Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File:                     JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier:          p7qznlgVdaahWP0IYgK9BqxUaAvyCRQZVGK+JyLDHdw=
Subject key identifier:   E4:A7:6A:0B:DE:37:C7:1F:54:13:68:6E:19:0F:39:A7:D1:99:35:25
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer:       /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial:       0198548DA773371C0F1FF2069F0258DC95B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number:          1605
Signing time:             Tue 29 Jul 2025 05:00:26 +0000
Manifest this update:     Tue 29 Jul 2025 05:00:26 +0000
Manifest next update:     Wed 30 Jul 2025 05:00:26 +0000
Files and hashes:         1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: t9kRuKcuVWTxzsE1atN1UBZtZFjz9UXdVcULEJ6Xr9s=)
                          2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:8d:a7:73:37:1c:0f:1f:f2:06:9f:02:58:dc:95:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
        Validity
            Not Before: Jul 29 05:00:26 2025 GMT
            Not After : Jul 30 05:00:26 2025 GMT
        Subject: CN=e4a76a0bde37c71f5413686e190f39a7d1993525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:86:37:21:9a:fa:53:0f:b4:54:c2:9b:aa:
                    49:6c:86:b1:ad:fc:8e:b4:c8:29:4a:76:a0:14:60:
                    2d:49:a2:70:8f:de:ae:b3:69:f5:73:54:cb:ea:a1:
                    84:62:79:be:17:d3:f4:37:fe:71:85:c5:b0:75:37:
                    59:8b:2e:09:e4:2e:02:eb:d1:65:39:e5:a7:1c:5a:
                    2a:b2:d5:e0:ab:1a:76:7a:b4:14:66:cc:24:b3:2f:
                    3b:4a:1d:c1:8a:31:07:ca:40:0e:23:43:37:cf:1d:
                    99:3c:ff:37:e9:92:b8:32:0f:41:c4:17:47:d2:1d:
                    54:dd:c2:e4:c8:4e:e4:1f:31:4d:da:76:75:66:f8:
                    61:0a:dc:41:b9:5e:0d:ac:5f:06:70:c1:07:68:e3:
                    8d:6c:59:b1:3d:1b:15:fb:1f:33:eb:18:f9:f6:b6:
                    b4:23:f8:dc:b3:a1:67:d0:6f:fa:d0:d4:23:71:5e:
                    9e:d4:05:dc:7d:4c:6f:87:a6:67:4e:bf:3a:2a:f3:
                    b1:fa:fa:ab:9b:9a:d1:27:e6:d5:0d:68:43:1f:9f:
                    2d:39:25:24:52:af:5b:1c:9a:d8:7b:3b:f7:8a:24:
                    45:3e:f1:d3:e0:d8:75:99:bf:3f:97:9f:3f:10:ec:
                    82:36:88:28:33:5c:5c:f9:21:2c:0a:0b:40:62:a5:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:6A:0B:DE:37:C7:1F:54:13:68:6E:19:0F:39:A7:D1:99:35:25
            X509v3 Authority Key Identifier:
                keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:60:d7:17:0b:39:06:ba:11:70:ac:90:d4:72:19:1a:9a:d6:
         55:8a:65:3d:5d:11:20:6e:bd:05:78:d3:cb:f4:03:50:e7:a9:
         7f:d8:f1:cf:9e:44:f1:95:ee:48:62:1b:a2:ee:15:7e:03:95:
         53:aa:de:c5:8d:b5:b7:f3:38:9b:4d:af:af:d0:c6:ba:46:63:
         72:bb:3e:35:95:46:3b:6d:b6:7f:8b:78:62:19:b4:e8:fc:3f:
         3e:f2:22:d2:4d:58:10:25:fd:ce:54:6e:02:d8:32:da:b9:87:
         9a:c9:84:2f:90:fe:ae:81:df:80:e5:e4:88:42:90:cb:22:f6:
         34:2b:9b:2f:cd:ca:49:b0:ae:c4:ef:37:25:dd:8c:1f:df:8b:
         f5:ef:bc:db:a0:81:58:39:59:dc:21:9f:6e:de:7b:5b:f0:d6:
         60:aa:3a:4c:27:62:e4:13:80:88:e7:b6:91:76:99:8b:a0:74:
         c1:6f:16:3d:0b:44:53:01:a2:44:9f:25:60:1c:83:e9:73:f0:
         d5:78:3c:5e:6a:b3:45:35:f3:96:00:4e:bb:d0:d9:a3:ac:0d:
         e8:cc:9a:a7:73:07:a5:05:99:3d:26:32:f7:49:5b:06:d8:ab:
         44:6a:05:66:35:b1:98:e3:1c:ab:b8:ac:54:f4:2a:49:97:a2:
         f4:3a:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:20 2025 by rpki-client