Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
File:                     JBW_nGHIXbfJmsTN95JX55l6t3w.mft (raw, json)
Hash identifier:          gUcbb8HQNcO+LRy8sr7cDEVdnc+BUhjQljBtMrDic6Q=
Subject key identifier:   AA:74:69:83:10:7D:6B:A0:F0:4C:5E:78:42:C3:29:6E:84:B0:C0:FF
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Certificate issuer:       /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial:       019830B853371E84B7E03FA92386BF5F9459
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
Manifest number:          035D
Signing time:             Tue 22 Jul 2025 06:00:42 +0000
Manifest this update:     Tue 22 Jul 2025 06:00:42 +0000
Manifest next update:     Wed 23 Jul 2025 06:00:42 +0000
Files and hashes:         1: 5_wrTSOzkEFkkNCOm-aPJQ6g-ks.roa (hash: MnzABlRB9zAfXgr3KOIwgG+mPu7rINrzCKmSJs1qoHs=)
                          2: 8irZy2V_SHs0ikDlT3HoUGHPpBc.roa (hash: ktGCRrCCmdPPWWR6aei4/ftpTdWVZoIYkk/wJpTtUbs=)
                          3: DHyXOn19u1an-1DmAs6BbgJDbac.roa (hash: piQ53WBrzXB4pOG/EQce0Jv8sX7hIvx1CerfkU+iVyY=)
                          4: JBW_nGHIXbfJmsTN95JX55l6t3w.crl (hash: EII6LEEltuW3+Voc10bY+C8DXeNP60mHL/R+lFUjCds=)
                          5: LVAav_DbE0Bn_vYesALzQOtzKjY.roa (hash: 4RX3D3BO7OZGFhz2Gjt6JnBHkmsWj0HFcGJycXe3uBc=)
                          6: _VjKlmvzYVy8ktZu-wqjmjiAJmo.roa (hash: sT06t+r7xF4EKER4Eq9ja2KenwXiwwXnRLng7zaXna4=)
                          7: qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa (hash: uW0LUh4aX/A4RWhfxffVlViL65qqd1EWr8OCT6eFcKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:30:b8:53:37:1e:84:b7:e0:3f:a9:23:86:bf:5f:94:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
        Validity
            Not Before: Jul 22 06:00:42 2025 GMT
            Not After : Jul 23 06:00:42 2025 GMT
        Subject: CN=aa746983107d6ba0f04c5e7842c3296e84b0c0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:44:b3:8b:de:45:72:97:18:a7:ca:58:9c:
                    39:7c:25:fe:b7:bc:1e:c5:f5:4c:73:83:50:6b:fd:
                    c4:af:2d:a1:da:55:82:3f:91:de:97:57:2b:88:95:
                    7c:fb:99:44:a7:9c:9e:0c:b5:dc:63:a0:8d:78:cf:
                    57:44:89:2b:a1:e8:20:ab:0c:a8:02:c8:f7:91:dc:
                    5d:97:e1:22:e7:5d:de:45:48:10:73:a7:c8:8e:77:
                    03:9a:0d:06:48:72:93:f4:98:25:e6:67:bc:83:b0:
                    c1:3d:bd:22:b9:f6:03:7b:2d:aa:75:e7:af:d2:be:
                    6f:37:f6:00:4c:f9:6b:31:4a:b8:6e:57:c1:29:07:
                    ff:62:eb:c5:f1:36:4e:98:21:a2:6c:05:51:a8:c0:
                    6a:01:a0:e1:5c:d5:f4:bb:fa:49:2c:88:8e:c2:1b:
                    60:f4:ae:28:34:36:5c:6a:be:5f:9f:c2:85:ff:8c:
                    29:9f:3e:a9:5a:ca:0c:6b:32:ee:bb:72:c6:2d:c4:
                    b9:5b:7d:40:29:e6:6b:8f:53:8a:8f:49:65:47:9f:
                    e6:2c:26:4f:0d:48:26:ef:e5:de:03:43:4d:4e:2e:
                    dd:25:08:41:80:77:f4:2c:a9:f7:84:f3:8e:c7:b2:
                    d0:cf:5c:6f:47:80:6e:20:43:69:16:29:a8:49:c5:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:74:69:83:10:7D:6B:A0:F0:4C:5E:78:42:C3:29:6E:84:B0:C0:FF
            X509v3 Authority Key Identifier:
                keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:a8:4f:62:82:49:8b:c2:cd:1b:4b:98:5a:52:40:f4:16:
         cc:1c:de:ed:13:3a:9c:8b:ba:ea:98:12:f9:01:e6:1b:a5:d9:
         fa:98:c6:8a:0c:61:16:89:f0:99:be:d4:e3:75:f0:5b:35:6f:
         39:15:ac:ee:52:ee:d2:2d:02:92:48:db:ba:bf:b4:d0:90:22:
         da:65:50:20:52:1d:ce:19:3f:4f:0c:5a:fc:1b:84:1f:54:4f:
         5c:9b:b4:a2:98:8f:37:76:86:b7:ac:fa:43:4b:f1:f7:90:5a:
         a2:39:a3:6e:39:92:0c:e4:33:68:a4:2b:fb:25:74:06:3c:8e:
         0e:fb:18:a7:b6:f8:7c:a0:67:b5:ac:61:4a:8d:31:79:dc:0a:
         32:59:aa:bc:38:83:27:15:47:e4:3d:e8:93:16:c2:27:78:ea:
         18:48:6a:78:e9:e5:ff:8c:35:12:fb:ab:69:86:da:31:b3:6d:
         2c:eb:13:95:3d:c4:43:ae:b0:66:bb:7f:b1:81:4f:97:96:ae:
         ff:0f:bd:7e:71:05:ed:e5:f7:a0:6c:b2:36:5b:d7:ac:e2:af:
         f4:20:a4:cc:d0:af:69:7e:90:6a:35:99:7a:a7:36:da:20:6e:
         6c:63:22:6a:38:55:00:e5:f6:83:a4:1f:f6:83:b4:57:c6:4b:
         c3:39:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:48:55 2025 by rpki-client