Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File:                     JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier:          USmTxFuaZXkdzAsU99RajLYMXqHFfy1La6kXTIEGS24=
Subject key identifier:   0B:9C:E6:CA:D9:83:AA:54:25:C2:AE:54:DE:70:A5:FB:31:69:B8:FB
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer:       /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial:       0199225598720E0549309A4674C4D7BD8C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number:          06E0
Signing time:             Sun 07 Sep 2025 04:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:58 +0000
Files and hashes:         1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: V8hr695ym9AXD8n7Nt1F7n2Aj786Z/sBYB4SciCKqeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:98:72:0e:05:49:30:9a:46:74:c4:d7:bd:8c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
        Validity
            Not Before: Sep  7 04:00:58 2025 GMT
            Not After : Sep  8 04:00:58 2025 GMT
        Subject: CN=0b9ce6cad983aa5425c2ae54de70a5fb3169b8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:fe:2b:d5:15:88:72:d2:e3:69:0f:1a:c5:
                    83:42:a0:f6:6d:35:5b:68:b9:92:80:d9:19:c6:5a:
                    0a:66:4b:ec:78:a7:df:49:c2:6d:fd:cc:25:89:60:
                    43:a7:5b:b0:db:fc:d8:0c:10:1e:39:6e:dc:e0:3e:
                    f0:79:ef:61:52:62:da:89:05:2e:da:ed:dc:e4:eb:
                    54:cb:03:d0:5b:4b:e6:b7:14:36:0c:1e:f1:9a:65:
                    39:69:20:a3:7a:44:6c:87:dc:e3:55:3f:0f:1d:ea:
                    56:d7:f3:54:50:d0:47:58:d8:8c:8a:8e:ac:9e:83:
                    9e:a1:9e:3b:eb:d3:00:b9:f7:43:19:49:65:da:96:
                    6b:72:93:53:84:10:0a:67:19:2f:e9:ae:c6:b1:48:
                    4b:88:1d:b7:c2:c1:ba:97:04:19:68:ea:c9:38:23:
                    67:52:3c:f7:1a:53:52:3c:29:fb:c1:e4:12:91:f7:
                    6c:0b:33:a7:0d:1a:42:d7:2b:30:d4:ea:37:f5:f1:
                    21:9a:65:ff:03:3f:c0:8a:36:87:3c:8e:7d:1d:27:
                    65:5f:93:7f:36:7f:8c:b0:3f:b6:38:66:67:44:0f:
                    83:ff:87:6c:45:bc:0c:a6:9d:75:89:78:26:33:e8:
                    16:df:32:31:72:5f:6f:4c:8c:82:bb:10:b1:4f:38:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:E6:CA:D9:83:AA:54:25:C2:AE:54:DE:70:A5:FB:31:69:B8:FB
            X509v3 Authority Key Identifier:
                keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fe:6c:05:d3:55:19:c4:89:e6:87:e5:ae:1e:bf:02:11:39:
         e4:06:35:c2:dc:07:8f:e6:78:ac:f8:83:0a:31:43:8e:e5:5c:
         87:2e:9e:9d:e5:44:c1:d3:79:8c:c3:75:da:f0:9b:28:fd:1f:
         7f:d0:ac:9f:44:9d:5d:40:35:36:a2:31:3b:3e:b0:17:a1:a9:
         d9:da:b3:db:a9:a6:e6:91:c0:1d:70:f5:33:bf:b8:74:ac:47:
         53:c4:42:c8:43:55:2a:dc:f9:57:fa:21:cb:62:44:a0:e4:bc:
         69:5a:bb:fb:e4:41:46:76:42:76:c2:fb:3f:ea:64:d5:96:12:
         68:3c:de:be:d3:5f:66:56:82:bb:a3:2e:ba:7c:15:5c:17:1d:
         5d:45:28:91:bf:2d:d1:4a:09:29:c8:2a:44:c0:20:22:d1:82:
         7c:4e:a2:69:26:4a:e2:08:6e:46:ab:b2:8b:d6:df:f5:2c:21:
         c8:2f:0a:9d:1c:73:28:2e:db:e7:9f:5f:1f:b8:9c:6d:58:e5:
         19:5a:bd:64:04:d8:50:08:26:6e:5d:5f:14:11:ac:72:bb:44:
         90:ab:34:29:6b:d4:b9:64:28:11:7d:1a:f0:63:de:b0:7d:88:
         87:62:23:22:58:e0:28:ec:75:e8:26:26:d5:79:b7:f5:9a:62:
         ae:00:ce:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:30 2025 by rpki-client