Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File:                     JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier:          IFN8ZhzoCa/67yuBFvfVrfumQ/DIFJX++E+JWlwuZPc=
Subject key identifier:   E9:B4:F1:E1:48:A7:9E:04:F5:D1:6E:F3:19:72:38:2D:A6:E6:ED:28
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer:       /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial:       0199240D9B0974208E478C722542AEAAEEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number:          0D68
Signing time:             Sun 07 Sep 2025 12:01:35 +0000
Manifest this update:     Sun 07 Sep 2025 12:01:35 +0000
Manifest next update:     Mon 08 Sep 2025 12:01:35 +0000
Files and hashes:         1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: 48gtWWcQMZ33QVyShuYxhsNmhvono3g6z3SEgK9yb6I=)
                          2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:9b:09:74:20:8e:47:8c:72:25:42:ae:aa:ee:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
        Validity
            Not Before: Sep  7 12:01:35 2025 GMT
            Not After : Sep  8 12:01:35 2025 GMT
        Subject: CN=e9b4f1e148a79e04f5d16ef31972382da6e6ed28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:f3:4d:41:7b:1d:bf:c3:92:4c:1f:d5:3c:
                    6f:20:28:55:26:78:77:57:8f:6b:63:9e:a5:7c:91:
                    1d:e5:0e:97:90:f7:c8:ad:d8:79:80:41:6b:d6:7a:
                    b5:4d:05:1e:65:11:f6:a9:26:5f:ca:cc:b1:70:1e:
                    89:2f:15:62:4a:6f:76:79:ec:b5:07:94:ad:a9:5c:
                    15:47:1f:16:7a:ea:6e:ad:d6:5c:c0:1d:9c:4e:d4:
                    e6:c9:26:3b:a9:db:23:89:35:78:00:ba:28:f8:a5:
                    35:0c:32:a8:6f:85:87:93:5c:b5:4c:a6:96:f1:79:
                    4c:d7:d1:4b:3d:44:14:cd:65:89:ac:6a:4f:1e:54:
                    a1:26:20:64:9b:17:0b:fd:99:46:8c:7b:4c:54:a3:
                    9e:9d:85:35:1b:b1:e5:dc:f0:4c:2f:c2:64:9c:cd:
                    7f:eb:4a:63:f5:24:f5:eb:1f:10:01:cb:2e:aa:f6:
                    1e:08:a2:4f:98:bd:4f:26:8f:2a:4f:91:87:46:4a:
                    2c:a0:63:ec:5c:97:d2:ea:7f:f9:c5:e1:be:5d:a2:
                    8a:85:8e:94:18:c5:96:55:59:08:b9:a2:ca:9c:d1:
                    e5:ef:4a:ab:95:27:86:4f:45:78:b0:3e:37:1d:72:
                    d5:71:ed:2d:f5:0c:0a:15:38:73:f4:13:2e:03:fe:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B4:F1:E1:48:A7:9E:04:F5:D1:6E:F3:19:72:38:2D:A6:E6:ED:28
            X509v3 Authority Key Identifier:
                keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:08:6b:21:87:55:17:24:2a:e9:f5:3e:21:88:e7:8b:0a:49:
         6c:52:9e:bc:a2:fd:ae:a0:d3:e6:91:7d:67:aa:02:15:7f:69:
         a7:72:5d:a3:10:00:48:89:f3:35:b0:f3:a5:ba:39:0e:d0:67:
         e4:c0:08:0b:73:1b:4f:8e:e1:27:e7:2f:f4:d8:a5:4e:6a:03:
         59:28:f5:ad:43:59:f3:9c:b1:7b:33:0a:fc:cd:10:39:01:09:
         44:fb:d3:32:77:31:bd:2b:bc:c7:7d:ad:ec:cd:f1:d4:f8:64:
         0d:62:bb:7b:93:3d:7e:c5:19:b3:2c:33:ea:47:b7:96:e0:88:
         a2:d5:57:e2:61:a0:a3:75:3c:94:f2:e5:0e:e1:85:8e:6b:48:
         e2:6a:28:9a:05:bb:e0:10:65:aa:62:77:fa:f7:70:79:0d:77:
         7a:60:d7:cf:f1:07:a4:4d:39:e7:80:04:b0:55:a4:d9:d1:67:
         60:fa:0a:3a:03:8d:40:6c:0e:4c:65:05:ee:6b:67:51:39:a3:
         1b:ca:e4:c8:15:57:95:36:98:89:88:0e:5a:03:4e:68:4d:b9:
         bf:35:1e:33:7c:d4:db:c1:89:a5:e7:70:b8:01:ea:9a:86:e5:
         dc:c0:b3:d4:1b:8b:29:81:ed:a0:63:1c:3d:8c:b8:75:db:99:
         b4:80:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:49 2025 by rpki-client