Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
File:                     JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft (raw, json)
Hash identifier:          mM3sGtCHIVGMWItvKW4LNyDfNHKX89F5IMtWcEDe5AU=
Subject key identifier:   4A:29:AC:12:0B:0D:B9:6D:E3:D1:7F:5B:5B:F8:51:67:F3:C1:23:FF
Authority key identifier: 26:22:6E:14:1E:81:13:74:21:97:1A:0C:74:5D:60:5A:AC:8A:A6:C8
Certificate issuer:       /CN=26226e141e81137421971a0c745d605aac8aa6c8
Certificate serial:       01992330FC35A3E48BF9955E02EE0BF7F232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
Manifest number:          67
Signing time:             Sun 07 Sep 2025 08:00:36 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:36 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:36 +0000
Files and hashes:         1: JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl (hash: WrxkvkKa95566tyBSFQr5Va5/bumQ4i/FYIJk8nGbj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:fc:35:a3:e4:8b:f9:95:5e:02:ee:0b:f7:f2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26226e141e81137421971a0c745d605aac8aa6c8
        Validity
            Not Before: Sep  7 08:00:36 2025 GMT
            Not After : Sep  8 08:00:36 2025 GMT
        Subject: CN=4a29ac120b0db96de3d17f5b5bf85167f3c123ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:db:2f:b1:a5:73:1f:d4:19:76:e3:24:c2:
                    54:35:92:e2:f7:1a:10:66:60:c4:82:95:29:6d:62:
                    9e:22:4e:b4:59:00:56:b9:8c:02:3a:3c:fc:4e:08:
                    b8:e8:27:3b:09:26:44:72:73:8b:fa:11:45:e8:fc:
                    4e:5f:95:71:f5:c1:9d:cf:a1:33:6e:5a:b1:b2:9a:
                    3e:aa:73:3e:58:a8:93:d0:6a:ab:43:1f:c7:02:4e:
                    ab:8d:f3:5e:be:d0:bf:ce:75:2a:91:48:d8:0a:39:
                    46:e3:db:30:b3:61:35:59:4c:4e:69:b1:0c:e4:86:
                    63:e2:4b:f0:f2:fb:c1:98:b9:8f:15:3e:75:b5:45:
                    6b:8a:31:f1:cc:22:bd:92:af:2d:d3:fe:83:f3:aa:
                    70:ee:12:6e:0b:24:8d:70:f0:7c:53:0e:a4:e6:4e:
                    aa:b2:cb:d1:6e:de:d0:67:0e:e2:eb:1d:50:96:33:
                    d7:d1:f6:f5:a9:ae:7d:dd:7b:cf:8c:2c:25:77:46:
                    70:22:0c:74:7b:39:eb:cb:04:a1:90:7d:1b:07:92:
                    40:d4:a5:ce:2d:40:49:5e:cb:0e:b6:68:d6:74:69:
                    e2:a7:60:16:a9:17:13:73:3b:b6:49:38:cd:9c:dc:
                    18:8a:7d:63:b2:fc:9f:b8:6b:12:7f:fe:76:7a:fe:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:29:AC:12:0B:0D:B9:6D:E3:D1:7F:5B:5B:F8:51:67:F3:C1:23:FF
            X509v3 Authority Key Identifier:
                keyid:26:22:6E:14:1E:81:13:74:21:97:1A:0C:74:5D:60:5A:AC:8A:A6:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiJuFB6BE3QhlxoMdF1gWqyKpsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b22a3e-310d-471b-9957-b6b4d4735f17/1/JiJuFB6BE3QhlxoMdF1gWqyKpsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:40:ff:3a:6a:a8:70:8c:3b:0e:26:10:2c:e3:87:23:0a:
         01:88:2f:f0:19:a2:9b:b1:62:99:ea:73:80:5a:cc:e0:0f:50:
         63:8d:a3:1f:2a:ae:c6:7a:0b:a0:eb:3b:6d:42:6b:8c:8e:1f:
         e8:e2:b8:d5:09:29:ce:34:f2:24:31:f9:ca:7a:3b:43:45:90:
         54:a9:d6:1c:ff:cc:f1:19:8e:88:79:f4:8f:1a:67:1f:86:c2:
         5e:f9:41:11:a4:fc:ac:bb:9a:8f:4b:a2:9e:cb:4e:ce:72:ac:
         fc:36:8e:09:1b:09:51:6c:bd:4a:bd:70:99:f1:cb:b0:6e:9f:
         84:b0:44:55:2e:b0:b3:36:6a:81:8a:9f:5a:ca:77:13:79:f0:
         70:2b:54:3c:6c:53:5b:30:f9:86:48:a8:b4:c3:1e:9d:0b:c7:
         2a:7b:cd:85:98:38:d8:ef:b5:e0:ca:4f:55:9f:dc:9c:62:ce:
         c0:fc:cf:a1:c1:5a:76:7e:f3:33:9c:b9:9e:21:e6:5a:02:15:
         12:89:60:79:03:6d:88:10:0c:95:e1:7a:e8:f6:87:71:80:91:
         69:29:b7:e7:84:64:06:fa:aa:45:eb:7e:42:88:c0:29:d3:be:
         c9:8a:3a:b6:bf:e7:e9:29:9b:51:d4:8a:33:7a:6b:ab:b6:38:
         86:eb:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:47 2025 by rpki-client