Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File:                     jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier:          x6lsaITLNqgH3c8Gmz0rUKB2oJsl6Kyv3Hk17MwD6pI=
Subject key identifier:   68:95:1F:C9:26:59:A7:A6:FF:B4:AB:0E:0B:6C:EC:A4:43:4F:4E:A0
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer:       /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial:       01991688CB36D78EFB3EACA462A2AA305B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number:          12B4
Signing time:             Thu 04 Sep 2025 21:01:27 +0000
Manifest this update:     Thu 04 Sep 2025 21:01:27 +0000
Manifest next update:     Fri 05 Sep 2025 21:01:27 +0000
Files and hashes:         1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: DsjZh4JZXorG8TdxMl7V3ZqCGpq+jZjoVBP9qQft+Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 21:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:88:cb:36:d7:8e:fb:3e:ac:a4:62:a2:aa:30:5b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
        Validity
            Not Before: Sep  4 21:01:27 2025 GMT
            Not After : Sep  5 21:01:27 2025 GMT
        Subject: CN=68951fc92659a7a6ffb4ab0e0b6ceca4434f4ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:0d:da:3a:b2:f1:26:cf:d5:eb:02:d5:5a:
                    e5:ca:df:74:e1:cb:dc:70:45:6f:86:d5:6f:4c:53:
                    b4:da:84:1c:14:99:42:f8:04:3e:1f:cc:a2:64:c5:
                    f3:ae:ae:9e:a7:de:c4:6b:93:e5:94:57:12:d6:44:
                    b8:93:f5:34:0d:e0:53:e9:48:f7:16:b4:6f:75:27:
                    b7:70:99:7c:16:0a:cc:53:1c:46:a3:d7:3d:d2:59:
                    4f:cc:bc:67:9a:d2:85:8e:ba:51:fb:83:b3:4a:dd:
                    20:cd:ad:ce:55:b2:2b:32:6a:11:da:12:06:c6:af:
                    12:ec:cc:c6:2f:a9:b1:f2:3e:c4:49:4a:f0:b3:cc:
                    2e:73:c4:d0:58:a1:c0:10:ec:87:01:b0:4b:75:9c:
                    63:69:63:f9:a2:88:38:f7:f5:12:05:f5:98:6a:25:
                    e7:aa:4e:aa:d5:42:09:97:ca:ee:c9:7f:ea:a3:cd:
                    fb:f8:e0:f4:ef:a3:e3:21:34:d6:4a:65:40:51:b9:
                    57:68:b1:c1:69:90:b9:be:d4:13:44:b3:6b:32:45:
                    b4:21:c0:33:14:53:0c:ad:e1:91:48:ee:48:da:50:
                    47:80:47:0a:8d:96:fb:76:ee:26:96:a3:42:28:88:
                    c1:fa:5b:37:3f:ba:ee:92:3e:d9:c0:23:4c:7d:9d:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:95:1F:C9:26:59:A7:A6:FF:B4:AB:0E:0B:6C:EC:A4:43:4F:4E:A0
            X509v3 Authority Key Identifier:
                keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5c:c7:64:ac:4d:3b:79:88:bc:ad:6d:b2:c2:1e:e8:c0:0c:
         03:16:c2:ab:41:a4:d8:52:7e:e6:03:86:5f:b9:e0:bc:d5:12:
         0e:86:be:1c:fb:b1:b3:9f:7d:c7:2f:60:6c:83:43:3b:66:7f:
         43:18:ff:a7:26:be:f0:c0:f3:09:53:e6:2f:85:d1:c9:c6:cc:
         d8:34:21:9b:a8:2d:71:97:12:4f:98:10:1c:41:f8:70:b2:e4:
         91:32:8e:e2:22:fa:38:79:2c:ee:1b:48:b7:57:5d:f9:d9:af:
         a5:fb:6e:c8:57:57:b5:a1:46:5e:1a:66:82:4e:84:66:64:35:
         ab:48:8c:d6:79:68:52:62:47:3d:5d:9d:ba:e3:2a:91:ef:07:
         e0:56:04:a4:db:b3:00:a3:3b:d1:4d:37:59:88:93:bb:82:b5:
         42:41:53:de:eb:6b:6e:ce:23:9e:4c:9e:5f:5a:00:2e:78:23:
         ed:07:0d:37:0c:c9:22:02:df:21:7f:b6:69:14:c9:17:8d:75:
         82:5a:04:dd:44:1c:15:39:46:3f:51:8f:22:7f:34:9a:fb:25:
         96:72:12:79:f6:a7:87:7b:24:88:2c:d5:8f:e1:aa:06:95:41:
         f9:cc:4a:a4:42:fe:51:ec:c0:0c:0e:58:af:0c:20:50:bb:18:
         a5:24:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:46 2025 by rpki-client