Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File:                     jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier:          yA/Z5TSnwnQuYlOGPjTOc7YsyEm1ApAnOEXF5ni1P/Q=
Subject key identifier:   93:DF:26:02:CD:87:6A:1B:67:0A:13:69:AE:D9:B1:31:1D:B3:57:04
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer:       /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial:       019916BFA943F25C1CB1283685A04D26C275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number:          1036
Signing time:             Thu 04 Sep 2025 22:01:23 +0000
Manifest this update:     Thu 04 Sep 2025 22:01:23 +0000
Manifest next update:     Fri 05 Sep 2025 22:01:23 +0000
Files and hashes:         1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: Piu3Qk2u7NyEFMxiCPmsh2HaT1Qq60Izlvwb/IqgkxM=)
                          2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:bf:a9:43:f2:5c:1c:b1:28:36:85:a0:4d:26:c2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
        Validity
            Not Before: Sep  4 22:01:23 2025 GMT
            Not After : Sep  5 22:01:23 2025 GMT
        Subject: CN=93df2602cd876a1b670a1369aed9b1311db35704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:93:c9:f2:fe:e1:0d:48:cc:f4:85:44:b0:
                    e4:e1:bf:bd:97:21:80:e8:e0:44:50:42:8a:fa:f4:
                    cf:e2:3f:12:60:1f:b1:d3:6e:85:c5:50:aa:a1:01:
                    1c:37:cf:b7:ae:b8:de:61:93:df:46:b9:f7:11:61:
                    3b:c9:e4:68:93:26:78:5d:b8:f9:1b:01:07:68:34:
                    57:f6:61:2c:63:c6:88:f5:0f:e4:e8:68:3b:9f:58:
                    1d:40:92:ff:6f:6b:97:07:08:2d:c1:32:b0:f8:f0:
                    01:8a:d1:37:51:be:5b:eb:83:37:b2:2f:20:a3:a3:
                    78:47:c4:03:b0:20:e3:93:dc:71:64:d2:8f:d1:d5:
                    e1:5c:5c:5d:aa:0c:2a:56:c5:01:44:c0:a7:c8:74:
                    37:d6:40:8b:a9:94:34:64:c2:b5:86:a4:ac:8e:cc:
                    11:a1:e2:99:2b:ec:2e:e8:b5:0e:ca:de:35:e8:9e:
                    b4:13:9d:63:fb:cb:b2:5c:9a:48:1f:0c:fe:fd:31:
                    99:a8:69:49:06:34:1f:f1:70:ac:2e:c3:2d:cb:c7:
                    f8:a2:f3:6a:e5:07:b3:68:ae:22:fa:41:0a:ba:fa:
                    05:a4:34:d4:37:45:cf:ed:6b:17:c7:8e:70:14:dc:
                    b3:df:8c:b1:98:b5:e9:6b:f7:2c:27:f7:2c:b6:2e:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:26:02:CD:87:6A:1B:67:0A:13:69:AE:D9:B1:31:1D:B3:57:04
            X509v3 Authority Key Identifier:
                keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:a0:15:03:25:7f:f1:a3:bb:ca:1f:16:90:96:79:89:e2:
         4c:2c:4e:a8:8a:18:39:61:e5:a9:6c:a8:4c:e9:db:7d:1f:1e:
         dd:66:22:96:09:eb:99:65:95:3f:2a:f3:68:df:39:f7:bf:27:
         ce:17:62:d3:ea:b8:29:a7:79:ca:14:58:76:46:44:c4:14:78:
         b8:3c:b3:b6:d1:33:52:49:42:a1:9f:f8:e4:3a:04:5b:31:e6:
         99:1d:e6:c5:ae:fb:5e:9f:cf:de:f5:6c:bf:35:3a:69:8c:4e:
         95:b5:c4:0d:9a:9d:c8:3e:87:1a:d2:79:4c:b5:89:fe:c6:79:
         25:70:e2:34:f8:b2:a1:bd:aa:e3:5d:29:6e:e9:ab:ed:56:4e:
         6a:b6:1f:fd:b8:3b:52:a4:4c:81:b5:2b:7a:2f:32:b7:39:ff:
         d7:64:bd:a2:e6:23:40:3f:15:25:1d:02:df:dc:d1:4a:d0:96:
         25:00:01:8d:a5:c6:ac:b8:7b:9f:0e:b5:99:a2:69:35:47:7d:
         55:a8:55:63:ae:35:d7:71:31:ee:f4:a5:38:21:67:10:02:f2:
         82:d8:3c:71:e0:9c:42:cd:e6:0a:a5:34:46:ff:89:0d:60:b2:
         19:f9:e3:a5:7f:30:5c:9d:84:bf:b7:d3:cd:1a:48:d5:7c:18:
         71:b0:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:29 2025 by rpki-client