Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File:                     j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier:          KYfCNrwsvEiuUNRWTr1c6n0o/YhHaCHAtv7bKE6stD0=
Subject key identifier:   BD:6C:C9:89:72:BD:3D:BB:91:6B:60:B2:64:30:60:8B:30:17:46:0A
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer:       /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial:       0198413DCB57E3FD78317CA6F4A575A2CCA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number:          0FE1
Signing time:             Fri 25 Jul 2025 11:00:25 +0000
Manifest this update:     Fri 25 Jul 2025 11:00:25 +0000
Manifest next update:     Sat 26 Jul 2025 11:00:25 +0000
Files and hashes:         1: Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa (hash: 657I1jLunRMhj2vBtHhC7I7kj5ImF6yxkiyRsM9bRks=)
                          2: P8awl1-FBznnzvpNTr4DRMiIS0I.roa (hash: 7oxXLgK4HMZatOjJ+KQ+qVSvO3gc/0/goIBoaIA0uAQ=)
                          3: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: atqOjKpT7wNrIc1F+WFCIXEtmltlJ5pJ9/8H16XJoWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:3d:cb:57:e3:fd:78:31:7c:a6:f4:a5:75:a2:cc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
        Validity
            Not Before: Jul 25 11:00:25 2025 GMT
            Not After : Jul 26 11:00:25 2025 GMT
        Subject: CN=bd6cc98972bd3dbb916b60b26430608b3017460a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:51:58:0f:0e:65:3a:09:39:02:09:e7:7e:
                    c6:56:cd:a1:98:3c:5d:d1:b3:cf:61:9c:b6:25:1b:
                    d8:ea:cd:2e:1f:e8:1f:a6:50:5b:b3:61:79:11:ad:
                    e9:86:a9:6d:7d:f7:6f:41:95:95:a2:94:f5:7b:35:
                    b1:41:1f:75:f4:27:15:ec:27:67:64:b0:00:f8:10:
                    3c:66:13:8f:1c:8f:3e:a6:ec:04:28:26:c1:8a:1d:
                    bf:7f:f3:8a:db:50:72:46:ff:f9:3d:2e:67:c6:e6:
                    92:75:aa:8f:2b:b3:36:bc:54:14:05:93:1e:01:1a:
                    f3:bf:80:af:8f:2b:57:35:14:3f:2f:fa:25:dc:c9:
                    9c:0f:96:bd:6e:52:d4:f5:41:07:e0:b1:8f:bb:ce:
                    93:72:6d:ce:07:06:a5:c1:91:80:ee:5b:a2:37:c1:
                    b3:82:b7:b1:1e:e0:ff:fb:8c:16:4b:23:39:f3:3e:
                    47:1b:53:ad:60:21:0d:90:53:e7:48:5b:13:b8:69:
                    b6:f2:f1:ab:c1:5a:38:f8:3b:60:19:0e:5b:28:97:
                    2a:c7:4a:8d:64:cb:05:da:af:bc:cf:b4:e1:3c:22:
                    63:f3:20:ef:7b:c8:c0:07:fe:69:fb:f4:da:16:a8:
                    08:7b:f9:ab:62:25:36:63:44:fd:e5:d2:60:67:3a:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:C9:89:72:BD:3D:BB:91:6B:60:B2:64:30:60:8B:30:17:46:0A
            X509v3 Authority Key Identifier:
                keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:31:b3:30:65:e8:9d:6d:17:61:fc:a1:60:05:49:1a:67:e7:
         a7:81:a3:93:10:72:a1:24:d8:ea:f9:78:ba:f8:f8:9e:65:56:
         9c:cf:57:01:38:0d:c2:12:d9:3f:5c:e2:cd:8a:9b:3b:ad:4e:
         3b:8d:ef:b8:d2:63:f6:29:fb:f5:eb:49:d1:b1:38:78:de:cc:
         eb:aa:25:01:b9:6e:8a:c9:51:e2:e7:cd:a4:2b:14:44:56:44:
         88:51:0b:fe:be:b3:80:c3:94:65:a4:f6:ed:b8:96:b2:e9:56:
         73:b8:6b:46:ad:e2:2d:a7:dc:60:5e:cd:eb:04:85:06:3d:b3:
         fa:07:80:55:1f:cf:53:fa:df:db:8c:6c:fd:a8:06:fa:be:ca:
         8c:e3:ba:75:f3:53:c7:fa:e6:00:81:8a:38:c8:66:a4:51:a4:
         76:40:41:fb:12:f6:54:72:dc:2f:c9:a3:ba:2f:30:9a:a9:46:
         c9:b3:4f:b1:80:37:6f:89:cf:6f:ce:2c:f6:07:ec:1d:11:63:
         44:04:7d:56:bd:3e:81:ac:3b:4d:6f:86:cb:d3:a9:1e:22:3c:
         5a:3a:6d:9e:d1:0a:4d:8f:d4:e4:b3:fa:9c:47:1e:4b:9b:b5:
         78:b2:f4:65:13:a5:70:57:10:22:21:65:06:a8:ef:13:09:33:
         cf:b9:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:42 2025 by rpki-client