Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          9oUHKsxXv1zD6ZHT+DCHJgLNMHjVd5CwFKMmiOM/LnE=
Subject key identifier:   06:19:8D:55:D1:38:1E:6F:00:07:6F:1C:B0:98:D8:E2:65:94:05:EB
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       01985BA31A550C64F67F90EB5768AC5233DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          1125
Signing time:             Wed 30 Jul 2025 14:01:12 +0000
Manifest this update:     Wed 30 Jul 2025 14:01:12 +0000
Manifest next update:     Thu 31 Jul 2025 14:01:12 +0000
Files and hashes:         1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
                          2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: PqUEItDWkYr0k18LF0rpW/cFLg3zHGU7pUBQskCRD4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5b:a3:1a:55:0c:64:f6:7f:90:eb:57:68:ac:52:33:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Jul 30 14:01:12 2025 GMT
            Not After : Jul 31 14:01:12 2025 GMT
        Subject: CN=06198d55d1381e6f00076f1cb098d8e2659405eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:72:cd:c7:84:ce:7b:8a:e7:9d:28:b6:87:
                    6e:8b:8b:f4:4e:34:ea:72:b1:80:81:ac:61:7c:fb:
                    4f:38:58:86:70:3f:f4:e4:45:30:17:3c:4a:b8:a8:
                    eb:e5:40:f2:33:21:58:67:5c:10:92:02:17:3a:2e:
                    ea:b8:0e:da:42:36:32:76:0b:1a:c0:88:6a:96:65:
                    fa:c0:57:f4:7f:fc:73:20:61:de:a7:bb:d7:10:61:
                    56:3c:e5:fa:9b:b7:5d:39:92:ca:cd:3f:5a:d9:97:
                    c7:98:c0:0e:c5:e3:18:2d:6d:6c:1b:62:6b:7c:11:
                    90:6f:64:2a:d8:3d:d4:15:ec:f9:1b:d8:42:1d:ea:
                    df:a3:0e:a1:a0:1d:16:92:d7:31:2a:88:07:a6:e3:
                    52:fc:d1:4b:83:70:11:f1:72:cd:80:8e:e5:e0:ca:
                    54:83:4f:f4:09:86:d9:bc:23:21:07:81:97:59:a0:
                    a6:e0:5c:0f:38:91:a0:55:ed:6f:79:5b:fc:84:e2:
                    d2:92:a8:12:db:b5:f4:8c:25:17:21:79:6a:a0:3c:
                    25:44:83:fd:ef:d5:c6:03:8a:39:ac:04:4c:86:61:
                    2d:0a:da:3e:bb:f8:22:fa:01:da:11:03:6c:8a:7a:
                    e2:28:e4:6f:e0:42:7c:f4:f6:a7:64:09:2d:6b:6c:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:19:8D:55:D1:38:1E:6F:00:07:6F:1C:B0:98:D8:E2:65:94:05:EB
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:ac:3e:5d:3f:1e:ee:d8:4e:72:5c:68:2b:9d:f1:da:19:
         14:53:b8:d7:7b:fb:81:ba:bf:35:5e:8d:3f:42:4b:cc:d4:cf:
         4b:eb:f0:08:ea:c2:37:42:d3:b0:09:0f:1f:2f:99:b1:fa:78:
         27:f1:46:b7:25:ba:8d:32:cf:6f:ab:35:07:51:bd:66:de:12:
         af:58:f4:be:12:ea:28:7a:f5:f1:b4:c7:a6:a1:cb:8b:fe:8f:
         a5:d0:e8:1e:46:18:5b:ce:b2:34:0e:e8:41:97:4a:9d:dd:28:
         28:19:57:34:6c:cd:52:61:f2:ee:8b:5e:04:ca:c5:4a:07:03:
         47:48:50:d7:d6:42:0e:24:13:e0:c0:61:b4:6a:e6:16:14:14:
         9a:94:b8:79:15:40:b9:4c:e9:4a:1b:18:4a:39:0d:90:8e:40:
         e4:1b:55:bd:08:a1:3b:45:9b:37:e0:26:83:54:dc:55:f1:58:
         c8:10:ce:15:39:ce:b3:e4:f2:c6:0c:65:b6:9b:25:40:41:94:
         b7:de:c8:db:01:7f:c6:a7:a7:bc:16:18:5b:08:52:3b:16:08:
         1f:32:ae:37:a4:b7:53:2f:b7:df:1a:82:53:12:17:e0:01:3c:
         e3:27:e5:18:37:2b:18:50:98:3a:e3:f7:72:2b:ea:eb:03:ec:
         02:5b:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:29:25 2025 by rpki-client