Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
File:                     jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json)
Hash identifier:          GntcMcx/UBcMGrsZBBR2RPc5Cr2WBOu8UuAADS4gGoE=
Subject key identifier:   53:C2:EC:60:C1:63:53:75:CB:23:43:78:B9:C9:0A:61:87:41:3D:30
Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
Certificate issuer:       /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Certificate serial:       0199239ED502441C34809B5B0F99C0EF78C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
Manifest number:          0126
Signing time:             Sun 07 Sep 2025 10:00:35 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:35 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:35 +0000
Files and hashes:         1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: 4MUjYy4JLt1tDJopnqcf9cYJ/N5sBYNDqP9G2exFkYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:d5:02:44:1c:34:80:9b:5b:0f:99:c0:ef:78:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
        Validity
            Not Before: Sep  7 10:00:35 2025 GMT
            Not After : Sep  8 10:00:35 2025 GMT
        Subject: CN=53c2ec60c1635375cb234378b9c90a6187413d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:ec:aa:52:c8:4c:5b:b2:9d:bf:b4:41:39:
                    ca:83:9d:0d:68:5b:42:34:55:8d:4f:ca:bf:84:d0:
                    72:89:6f:e3:c6:4e:65:ad:6c:53:90:39:df:84:a0:
                    b5:61:2a:76:a3:75:06:b7:74:26:56:d5:8c:1e:58:
                    ad:03:e3:64:d1:6e:d4:09:8c:68:d8:ff:e8:af:a2:
                    f8:f8:2a:20:51:27:70:8c:5e:d2:8d:60:1a:05:28:
                    d6:e7:fc:d4:5f:6f:de:13:15:24:27:cd:17:8a:a6:
                    c2:3e:9a:bf:26:72:ee:d0:8c:b6:c4:b7:b5:98:27:
                    39:5c:9b:9e:47:10:d2:8d:d4:2c:de:5d:b9:25:69:
                    2d:85:af:81:78:1b:2c:75:dd:1f:ef:16:d2:66:e9:
                    12:85:78:c0:44:d4:7c:ef:70:e6:b1:90:8d:46:8a:
                    18:19:7e:53:16:7d:31:68:c7:5f:51:2e:85:f9:63:
                    65:81:62:26:c1:d9:da:35:06:04:bc:99:2d:81:c9:
                    8d:55:11:a6:05:e5:64:04:3f:fa:4e:ff:36:e3:95:
                    df:af:ac:c2:7a:67:04:91:32:00:7d:a5:ab:a4:12:
                    85:ec:5c:9e:02:50:36:92:e7:3a:2c:d5:36:ea:37:
                    9c:cf:35:38:77:bb:05:5e:81:ba:0c:3f:73:6c:c3:
                    3d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C2:EC:60:C1:63:53:75:CB:23:43:78:B9:C9:0A:61:87:41:3D:30
            X509v3 Authority Key Identifier:
                keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:36:11:32:18:e5:0e:f3:bf:0f:26:68:c3:75:94:88:2c:68:
         ed:6d:9b:3e:69:ec:1a:38:c9:b0:33:fb:3a:b7:f2:dd:54:ec:
         ce:f6:ec:57:c7:4b:d5:66:d1:0b:24:c7:1d:12:52:f6:c2:62:
         60:e3:be:a4:1d:41:c0:4f:eb:19:be:9e:09:3c:f5:28:06:07:
         34:e9:0d:83:77:27:8a:c8:30:02:82:2c:e1:4c:1b:39:fc:31:
         cd:ee:ac:b3:68:84:e6:3b:7e:b1:5a:2f:92:48:f8:40:90:a1:
         07:aa:8e:82:df:1c:b0:13:a7:0e:9b:f6:19:1d:47:e9:d2:9b:
         e0:c9:82:87:7d:03:ed:16:b9:03:9f:ac:70:69:7f:d4:0c:87:
         a6:f4:e1:a1:4a:9d:9d:16:69:0a:e7:06:e0:3f:ed:90:7a:33:
         ab:fd:21:e5:e8:18:7b:2d:c7:a5:b6:72:66:8d:bc:da:cb:d6:
         22:43:85:27:b0:62:bf:59:b8:b4:49:14:ec:d1:28:d5:87:09:
         aa:ff:a2:ae:21:bb:1b:01:f2:e9:65:91:67:26:f8:52:5f:ad:
         59:66:2d:5b:d8:e9:27:d3:0b:45:93:1d:44:b0:de:21:58:9c:
         6a:76:87:91:fd:d7:2a:49:b5:70:0c:4e:a3:e2:a7:f7:44:87:
         15:ae:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:56 2025 by rpki-client