5:78:44:be:fa:64:3c:5d:b6:a5:
         fd:c7:a8:5e:d0:19:c3:86:75:9a:b3:d5:7f:07:78:bf:36:25:
         ce:d4:2b:1a:d3:e3:61:17:9d:9c:85:64:25:83:48:0b:1a:1b:
         ae:b8:ca:4b:87:b4:25:fd:31:97:8c:b8:30:03:5b:16:7a:2a:
         41:86:37:29:3f:df:2c:d6:57:23:07:c3:1c:f3:04:76:d3:9c:
         55:4c:c7:57:35:d6:7f:4e:45:29:d6:47:3e:b3:45:fd:71:bd:
         2b:de:30:77:4f:04:60:27:4c:b4:d1:8d:bd:b6:2e:85:5b:4c:
         d7:86:6c:76:6e:53:a3:17:19:e9:7c:0e:61:fe:36:58:46:0a:
         54:46:c0:ce:85:71:2a:0b:60:cd:ae:05:d9:88:19:99:de:e0:
         fa:95:63:7c:ff:e0:66:a0:7c:7f:15:db:05:fd:74:8b:96:f0:
         46:24:da:7d:64:b6:80:4d:18:a0:f5:8d:de:1e:bb:68:e1:61:
         98:96:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:56 2025 by rpki-client