Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
File:                     jBhqVuqEwTxidoqdF7rhM87fEEU.mft (raw, json)
Hash identifier:          Dn9YWddA+sHn4iYB0iZg9ITCMwYTAr0fu+miP5/xdsc=
Subject key identifier:   C3:09:4B:F6:61:3F:A3:D9:1E:E9:AB:D9:E7:4A:A5:9E:FF:A6:15:5C
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Certificate issuer:       /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial:       0198439B4E368290A3E92CFFBCB2604612DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
Manifest number:          1613
Signing time:             Fri 25 Jul 2025 22:01:48 +0000
Manifest this update:     Fri 25 Jul 2025 22:01:48 +0000
Manifest next update:     Sat 26 Jul 2025 22:01:48 +0000
Files and hashes:         1: REfYg6zs4mzXkznv8BZKawAeEPY.roa (hash: fxWL8SMng2Jg9LEtF9apPtdYuyEYzVdto0OqCyAqJew=)
                          2: S2Oderrp7lYRIScX-QAUHtFKgP0.roa (hash: CJ1oiM/HycEGfncA5aOP1zkSKBg0JuVq13Asp3X8j2w=)
                          3: Us5fsFK1rDmbmMuRZc376JRXA1A.roa (hash: uMRE+27TjtGt0OGORHpHmlRoFrYZQRl3Whf6j5Y0xFM=)
                          4: YEfco2c9_b6VDtGwlUBszWvCvI0.roa (hash: 0dy3l8v/4sRsGHHGtOtE/Z/gbG5L+kAxLfCYcCqk4xc=)
                          5: jBhqVuqEwTxidoqdF7rhM87fEEU.crl (hash: FJqfDCckzwN4ov4n8WFdhm6N8RkdmH+Oqc/T7pcq+Qk=)
                          6: qNE1Oc5YdEXAaCXUki-27-49n4M.roa (hash: kONF3c4X+eIS37hIjtumNoVHLNO/2aceAl9uEWgk568=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:9b:4e:36:82:90:a3:e9:2c:ff:bc:b2:60:46:12:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
        Validity
            Not Before: Jul 25 22:01:48 2025 GMT
            Not After : Jul 26 22:01:48 2025 GMT
        Subject: CN=c3094bf6613fa3d91ee9abd9e74aa59effa6155c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:f8:65:90:60:fb:a6:6b:30:3f:b7:c7:a4:
                    76:64:4e:a4:91:e0:e8:d1:54:36:33:47:e6:13:bd:
                    e5:34:95:0c:8c:7f:3b:7c:34:9a:96:0f:09:4d:20:
                    d4:eb:6b:63:55:a2:1e:4f:1b:7e:0f:6c:44:1d:24:
                    1a:a5:a1:6a:72:ec:a8:70:b6:30:64:db:f1:fe:27:
                    d9:22:7b:ee:1b:48:ed:93:fb:9f:22:0b:43:6e:94:
                    69:26:b5:db:0c:7c:ea:6a:49:25:ce:f5:91:ac:39:
                    4b:96:4e:99:12:6e:4a:d4:97:9d:2b:15:43:a3:8f:
                    75:c3:5a:bb:aa:00:0f:84:b7:dd:cd:9f:18:16:39:
                    e6:4a:83:d3:7b:8f:2f:7f:72:f3:33:2e:b8:23:6b:
                    0a:1f:31:a5:04:a3:57:de:da:23:6e:8e:49:2e:e3:
                    f1:98:66:23:55:59:c0:eb:74:1a:fc:21:43:b3:41:
                    e6:4f:94:67:1d:59:3d:59:e0:6c:48:52:cf:fd:da:
                    7d:3d:12:01:83:20:5d:1c:6c:39:ac:7c:c0:c5:9e:
                    ea:c9:f2:36:5e:ff:3a:03:92:2f:9c:19:3b:5e:6c:
                    99:f4:11:2d:af:ca:96:cd:d3:10:6b:d6:5d:64:66:
                    d9:d8:6f:12:15:8b:1b:c7:2f:04:a9:bb:0e:dc:46:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:4B:F6:61:3F:A3:D9:1E:E9:AB:D9:E7:4A:A5:9E:FF:A6:15:5C
            X509v3 Authority Key Identifier:
                keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:e2:3d:5f:09:82:39:75:29:5d:12:20:b4:c0:49:bc:17:
         96:d6:da:f4:cf:41:0d:17:d4:31:92:0f:ac:22:31:b5:40:4c:
         65:e7:a4:9f:f3:15:e9:0d:71:ce:de:4c:45:f5:b0:4b:54:8e:
         35:53:a7:78:07:85:a9:c1:b1:48:b6:3b:1a:5e:f9:2e:d2:90:
         86:64:84:ca:10:83:d1:1d:ba:9e:25:35:ae:27:f0:70:9d:d6:
         99:28:bd:62:39:8f:06:81:c4:75:58:d8:df:7d:27:95:7a:c3:
         c5:4b:a7:07:4f:19:8f:1b:b2:4b:08:9d:59:4e:1f:25:d3:7e:
         71:6e:71:a3:c8:10:90:c4:88:3a:9f:ab:33:4a:c9:4d:2c:e9:
         bf:ff:26:9b:eb:e7:05:a7:db:be:0b:c6:ce:22:04:24:05:db:
         ec:bf:08:0a:6a:98:7a:84:6a:b0:14:52:df:10:0d:95:f2:c9:
         f7:62:07:e2:7d:2f:ec:b6:4f:6f:39:df:b5:a0:41:2c:1a:cf:
         dd:86:bb:2e:29:7e:9c:04:9a:a9:57:a5:7b:9b:1e:19:84:33:
         fa:37:0c:83:89:e9:4f:6e:d4:d0:c1:49:8e:a4:ce:67:4a:76:
         34:07:34:aa:52:3c:5a:b4:71:0e:69:bc:a0:dc:c9:c4:7f:35:
         50:4f:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:35 2025 by rpki-client