Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
File:                     jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json)
Hash identifier:          HVUgi8Y1t+BVQC1h6YuGeNOT+cZkKbhvbFoL+bIMeww=
Subject key identifier:   F1:D3:3B:0D:CB:21:47:67:AA:78:67:92:1C:37:4A:09:2B:C5:22:AE
Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
Certificate issuer:       /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Certificate serial:       01984DB0573C5E61E0DE938461478C4C24C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
Manifest number:          035C
Signing time:             Sun 27 Jul 2025 21:00:58 +0000
Manifest this update:     Sun 27 Jul 2025 21:00:58 +0000
Manifest next update:     Mon 28 Jul 2025 21:00:58 +0000
Files and hashes:         1: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: pgyj46nzt+va5gpZkdrx4yRLXuyS23V1PaKwZ+uISSA=)
                          2: x_n8t7M8D_Bv99KviCzCearCTfY.roa (hash: 6UUSvMuuFuiYjyRFMf2UhzrLvu7QDsz9ziOkSElPsPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:b0:57:3c:5e:61:e0:de:93:84:61:47:8c:4c:24:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
        Validity
            Not Before: Jul 27 21:00:58 2025 GMT
            Not After : Jul 28 21:00:58 2025 GMT
        Subject: CN=f1d33b0dcb214767aa7867921c374a092bc522ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:ad:3b:b2:aa:4c:03:d2:07:75:a3:55:b4:
                    a6:7a:36:a4:18:64:9c:01:8b:95:19:60:0f:9b:1e:
                    e0:71:15:3a:33:0a:14:48:41:fe:25:d2:8d:cf:f5:
                    e3:67:fe:3d:1a:d0:14:89:d6:87:1c:7d:2f:37:fe:
                    83:57:3b:8e:47:f3:f5:01:60:fa:53:36:aa:ef:50:
                    ba:dc:40:b9:12:0a:cb:84:11:6e:01:46:40:02:43:
                    42:2a:08:b5:2e:f8:79:38:24:ca:27:90:d9:29:35:
                    12:11:64:1e:bc:80:11:e7:75:28:be:28:05:dc:41:
                    30:1e:b2:a6:62:00:e8:e4:4e:55:69:a5:87:91:ad:
                    d6:90:07:55:db:e0:9c:c0:42:84:ed:76:22:f3:57:
                    28:6f:36:be:a0:39:2d:f8:b2:8f:06:56:53:d9:ff:
                    41:d7:0e:9b:f7:ad:44:a7:91:54:62:77:dd:ec:9d:
                    d9:ee:e1:2b:3a:4b:75:dd:c2:54:02:42:d1:98:2e:
                    4c:f8:7b:65:a2:9c:02:45:00:85:e2:3a:31:c8:87:
                    0e:52:66:77:49:42:e0:5f:43:e9:c8:9f:3f:95:7c:
                    cf:13:7e:45:6b:85:36:ee:78:db:cd:5f:20:d9:55:
                    30:47:31:8d:d3:44:ab:58:92:c8:44:31:1d:41:77:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:3B:0D:CB:21:47:67:AA:78:67:92:1C:37:4A:09:2B:C5:22:AE
            X509v3 Authority Key Identifier:
                keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:0a:bf:aa:ed:8c:03:6b:e8:02:3b:54:1f:dc:89:08:ea:
         16:3d:05:93:b3:12:db:be:67:b5:4e:5d:f1:b2:77:6f:72:0d:
         73:7d:4a:e3:06:71:1a:a5:45:92:15:4a:b8:52:22:43:05:64:
         bc:6d:70:4e:29:72:7f:bf:08:83:24:8e:05:b4:d8:0e:a2:3f:
         7d:b6:64:82:30:1c:d2:00:56:54:ed:df:a0:f8:bf:c7:cb:c4:
         cd:40:22:93:19:6f:63:82:fc:6c:22:c2:3d:d0:35:4a:55:cb:
         a1:b7:a1:eb:f9:c6:b3:66:57:a6:8c:da:80:83:83:c1:b5:23:
         85:04:b0:20:8e:20:46:c9:00:c0:c3:9f:f6:a7:8a:1c:7d:28:
         1a:da:5b:08:97:83:73:b7:aa:a8:f1:3f:58:67:ef:5b:a6:59:
         50:d1:dd:80:35:1e:18:c2:3e:63:5e:84:5a:cf:f1:bb:25:f4:
         7c:f9:76:05:99:2b:c7:48:c4:2b:27:02:83:2a:88:95:c1:0a:
         c3:81:76:d2:61:5a:7e:5c:d1:0f:ba:98:7f:a4:f9:aa:7b:88:
         78:b2:68:fc:f3:5a:57:5c:ff:07:c4:7d:d4:69:70:5c:bf:1b:
         0a:c5:fa:0d:df:39:8a:18:49:93:95:48:c9:f2:21:47:e6:be:
         82:bb:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:56:43 2025 by rpki-client