Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File:                     jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier:          Va1O1kASxemwYuuB7GI4fkPGwBHUhiDrpBrn5dcje70=
Subject key identifier:   5A:EA:63:38:93:D5:BC:54:C3:59:21:C8:53:99:AE:75:56:CD:2D:82
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer:       /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial:       019846D2654F06324D0470A062C909FB8A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number:          1292
Signing time:             Sat 26 Jul 2025 13:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:50 +0000
Files and hashes:         1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
                          2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: e1spPouj8KOYg2c+ZQMi267vK0nUiSLhPlQmprWkYa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:65:4f:06:32:4d:04:70:a0:62:c9:09:fb:8a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
        Validity
            Not Before: Jul 26 13:00:50 2025 GMT
            Not After : Jul 27 13:00:50 2025 GMT
        Subject: CN=5aea633893d5bc54c35921c85399ae7556cd2d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:41:a0:0a:74:17:65:69:c3:fb:1c:79:b7:
                    6e:74:fc:f7:d1:ea:d1:eb:07:13:8a:36:6a:db:af:
                    d3:e3:f8:60:3b:5d:87:84:84:af:e9:b8:e8:49:29:
                    6c:b4:f3:7c:f3:1e:ad:60:ed:48:42:80:e3:6c:64:
                    de:af:d9:80:37:28:53:e7:e3:f1:f1:d6:cd:46:76:
                    11:06:79:c8:1c:86:c2:dc:b9:dc:1b:c9:fd:5f:35:
                    60:0e:08:7b:06:63:fd:38:71:8e:c5:c5:d2:f2:d9:
                    cd:cd:83:42:71:f7:16:54:16:cc:62:1f:a7:20:47:
                    4c:52:3e:df:b0:8d:24:d3:36:f6:b2:f8:72:8b:89:
                    4b:e2:67:8e:96:06:18:d1:57:c3:5e:91:3e:09:ef:
                    9b:e2:eb:75:14:80:74:52:e3:b3:e2:72:94:28:9e:
                    69:37:be:36:3d:ab:12:40:0a:fc:9c:7d:60:d5:45:
                    fc:cb:31:6f:ee:8c:db:01:82:6a:72:79:59:6f:d1:
                    b6:dd:ca:be:1e:71:0e:d5:a2:e6:1e:5e:a8:d3:db:
                    db:48:35:4e:08:51:fd:70:5b:19:7f:65:f4:35:95:
                    ee:f8:0b:a2:43:1c:bd:36:df:fa:5a:5e:53:ed:d0:
                    bc:4f:5c:ac:d5:25:37:30:47:0a:07:5d:40:2f:04:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EA:63:38:93:D5:BC:54:C3:59:21:C8:53:99:AE:75:56:CD:2D:82
            X509v3 Authority Key Identifier:
                keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1f:71:6b:ea:f7:85:a9:c8:b0:1e:87:7f:68:e8:2d:18:cd:
         c9:1b:3a:08:83:73:89:4a:ba:b8:c7:c1:f0:d5:a9:18:2b:07:
         37:eb:f3:68:cc:e8:1a:d4:df:d7:70:20:be:6b:41:91:ab:1e:
         e3:8e:65:b7:6e:2b:cd:37:71:74:a3:36:72:62:e5:a3:34:90:
         a8:24:05:dd:c8:32:3e:c1:37:ae:40:87:a7:02:6a:f1:de:92:
         2f:a2:e6:29:00:ad:c1:fd:57:03:db:db:c2:6e:d2:cb:3d:9b:
         d0:6f:ac:e5:93:6f:93:73:d3:79:3f:1d:ee:68:ba:40:ea:8e:
         36:51:ac:0b:08:a7:cf:ef:d3:47:91:51:9d:68:b4:27:71:1d:
         20:db:a0:d5:d2:59:30:76:b3:c2:44:7e:ff:7c:89:b3:33:7e:
         67:01:2f:ed:ee:7f:da:32:44:d2:dc:bc:33:3c:21:81:f3:64:
         3e:50:b2:07:a5:94:10:4f:ad:c1:ef:09:9f:cd:e4:fb:8b:14:
         e4:5d:3b:8c:44:82:b7:da:45:ab:57:37:f6:f1:94:95:b6:1f:
         b1:cb:2f:04:12:85:f8:01:b1:55:57:26:68:b3:a2:22:e8:69:
         a1:f8:e3:0b:bb:db:a6:8f:4b:b8:97:f6:a6:d9:65:ab:26:98:
         66:46:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:29 2025 by rpki-client