Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          3MXWTcAzB59uFN3Rekr72tmOwhGPydYPh+TjSuj198E=
Subject key identifier:   C1:EF:8D:08:59:89:29:A4:DD:DB:79:12:AF:54:C8:57:98:01:AA:17
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       01983E3D169AEF97C089B162386AB5C43867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          0EB8
Signing time:             Thu 24 Jul 2025 21:00:47 +0000
Manifest this update:     Thu 24 Jul 2025 21:00:47 +0000
Manifest next update:     Fri 25 Jul 2025 21:00:47 +0000
Files and hashes:         1: 07kw2MzDV5dpbfYC0MA4AILk1XE.roa (hash: tg8LJDbeLYQBkgtHitpgNGT/W91ZoJCC9459dV5/7ek=)
                          2: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
                          3: XyMxVfTmZ9FOajmxjytII90XihY.roa (hash: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=)
                          4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: OTegGBDvl4RbSGmmE6pMYDTO34/KZ0WK8oGOOxQ3t00=)
                          5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
                          6: yKlkk126qceORNNApzws5uIc93s.roa (hash: mKSYxXo5NqSatA3b3IazY2+Vo1oI5zbJ9J8Ptl/baeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:3d:16:9a:ef:97:c0:89:b1:62:38:6a:b5:c4:38:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Jul 24 21:00:47 2025 GMT
            Not After : Jul 25 21:00:47 2025 GMT
        Subject: CN=c1ef8d08598929a4dddb7912af54c8579801aa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:cd:53:b3:f1:10:f1:f6:7c:c5:e7:85:c3:
                    35:24:9f:29:53:ce:a4:01:87:dd:45:68:8b:19:ce:
                    29:71:32:45:64:03:fd:24:7f:17:ea:bc:36:ae:54:
                    92:7e:e1:7f:37:22:dc:70:e0:f1:5d:1a:ee:fb:2a:
                    a2:fa:09:dd:f0:87:f0:b2:71:1f:71:82:d5:00:38:
                    db:9a:ce:e9:9f:3a:7c:ea:f8:90:c6:96:47:ec:ae:
                    f4:1f:ee:7a:25:c2:b2:a2:4a:68:ce:f0:48:6c:5c:
                    ac:97:13:27:ae:15:08:1d:8c:04:b9:e3:cc:14:36:
                    26:dd:68:58:de:fc:4f:91:ed:bc:cd:69:ca:90:40:
                    5d:13:94:70:da:1e:12:77:a3:36:92:ed:87:cb:11:
                    79:bb:69:30:3c:cc:7a:d4:20:45:8f:b9:da:03:37:
                    45:51:8e:19:95:56:98:a4:99:86:85:a9:ce:3c:83:
                    0b:db:7b:3f:b2:a6:7c:00:d8:e8:84:ec:7f:9f:78:
                    d0:4f:a6:00:4d:1a:7c:e8:2d:69:dd:e8:fc:92:a3:
                    d0:55:8f:92:fe:ea:46:c3:f1:02:b9:db:e4:dd:1f:
                    04:90:82:84:bf:8d:32:2f:7d:0c:f8:41:1c:19:c6:
                    7a:64:d2:aa:63:12:e5:35:42:7b:1c:d8:f9:8a:a6:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:8D:08:59:89:29:A4:DD:DB:79:12:AF:54:C8:57:98:01:AA:17
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:89:92:97:7f:2d:0a:fd:4d:19:4c:37:28:42:13:a8:b3:a7:
         0f:e4:c9:c8:b1:86:77:b4:1e:16:cb:d5:35:60:88:75:73:b5:
         c2:df:ce:8a:35:2b:ba:4a:9b:5d:8e:df:db:cc:4f:27:e7:11:
         54:07:94:b0:79:a3:34:5c:1a:4e:9b:cb:ea:1b:fd:14:48:f7:
         15:90:5b:10:10:00:46:43:91:4c:1c:e6:be:51:f5:34:c3:b2:
         71:bb:38:97:24:99:b5:c6:b6:3d:13:d3:55:ef:db:ae:92:53:
         b7:20:25:36:16:e7:21:33:fd:36:f4:33:b6:64:2d:29:ce:dd:
         a3:e3:3d:b2:16:f6:15:33:1c:47:8e:99:e5:20:8b:58:72:34:
         cf:39:7c:e5:b3:7a:e5:dc:1d:c5:70:3c:b6:f8:ec:1d:7d:b1:
         b8:64:ba:9b:23:a4:22:3a:2f:84:53:66:26:40:b0:83:90:53:
         c6:41:23:6e:89:00:1e:18:29:74:5e:44:8a:66:be:33:1e:0f:
         c5:d6:86:01:dc:77:67:46:9a:71:66:b9:0b:c8:39:ba:15:0b:
         1d:d0:a9:3c:1c:aa:cf:10:55:33:7b:b3:ae:45:a9:35:e5:bb:
         92:5d:3c:61:cd:0b:8e:57:af:ee:a0:e8:3d:72:73:90:36:bb:
         d4:b4:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:41 2025 by rpki-client