Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          D1SPZxrP6Stk4ENHmE8W7ECz8xbnvrtMRxNRFy36H7Y=
Subject key identifier:   1D:91:27:EC:D7:C8:76:39:95:3B:5A:8C:53:18:82:4E:C1:BD:B0:90
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       019853B1CC023556FD9D7285A709206CA4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          1207
Signing time:             Tue 29 Jul 2025 01:00:17 +0000
Manifest this update:     Tue 29 Jul 2025 01:00:17 +0000
Manifest next update:     Wed 30 Jul 2025 01:00:17 +0000
Files and hashes:         1: NDP41gN8CNlECLeeTXiB3irVa-U.roa (hash: NHPnUFyVxDx6ULqS5NRDRG6OIw5kEx/T23RBy4+HG3M=)
                          2: js2bBD_I5yJI3Ud9Hr2ey1HFBOk.roa (hash: xsXDDwFas5f9a39GX28p7wV/dlDbG2nAM+0coXG2hrE=)
                          3: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: j2Bcyau4lhWOBmBxzBT/3PkrL1mkgazU1bRF54hMRfw=)
                          4: praewBGKObVyHJrk-EW3SR6etDM.roa (hash: SH0U3WS8ZCn7PM3WLsz5WjDkQUu5ZhLAkIQAfKgw1ew=)
                          5: uxTu2Af7G_ZNcFKBsHAS_BIRmZs.roa (hash: OAOgfI+ToS2uVsVUxA6LbD290GEB1RA6ap9BGvXIi7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:b1:cc:02:35:56:fd:9d:72:85:a7:09:20:6c:a4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Jul 29 01:00:17 2025 GMT
            Not After : Jul 30 01:00:17 2025 GMT
        Subject: CN=1d9127ecd7c87639953b5a8c5318824ec1bdb090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:c7:7d:0c:6a:94:b4:c6:d6:78:77:fd:89:
                    0e:f3:c6:99:2e:b2:fa:3e:2f:ba:fa:1b:ed:96:f4:
                    53:4b:f8:1f:5a:d9:8b:a5:6a:32:ef:db:36:9c:ce:
                    67:4c:fc:00:4b:ea:b5:98:c1:7a:d7:72:ac:bb:c3:
                    cb:cf:6c:dc:4d:c9:de:22:d2:4b:58:0a:00:69:a7:
                    d6:c0:68:c9:a1:62:a6:48:ae:c3:18:a3:2f:50:6a:
                    3b:f6:3b:f7:c6:16:8f:6c:79:f7:ed:90:eb:09:62:
                    84:be:df:c1:b9:2a:fd:5c:f1:8b:21:dc:ad:a8:29:
                    f2:4f:b2:bf:a5:08:ad:1e:53:af:3c:8b:1f:5b:f6:
                    04:a6:71:57:15:ad:fc:ca:68:09:87:34:24:b8:23:
                    8c:0d:f0:36:47:13:48:94:d1:80:89:a9:6e:05:9c:
                    b1:70:d7:3f:0d:d6:72:1d:67:25:49:b9:0b:f4:d4:
                    00:7e:12:60:3e:f8:f3:7d:4d:3d:af:83:6f:a5:85:
                    f2:ce:fc:6a:87:26:6a:47:81:0a:32:02:dc:ba:c2:
                    e8:65:4f:2b:28:ab:96:20:eb:49:74:11:29:15:d2:
                    c5:5c:40:fb:bb:c5:65:58:22:d0:6c:6d:d7:3d:6b:
                    e0:49:75:08:c8:db:8e:d1:82:07:09:98:e5:0c:fa:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:27:EC:D7:C8:76:39:95:3B:5A:8C:53:18:82:4E:C1:BD:B0:90
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:41:08:3b:c0:e2:a9:26:64:b8:10:c1:70:de:99:17:90:
         84:54:2a:ca:58:47:79:de:6d:a4:4c:47:ea:28:8b:df:f1:7f:
         d6:e4:3f:fe:c9:89:45:c1:17:e1:3e:d9:c4:87:53:d9:64:ae:
         66:57:63:de:25:61:f1:27:66:03:af:95:bb:e9:25:9c:48:57:
         d9:98:63:91:a4:5d:01:fb:36:d7:d6:69:c5:74:c3:32:41:c2:
         ff:c4:a5:1e:e0:a8:93:1b:b4:9c:04:41:15:82:45:31:da:75:
         7b:3c:5f:90:24:0b:8b:b4:28:6a:20:b2:40:74:5f:b6:6e:0c:
         82:35:08:9a:f1:6a:3a:5c:69:08:ad:11:47:47:e7:8c:1d:4b:
         c0:f8:6e:8b:5a:56:87:6d:92:35:58:83:f1:db:3c:d6:6a:88:
         bd:42:88:f7:cc:7c:20:de:9e:eb:28:dc:33:79:4f:18:e3:09:
         ad:79:85:6b:4e:23:16:56:e9:8f:fd:0b:29:80:13:0d:1c:c0:
         91:4e:5e:ce:4b:a3:65:72:84:45:93:d6:c9:e6:87:96:c9:6d:
         40:63:9c:2a:ac:70:42:3d:d6:4e:7c:f4:60:1a:f3:41:85:60:
         05:62:6b:f8:6a:95:bf:0e:f3:83:30:ef:b0:00:c0:d8:40:7d:
         7c:f4:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:50 2025 by rpki-client