Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
File:                     JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft (raw, json)
Hash identifier:          /zARHZ7djrazujDgQoSwNpIstg2sa2LQAc/MdPpsEA8=
Subject key identifier:   47:A6:3B:F6:45:D8:C0:71:08:1C:B5:64:C1:86:30:FE:A0:BB:AF:79
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Certificate issuer:       /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial:       019965B5D4FC72C2CDBCE4BDF21E48551B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
Manifest number:          1698
Signing time:             Sat 20 Sep 2025 06:00:39 +0000
Manifest this update:     Sat 20 Sep 2025 06:00:39 +0000
Manifest next update:     Sun 21 Sep 2025 06:00:39 +0000
Files and hashes:         1: 3uavFejgiYtPvHU28rvkzS-PRoM.roa (hash: adHlXrZvrLicIOOrKQ1qwcmYjjUJDcMR41QWoJ5Tzq8=)
                          2: 6CxZro-eevneCF6C-uhBhwFJdV8.roa (hash: +cSRsic9So2p+WgzYKEuCQ8c+WbynfkIR2MSy+Rcb0M=)
                          3: JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl (hash: FZEVQAHDcrQS7FsyQktJp8zIkCBykkdtK5vLHlU7rWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:65:b5:d4:fc:72:c2:cd:bc:e4:bd:f2:1e:48:55:1b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
        Validity
            Not Before: Sep 20 06:00:39 2025 GMT
            Not After : Sep 21 06:00:39 2025 GMT
        Subject: CN=47a63bf645d8c071081cb564c18630fea0bbaf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:25:52:9d:63:16:ed:83:ca:75:82:17:e3:
                    33:d4:aa:05:47:ff:42:92:82:69:89:95:55:37:73:
                    eb:f0:2c:de:e8:b8:b1:db:6b:5e:53:5b:f3:2f:c4:
                    d5:e1:f1:b3:c0:87:ef:2f:6b:b7:dd:37:bd:fe:19:
                    11:8c:32:51:25:c6:94:e8:3e:9c:05:ca:52:7c:06:
                    bf:cf:35:c4:fd:d7:58:00:27:64:45:cd:2a:42:24:
                    39:c1:e6:c9:4c:e2:86:c2:91:5b:65:4d:57:9d:71:
                    0a:30:0e:ad:29:60:d0:5d:6c:06:0e:35:1b:69:39:
                    2f:f8:89:f4:db:5f:34:55:eb:d9:16:05:76:62:4f:
                    bb:0a:21:ce:5c:6a:eb:25:b3:9a:be:dc:62:29:26:
                    b9:88:55:6c:ff:c3:ea:b6:c3:a4:a8:fd:15:7f:28:
                    d4:86:a7:b9:c3:ea:7c:bf:7b:e3:0e:8c:f6:5c:e2:
                    53:a1:51:24:43:90:60:85:77:e6:04:b9:fd:3a:5f:
                    a9:07:07:7c:85:5d:7c:87:4a:1f:d1:0f:64:5f:d8:
                    77:ca:97:71:21:cc:d0:0a:86:47:fc:a3:94:b6:16:
                    9f:ca:4d:91:b7:be:dd:8d:82:6b:69:9b:f3:be:a9:
                    ab:9c:ef:ff:0b:84:54:01:a7:50:23:d5:af:ff:e5:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A6:3B:F6:45:D8:C0:71:08:1C:B5:64:C1:86:30:FE:A0:BB:AF:79
            X509v3 Authority Key Identifier:
                keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:c3:c8:79:85:4e:77:24:ac:bc:f5:1c:4a:db:6a:d6:11:
         83:cf:2a:7b:dd:55:2f:e8:62:4e:0c:0e:b6:7a:23:fc:8a:6a:
         4c:0d:ac:fe:dc:05:23:86:70:88:8f:e8:ed:ed:7a:67:cf:84:
         d4:19:c5:7b:7b:88:bc:b2:9c:95:1d:e1:cb:04:9a:6f:46:43:
         93:0a:5e:06:58:9b:69:5e:bc:50:86:e5:91:8f:8c:1e:9f:c8:
         4f:66:51:31:6d:0e:c9:ef:ba:b6:11:c6:a6:af:dc:30:57:7d:
         e0:06:37:39:c1:05:97:14:cd:19:70:fd:fd:cb:7c:f0:86:5b:
         d1:b3:5b:0c:d5:d9:f4:68:06:30:a1:df:bf:c7:17:bb:17:66:
         80:23:3f:7e:e5:39:e6:72:42:71:12:38:f1:a8:e2:f3:38:ea:
         8c:61:f7:87:d2:aa:90:07:e5:bf:ce:2f:a5:15:5a:08:7c:d1:
         08:3c:c4:66:5b:f1:28:6c:23:d7:13:b9:50:9d:c4:f6:1a:c7:
         d9:e6:8f:fd:58:1b:ff:9c:2a:fc:cc:58:06:a4:f0:80:56:fc:
         0d:67:8b:96:20:c1:88:53:f6:1a:cd:b4:88:12:22:8e:ec:6a:
         7f:66:0c:76:e6:0e:68:07:59:fd:55:ad:46:c5:e9:2e:70:7a:
         9c:61:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 07:19:16 2025 by rpki-client