Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          SoApSOgYCF2XH3ED0eJk/qntxlSwJLLfz69tLmKCJgk=
Subject key identifier:   10:91:18:44:AC:E8:F4:15:6F:2D:F6:7F:79:0C:CF:E1:34:47:AC:66
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       019932A39B9BFD0F44F2E67DB9A94BA82B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0B71
Signing time:             Wed 10 Sep 2025 08:00:06 +0000
Manifest this update:     Wed 10 Sep 2025 08:00:06 +0000
Manifest next update:     Thu 11 Sep 2025 08:00:06 +0000
Files and hashes:         1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=)
                          2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: 5OflB8wpR5RlCJWe1/toeQiyfgnsjwxdw7tevlqUFbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 08:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:a3:9b:9b:fd:0f:44:f2:e6:7d:b9:a9:4b:a8:2b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Sep 10 08:00:06 2025 GMT
            Not After : Sep 11 08:00:06 2025 GMT
        Subject: CN=10911844ace8f4156f2df67f790ccfe13447ac66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:4a:ad:0c:94:a3:df:c8:aa:99:0c:a7:19:
                    bd:cf:09:e7:12:5a:43:71:6e:ed:31:d5:be:e3:f8:
                    0e:0b:b9:9f:84:ff:c5:83:16:35:ab:e8:38:38:64:
                    78:39:37:85:f3:30:2d:a3:f2:12:fa:1a:e9:68:e1:
                    bf:da:02:7d:d7:93:c8:83:2e:4a:ae:cd:9f:80:dc:
                    a6:5f:85:fb:ec:62:a1:2d:43:5e:de:b7:db:6c:98:
                    da:cd:be:b3:35:28:63:23:e5:c5:c8:2d:63:09:30:
                    e5:a8:e1:d3:6b:0f:f5:cb:db:e3:f8:65:73:b8:03:
                    40:1d:ea:78:78:b7:46:bb:67:e8:15:3f:e1:9d:35:
                    4e:a5:1b:95:e8:9e:4a:d6:ed:a5:4a:cf:7c:e8:c7:
                    47:93:9b:c7:5f:7e:dc:01:ee:ea:64:bf:c9:17:4a:
                    01:cd:17:ba:35:ad:19:77:e3:4b:a6:f5:46:a4:c3:
                    f8:7d:16:87:c0:65:cd:f3:c9:05:b6:c0:76:bf:d0:
                    fe:46:1f:71:36:45:a9:76:16:f5:e6:63:76:96:da:
                    25:c2:49:e8:c4:a1:a4:63:24:6c:56:74:ca:19:c4:
                    b3:19:5d:10:a1:f5:c5:8e:5d:19:3e:e6:cb:ab:d4:
                    97:9a:26:8e:bb:f3:d7:9c:85:ea:ba:86:5d:7e:29:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:91:18:44:AC:E8:F4:15:6F:2D:F6:7F:79:0C:CF:E1:34:47:AC:66
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:8b:45:91:66:09:11:94:72:2c:bd:49:64:01:c9:0b:87:
         8c:88:2b:f6:7c:11:af:09:08:b1:17:f3:fb:7b:5c:10:9d:5e:
         1e:3a:19:9d:dd:51:57:7f:8a:af:78:be:f7:0e:ec:22:e6:12:
         18:fe:84:98:ba:da:00:3e:90:0b:9e:77:6b:5d:f5:9c:6e:6a:
         0f:f0:19:bf:6b:42:77:b0:ae:1f:c1:53:6a:fd:73:c8:de:86:
         57:94:10:ce:30:12:9e:03:96:13:9d:65:ba:10:75:79:bd:cb:
         93:7b:dd:8e:9b:e0:6e:a4:ee:9f:ba:e8:2a:fd:4f:f1:ab:8c:
         20:31:30:0d:db:9a:8e:71:6a:7b:a0:d4:37:58:f5:7b:6d:e9:
         5b:78:72:94:02:3d:b5:0a:67:ea:58:8f:a6:b0:b6:19:39:64:
         af:ff:93:dd:21:ac:57:ec:02:c9:27:a3:ea:de:8b:e1:da:b8:
         bc:94:16:d3:7c:3c:f9:e5:3d:55:50:7f:98:cc:88:1d:b2:5e:
         20:d1:9f:48:e0:cc:a1:5f:cc:6d:2c:e6:92:cc:54:46:a7:3c:
         fd:27:79:19:ae:66:02:55:bc:34:19:af:b0:0d:a9:91:8b:21:
         2b:33:51:d9:f3:a9:1d:a6:e0:24:ae:79:22:6b:dc:b0:55:c4:
         18:f7:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:30:18 2025 by rpki-client