Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          ZP3+TG8S/Y1SgRENypS3WxjhmgAwm/9BUqPSiqOZm8k=
Subject key identifier:   1E:C0:AB:0D:3D:B0:1A:1E:BF:D0:D0:97:BD:62:88:6C:E0:50:79:EB
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019849D2E28E707FEE88AF4976B75C450EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          06DC
Signing time:             Sun 27 Jul 2025 03:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:14 +0000
Files and hashes:         1: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: KaGDw0r377vSh52lTRypWRdNmHuvIjlMVLcwNe2NEpY=)
                          3: rDlkyigziSazpq7KkBehs1Ktw-g.roa (hash: 0blcMDi8SQKGoP7zdqimF2o0peaDeYPg+Ie2kFh43K4=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:e2:8e:70:7f:ee:88:af:49:76:b7:5c:45:0e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Jul 27 03:00:14 2025 GMT
            Not After : Jul 28 03:00:14 2025 GMT
        Subject: CN=1ec0ab0d3db01a1ebfd0d097bd62886ce05079eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:f0:02:17:f7:b9:18:84:75:58:ba:17:0c:
                    ba:97:85:82:1b:9b:69:29:b3:dc:66:fe:d3:ab:73:
                    3b:77:96:43:5b:03:e0:12:66:f9:6f:97:96:1c:24:
                    09:9e:6c:a0:06:ee:96:dd:cc:06:69:81:5a:33:a3:
                    03:f6:14:84:70:ad:6c:be:01:cb:97:2a:7d:0d:86:
                    02:77:6e:78:45:98:58:f9:2a:6b:98:66:0a:4a:49:
                    94:0c:fc:a5:33:49:3c:05:01:38:8d:aa:4c:82:aa:
                    a8:49:4d:3e:6e:b4:10:d5:a5:dd:01:8a:94:9b:4c:
                    99:b1:d8:d7:74:af:9d:d9:45:3b:55:e1:66:38:44:
                    55:3e:28:14:d3:7b:85:c5:c5:7e:03:ec:d1:97:af:
                    e5:a4:52:e3:70:8f:2e:2e:6a:0e:b9:d6:2b:07:54:
                    0d:76:a4:28:c9:2e:b0:64:de:c0:64:1a:e1:37:67:
                    e4:dd:fc:05:f2:ed:cb:99:60:66:77:67:6a:0c:08:
                    b0:62:3c:ac:a3:84:75:b0:58:a8:fa:ea:fb:1e:e4:
                    d8:f7:7d:33:d8:82:b2:84:da:df:4d:79:a3:46:cd:
                    f1:d4:0e:85:5b:04:8f:33:c6:b1:48:56:df:c2:2d:
                    df:dc:d2:49:c1:99:46:18:73:b4:b1:d5:a9:cc:d3:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C0:AB:0D:3D:B0:1A:1E:BF:D0:D0:97:BD:62:88:6C:E0:50:79:EB
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:30:ac:76:c6:3b:fc:bb:3d:25:e2:a0:54:8a:65:6a:64:
         22:e2:7f:4d:60:2f:f7:eb:4c:ec:9e:2d:54:ca:69:18:a5:94:
         66:26:20:a4:0c:f1:9b:a8:7d:8f:b0:0b:e5:b5:47:97:d8:c0:
         5c:1d:0f:b1:fc:ca:fb:c3:42:3a:cf:dc:41:ae:97:c4:31:60:
         75:73:6f:1e:f1:21:64:1a:40:ad:41:c1:c5:25:b9:36:9b:0f:
         b2:88:4d:1c:38:cd:ee:9e:cd:da:47:d5:fb:0b:af:a9:e2:68:
         9b:79:0e:37:a8:64:2e:8c:bb:76:93:f4:ce:61:9c:14:85:76:
         ad:f5:d3:55:b9:04:72:aa:b8:92:24:a6:94:72:61:58:63:4c:
         35:4d:01:06:b4:9d:12:d2:b9:35:c0:fe:35:93:cc:2c:b9:a3:
         7a:e0:13:7f:ed:95:60:99:1f:61:2e:50:bf:b6:da:7b:39:cd:
         92:0b:7d:3a:f9:bd:5e:ca:73:ec:aa:66:a4:ea:3b:a3:e6:97:
         2f:db:87:f1:e6:af:fb:7f:55:cf:9a:9e:c7:1b:06:c7:49:1b:
         1d:3b:f9:2b:af:87:43:4f:3f:19:85:46:a5:88:03:67:56:47:
         37:09:f0:19:4f:54:51:47:9e:40:8c:2f:0c:3d:43:7e:e4:9b:
         da:15:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:28 2025 by rpki-client