Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          5zaUW9WmpPwhYcqf2B68ztMUAH6D99v90U3PlqRTAp0=
Subject key identifier:   C9:18:CF:8A:95:3E:B2:E3:40:48:ED:D9:D5:28:A4:2C:27:E3:B2:40
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       0198473FC19071F515E9B539E4A7F0E0C480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          0622
Signing time:             Sat 26 Jul 2025 15:00:17 +0000
Manifest this update:     Sat 26 Jul 2025 15:00:17 +0000
Manifest next update:     Sun 27 Jul 2025 15:00:17 +0000
Files and hashes:         1: WOkyiKZXyZb_JE15v4JPZZ7_uas.roa (hash: uCxh+/x66loEAoXJHeu6h1m3ZKFFNdiPZwnHjwWElmQ=)
                          2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: FtyjMivSaRBOFPr5P7669kkeUknWh6iTuhC8zhf8NqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:3f:c1:90:71:f5:15:e9:b5:39:e4:a7:f0:e0:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Jul 26 15:00:17 2025 GMT
            Not After : Jul 27 15:00:17 2025 GMT
        Subject: CN=c918cf8a953eb2e34048edd9d528a42c27e3b240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:95:af:69:74:2a:9f:df:a6:c7:fc:5b:ca:87:
                    77:0c:0a:8c:83:ea:6e:df:ce:c6:1b:8b:f2:78:2b:
                    7b:9c:82:14:c1:02:2d:12:c1:02:00:f7:f6:91:61:
                    6d:3b:4c:9d:98:e9:f9:50:4c:b1:a2:a9:ab:85:e6:
                    04:8b:b7:35:dd:38:26:06:1f:f3:ca:54:5d:5b:d2:
                    8d:57:df:d2:7c:5d:2c:14:0f:99:e4:29:97:3a:44:
                    29:64:dd:36:68:24:f3:fb:d0:fe:cb:b3:9a:06:8d:
                    c0:8b:3c:3e:1e:9f:00:9e:8c:f8:ff:e9:f5:76:67:
                    a2:6d:57:b8:5f:cd:e1:14:32:e9:74:2e:7a:63:c4:
                    99:72:b9:4c:4c:8e:79:be:c1:a5:45:e0:84:98:d0:
                    54:68:2b:9d:e9:e0:c5:c3:e2:33:38:9c:0e:af:4e:
                    60:ae:e7:a5:b9:bc:93:c2:1f:53:07:d7:b6:49:78:
                    e6:03:ad:18:d6:05:f5:eb:39:75:ea:64:bb:26:7e:
                    21:90:87:c3:83:90:5d:cd:a8:b4:92:73:ae:f3:c1:
                    db:0a:e4:e3:b6:c8:ef:25:b6:29:53:49:43:1a:ca:
                    5f:1e:0a:5e:a0:05:e1:db:4b:14:63:5d:e8:1e:11:
                    37:c5:c0:90:cd:47:f1:34:e5:77:04:cc:79:83:14:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:18:CF:8A:95:3E:B2:E3:40:48:ED:D9:D5:28:A4:2C:27:E3:B2:40
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0e:ee:19:84:ba:57:96:b3:db:4b:28:9f:0c:b3:f9:b5:58:
         ec:de:1d:f8:a3:68:30:38:09:f4:82:65:ed:1c:25:4b:b0:be:
         a3:ec:ba:9e:48:7b:86:27:03:30:d8:81:3b:94:59:5b:91:41:
         9f:82:f7:ef:3f:75:68:55:7a:4e:d1:d1:ae:2e:a9:82:cb:c2:
         fa:10:fa:12:a6:c0:4b:b6:bb:6c:75:b1:97:8a:cf:5d:6f:46:
         79:16:12:ab:9a:b1:8a:08:99:55:e9:3f:09:7b:4a:98:03:76:
         db:b4:ae:2f:2e:63:3b:bc:3c:fc:89:55:66:d6:b9:19:f1:87:
         c0:74:78:a4:6f:2a:85:b7:51:4d:76:2a:bd:88:1d:c1:50:a7:
         46:f0:ca:8e:2f:4e:0b:aa:3a:d3:c4:1e:cd:53:68:05:79:5f:
         81:75:1f:a8:2c:87:91:41:58:08:a1:20:43:26:ec:27:05:1d:
         79:34:15:78:8c:07:10:14:d9:38:00:78:96:74:82:fb:14:7f:
         7f:4b:19:a0:c4:ec:31:9a:ac:91:e8:51:42:61:f2:9d:8e:1c:
         0e:35:37:41:c0:ce:06:b8:7c:eb:3d:9a:41:a1:db:37:39:70:
         0b:68:e8:5e:db:71:3a:22:ba:65:42:96:77:f2:06:48:e5:af:
         f2:82:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:40 2025 by rpki-client