Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File:                     rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier:          kkjmnURh3aUKiITo5qNuh5vlEk2rAD+ZKyuMUn8DNK0=
Subject key identifier:   43:03:4E:5E:66:FE:75:26:0E:73:59:66:B1:6B:61:A9:E0:34:A5:44
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer:       /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial:       0198499C4BC32EFCBEB9800CAD9CF0E9F7CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number:          0A3C
Signing time:             Sun 27 Jul 2025 02:00:36 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:36 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:36 +0000
Files and hashes:         1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
                          2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: LKINCdUJzhv+KJ+KYmb07YPTuxoLELNopeXtt3S1C9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:4b:c3:2e:fc:be:b9:80:0c:ad:9c:f0:e9:f7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
        Validity
            Not Before: Jul 27 02:00:36 2025 GMT
            Not After : Jul 28 02:00:36 2025 GMT
        Subject: CN=43034e5e66fe75260e735966b16b61a9e034a544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:dc:f2:fd:1a:42:63:31:47:06:68:97:ce:
                    2b:22:96:2d:3e:d4:75:9b:d4:2b:77:48:ee:1f:61:
                    9a:a7:83:2a:11:f6:8d:ba:37:1f:97:46:08:70:09:
                    99:94:be:a0:68:e8:59:53:6f:20:e1:75:10:c0:1c:
                    57:a5:c5:be:d3:09:18:1f:8f:dd:b9:56:6e:b0:0f:
                    38:fe:00:cc:bc:ea:a4:09:de:41:e7:1a:66:d1:e6:
                    a8:66:de:fc:b4:70:29:e1:d9:0d:ce:fb:64:ee:36:
                    f0:c5:e4:98:c1:4d:e9:77:b6:e6:4a:c8:90:09:e9:
                    ea:ee:5b:e4:c5:e5:b4:c3:ff:23:ea:9d:ab:e5:be:
                    50:e5:15:4c:59:00:ce:8d:02:52:9b:c5:08:47:c7:
                    91:e7:8d:6f:99:9f:72:10:ae:b0:ee:51:37:d9:3c:
                    f7:37:e3:bf:86:32:a1:db:e3:66:f2:3b:95:a8:cc:
                    5b:e9:28:69:75:1f:4b:f0:a0:de:68:35:a1:11:f1:
                    01:ee:d7:eb:e6:29:0c:af:5b:97:05:19:f1:3e:58:
                    c5:8b:dc:de:3d:01:d5:4d:04:e7:2d:97:b5:07:b2:
                    62:5e:0f:33:aa:ca:ad:13:c2:5c:36:62:63:1f:9e:
                    bc:9e:b9:6b:af:00:c1:1a:7e:bc:4f:03:0f:c9:56:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:4E:5E:66:FE:75:26:0E:73:59:66:B1:6B:61:A9:E0:34:A5:44
            X509v3 Authority Key Identifier:
                keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:96:c4:8a:9d:d2:7b:b6:e0:df:5c:cc:13:57:8a:85:16:62:
         f7:c1:0f:86:e3:d4:7b:05:b5:8f:8d:db:f5:e2:46:88:c1:0b:
         75:68:bc:d7:d1:a0:8b:88:69:53:a0:59:dc:d8:f0:cf:10:ad:
         e1:aa:cf:5f:c3:ee:ea:eb:e2:b6:fd:73:7e:f7:64:75:2c:43:
         60:4f:59:48:44:38:76:27:88:52:e2:b0:9c:a7:de:7c:a8:9a:
         7e:b5:63:15:39:53:92:66:bd:33:08:56:59:6f:96:d7:b0:ec:
         49:44:d8:09:ab:ed:f0:ea:bc:f3:40:cb:73:d4:02:6c:1c:03:
         f2:50:eb:0a:92:d0:1f:cd:18:09:39:e1:3e:83:fc:ca:1c:96:
         8a:f0:e9:67:da:85:4f:52:6e:04:4d:7b:79:83:91:4e:df:9c:
         4d:d9:55:bc:d4:cf:1a:de:4c:b4:c0:b0:d8:8e:fd:dd:95:26:
         40:c5:8b:ee:4c:ec:f3:41:0d:ed:89:f2:0c:27:1c:94:ae:8f:
         28:b3:63:ac:1b:95:da:cf:6b:61:68:57:1d:24:72:20:bc:ff:
         56:dc:0f:fc:64:de:67:eb:6d:a5:01:1d:a3:fc:f8:e8:46:d4:
         a6:2c:59:45:11:e4:dc:68:80:cd:69:fc:83:30:7f:c2:ff:1d:
         48:aa:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:20:32 2025 by rpki-client