Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File:                     JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier:          Q25JtqLf2LfY+78OHiJ1SskIM0EZxNxytBX+bd6HbrA=
Subject key identifier:   A4:56:D7:50:36:FA:79:39:52:57:BD:3E:7A:15:46:F6:13:AE:45:CA
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       019856455A604B911C2C8DB24EEB7EA8309F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number:          08E7
Signing time:             Tue 29 Jul 2025 13:00:42 +0000
Manifest this update:     Tue 29 Jul 2025 13:00:42 +0000
Manifest next update:     Wed 30 Jul 2025 13:00:42 +0000
Files and hashes:         1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: qprdNamBL+QSH/iayOGpN9a7zdjVwVAFqhsavov62Ek=)
                          2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:56:45:5a:60:4b:91:1c:2c:8d:b2:4e:eb:7e:a8:30:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Jul 29 13:00:42 2025 GMT
            Not After : Jul 30 13:00:42 2025 GMT
        Subject: CN=a456d75036fa79395257bd3e7a1546f613ae45ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:09:06:ec:23:6c:06:44:f1:b0:82:b6:a3:
                    4c:b3:c0:e5:19:db:fe:29:d5:47:87:52:ac:cb:67:
                    a0:f3:5d:2e:25:50:c5:ed:7c:cf:4b:78:19:ea:ac:
                    b4:45:84:8e:a8:09:d6:04:81:02:0b:53:b0:b0:59:
                    6a:f9:0b:c2:3c:42:ad:1d:bf:c1:a6:f8:fd:05:a2:
                    bb:f3:38:3d:c2:23:67:01:57:49:ae:d3:ad:25:52:
                    ac:d6:b4:9a:89:40:b0:8b:7e:62:47:3b:ff:df:e5:
                    f3:eb:ec:c7:2e:10:fc:f7:bd:fe:b6:e2:fb:fb:9f:
                    1d:b7:1c:be:de:0f:81:3d:ec:80:ea:33:fc:22:da:
                    3b:a9:eb:5f:e1:e5:12:81:2c:6f:50:15:cd:ef:7c:
                    d5:a9:d3:b0:e8:0b:24:b0:c4:e2:69:82:26:20:51:
                    9e:84:a6:8b:ed:e8:0a:fe:28:e1:ad:dc:11:93:62:
                    a3:4d:13:cf:67:ca:b8:f1:d7:2a:bb:63:6d:72:52:
                    e7:c1:36:b8:c8:55:68:e4:a4:48:a7:c0:d0:f0:4e:
                    91:22:59:92:11:5a:0c:fa:5e:bf:25:17:f3:95:e1:
                    56:37:8e:80:8c:d6:8a:b0:19:32:c5:a4:5e:a5:c8:
                    30:11:be:96:72:bd:ec:22:0f:8e:10:16:94:7f:d8:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:56:D7:50:36:FA:79:39:52:57:BD:3E:7A:15:46:F6:13:AE:45:CA
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2e:04:67:54:7e:99:25:7a:11:b7:ec:88:3f:93:ee:c8:b9:
         24:89:1a:fb:f9:2f:98:24:2d:77:72:f3:27:6d:a2:e3:6b:b0:
         2d:44:2e:18:26:5a:fc:7c:fc:54:82:28:75:01:cb:41:ba:9f:
         12:38:a9:e2:c8:16:40:4c:7d:c5:ec:0b:54:13:42:46:ff:5f:
         2d:e9:9c:82:0e:79:de:d6:3a:e7:05:0c:36:bf:1d:58:91:52:
         a3:01:aa:c7:86:e8:3d:df:45:ab:39:ef:d8:ed:14:1c:26:8e:
         58:0f:7c:57:da:95:dc:41:cf:3d:55:13:d5:ee:2d:b0:e6:72:
         d3:f8:7e:67:ec:2c:7a:a1:37:a9:9d:f3:b0:b9:cb:59:bf:48:
         b4:c2:27:cd:3e:6d:f8:79:69:dd:c4:5f:45:93:a1:57:e6:e3:
         4e:60:a8:70:0e:78:5a:ca:45:dd:63:f8:2f:c0:a1:e6:fe:f4:
         c8:b3:98:96:a7:6e:0e:cd:85:e3:2d:f3:67:e2:e3:b3:c4:97:
         67:52:a5:5b:a2:64:37:c9:b5:4b:35:4b:c1:b3:a1:f4:bd:a4:
         43:7f:ab:b1:ae:10:9b:7f:1c:0b:37:cc:54:2c:7d:76:af:95:
         cd:b5:d2:5b:f1:eb:9d:54:2b:6b:f2:7d:84:ef:2c:68:a5:70:
         a8:f2:89:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWRVpgS5EcLI2yTut+qDCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1
ZjU2ZTQwHhcNMjUwNzI5MTMwMDQyWhcNMjUwNzMwMTMwMDQyWjAzMTEwLwYDVQQD
EyhhNDU2ZDc1MDM2ZmE3OTM5NTI1N2JkM2U3YTE1NDZmNjEzYWU0NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6wJBuwjbAZE8bCCtqNMs8DlGdv+
KdVHh1Ksy2eg810uJVDF7XzPS3gZ6qy0RYSOqAnWBIECC1OwsFlq+QvCPEKtHb/B
pvj9BaK78zg9wiNnAVdJrtOtJVKs1rSaiUCwi35iRzv/3+Xz6+zHLhD8973+tuL7
+58dtxy+3g+BPeyA6jP8Ito7qetf4eUSgSxvUBXN73zVqdOw6AsksMTiaYImIFGe
hKaL7egK/ijhrdwRk2KjTRPPZ8q48dcqu2NtclLnwTa4yFVo5KRIp8DQ8E6RIlmS
EVoM+l6/JRfzleFWN46AjNaKsBkyxaRepcgwEb6Wcr3sIg+OEBaUf9j+AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRW11A2+nk5Ule9PnoVRvYTrkXKMB8GA1UdIwQY
MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt
MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh
LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApi4EZ1R+
mSV6EbfsiD+T7si5JIka+/kvmCQtd3LzJ22i42uwLUQuGCZa/Hz8VIIodQHLQbqf
Ejip4sgWQEx9xewLVBNCRv9fLemcgg553tY65wUMNr8dWJFSowGqx4boPd9Fqznv
2O0UHCaOWA98V9qV3EHPPVUT1e4tsOZy0/h+Z+wseqE3qZ3zsLnLWb9ItMInzT5t
+Hlp3cRfRZOhV+bjTmCocA54WspF3WP4L8Ch5v70yLOYlqduDs2F4y3zZ+Ljs8SX
Z1KlW6JkN8m1SzVLwbOh9L2kQ3+rsa4Qm38cCzfMVCx9dq+VzbXSW/HrnVQra/J9
hO8saKVwqPKJhg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 19:04:14 2025 by rpki-client