Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          bNaFeHeBAqlz0GSGN+AwvkYO+0gEdS0ooLYmuu+PnD8=
Subject key identifier:   ED:BE:4C:48:39:F1:2E:53:CD:6B:E2:00:14:49:75:5A:5F:60:66:ED
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       01993313E790DBA292B3F7A334E3E02E0E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          167C
Signing time:             Wed 10 Sep 2025 10:02:46 +0000
Manifest this update:     Wed 10 Sep 2025 10:02:46 +0000
Manifest next update:     Thu 11 Sep 2025 10:02:46 +0000
Files and hashes:         1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
                          2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
                          3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: McFuMK/44e5Jqq+SYlwvdpN1yFfp71LjNjLIfGMPt00=)
                          4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:13:e7:90:db:a2:92:b3:f7:a3:34:e3:e0:2e:0e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Sep 10 10:02:46 2025 GMT
            Not After : Sep 11 10:02:46 2025 GMT
        Subject: CN=edbe4c4839f12e53cd6be2001449755a5f6066ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:5e:01:42:c0:0c:b3:6d:c4:67:b8:ba:83:
                    5e:d2:70:af:6e:c8:16:93:60:80:44:98:25:54:36:
                    87:0c:46:87:9b:cb:54:aa:57:2d:f1:9a:67:25:8a:
                    a5:c6:d9:77:84:c0:9e:29:6f:ff:12:06:df:20:ff:
                    58:36:26:c8:bc:a4:f2:fa:ad:55:9b:e0:9c:97:b7:
                    52:82:a9:35:2b:82:29:d2:e3:5e:dd:70:9a:d7:0e:
                    95:3f:f9:37:a7:96:84:b0:0a:06:48:a1:96:5d:d8:
                    d2:88:bb:16:b6:a3:9d:87:8f:dc:4a:7f:ee:ff:a8:
                    54:02:ed:42:a6:d7:bc:ad:4e:da:e7:58:b9:74:99:
                    28:2c:58:8b:45:e4:c5:69:0c:56:33:41:fc:e8:05:
                    ef:91:02:8e:95:dd:69:e7:a2:42:ac:1a:07:84:2c:
                    fb:88:1c:48:ce:1e:82:22:8c:d3:cf:cd:ac:d2:76:
                    53:27:f4:6f:f9:f7:13:bd:da:59:ec:6a:7c:64:9a:
                    8e:22:4d:50:61:d9:52:ab:09:c8:81:12:73:dc:9f:
                    ba:d6:fa:d0:4b:54:55:9e:03:76:7f:1a:32:93:63:
                    07:ca:aa:b3:37:d3:6c:ba:2c:d7:47:1b:4d:2f:dc:
                    e8:eb:02:07:de:7c:77:f9:49:ed:cb:07:76:2a:e7:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BE:4C:48:39:F1:2E:53:CD:6B:E2:00:14:49:75:5A:5F:60:66:ED
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:eb:09:96:62:96:fa:c5:df:00:41:6c:ba:bb:13:34:28:
         0d:fb:ab:74:97:dc:3d:a1:64:55:f0:67:f3:4e:b3:90:25:e4:
         53:c3:73:f5:67:2d:01:9e:1d:58:3d:5b:e8:10:35:7b:26:8c:
         27:dc:e7:40:21:4c:65:3c:4e:5c:79:bb:95:10:73:2d:87:a1:
         32:85:21:9c:7f:b2:e7:e8:85:69:57:9f:01:5c:2d:b8:99:b6:
         6b:1e:25:90:e9:0d:a6:70:be:e6:ad:15:f3:72:30:66:8f:f5:
         e7:bc:11:4b:34:5a:78:de:5b:1b:58:34:a8:24:48:36:8c:12:
         9a:d6:38:4c:01:9b:d7:66:69:bd:b7:f0:e3:c3:17:f9:6a:26:
         d4:13:6c:0a:28:36:83:70:6e:e7:18:3f:4b:2a:14:2b:e5:74:
         33:ad:e8:2b:0f:58:09:8d:67:4b:07:a0:f7:ad:08:50:5a:7e:
         bf:48:d3:13:6d:0b:9b:cd:97:c5:94:93:f4:ba:4b:0c:16:27:
         34:4e:03:97:1f:9b:28:2f:f7:d9:ba:44:77:bf:d1:69:3f:a0:
         27:43:a9:bd:70:67:52:f3:7d:02:a7:d1:3d:8a:ef:f2:2a:b5:
         f2:15:54:ed:e8:9a:5d:aa:75:a6:cd:4b:c4:c5:32:a4:b7:54:
         e3:1f:27:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:19:58 2025 by rpki-client