Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File:                     jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier:          vzLvtZ4gWopo65lY0GOut3asnhw5HGIJORraH21QbVg=
Subject key identifier:   09:44:58:CC:B0:FF:4E:BE:EC:E2:1E:A6:E4:96:D7:D4:85:64:6E:BA
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer:       /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial:       01984B1C8A806B5D9276306CD3304F2EF159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number:          03B3
Signing time:             Sun 27 Jul 2025 09:00:18 +0000
Manifest this update:     Sun 27 Jul 2025 09:00:18 +0000
Manifest next update:     Mon 28 Jul 2025 09:00:18 +0000
Files and hashes:         1: i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa (hash: v5GClXo0hTRItLv1LLR9D2MpJboOBKsEHK/lxMtobJ4=)
                          2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: eYkgioIJ9qGA7v7L/Ri9ZtOTdgEOVn8HgkcSWk0BGkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:1c:8a:80:6b:5d:92:76:30:6c:d3:30:4f:2e:f1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
        Validity
            Not Before: Jul 27 09:00:18 2025 GMT
            Not After : Jul 28 09:00:18 2025 GMT
        Subject: CN=094458ccb0ff4ebeece21ea6e496d7d485646eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:88:07:0e:f4:a3:c3:bf:2c:1a:25:91:72:
                    bd:ab:be:f2:b3:2a:03:05:ff:52:63:52:74:00:f7:
                    2f:26:ec:35:b9:09:69:c2:33:ce:34:46:05:a3:6c:
                    74:fb:6a:85:d5:86:d6:c8:03:2f:5a:35:cb:6a:89:
                    e5:6b:7f:3a:9a:33:77:8b:dc:4a:c5:86:92:48:77:
                    32:1d:ce:65:e8:1a:65:b8:cb:0e:ab:1d:29:1c:14:
                    e6:14:87:fc:6d:54:c6:9a:7e:b1:3f:03:f1:4a:91:
                    10:36:9f:f2:87:f7:72:c0:93:f3:9b:3a:77:bd:3e:
                    87:e6:15:ac:ff:69:1d:73:8e:97:80:c0:69:c7:3d:
                    78:54:9b:a5:a3:a0:10:56:2a:ab:db:28:cc:98:4b:
                    55:81:ce:8f:93:19:a4:af:cd:2a:c9:bf:f7:5b:7b:
                    58:32:30:59:56:42:78:d2:50:24:dc:ca:00:e6:b8:
                    4f:88:af:12:15:a0:cb:4f:c5:54:1b:13:52:d0:c1:
                    05:6c:4c:fe:d0:89:49:ee:46:4e:16:b5:3e:bb:2b:
                    81:ba:3a:82:f0:a7:af:b0:c8:ba:fa:67:1a:47:4b:
                    bd:41:a9:40:46:11:dc:24:e9:a3:c5:bb:4b:02:2a:
                    b0:0d:34:f7:46:2f:da:7a:db:44:78:fa:cc:5d:ce:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:44:58:CC:B0:FF:4E:BE:EC:E2:1E:A6:E4:96:D7:D4:85:64:6E:BA
            X509v3 Authority Key Identifier:
                keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:c4:c1:f8:5b:25:06:ae:55:48:2d:f6:8c:16:ec:a8:ed:80:
         f4:10:b3:73:e5:35:e0:3e:a6:3c:d4:6f:e7:3e:49:c8:7d:93:
         55:84:55:cf:15:f8:d3:b7:a8:cc:7f:53:18:62:07:97:ab:64:
         f6:78:c4:35:5d:7b:33:e0:fd:a5:f3:b1:c5:7e:96:f2:88:34:
         31:66:5d:0c:47:8d:11:10:0b:60:51:c8:13:91:2c:fc:00:bb:
         f6:39:c5:15:65:32:f7:18:33:32:0e:e7:4b:f3:49:43:9a:0b:
         4d:75:4f:a1:ee:41:00:4c:14:87:89:2a:77:1b:e0:86:3f:6d:
         25:c2:26:4b:75:38:9f:cd:42:2e:d0:ca:6c:c7:75:57:32:57:
         61:8b:e1:e5:0a:e4:1f:fe:83:4d:e8:8b:c3:1b:c4:48:51:29:
         2e:62:c7:67:65:14:8d:08:74:a1:b5:4b:88:2f:bf:4a:6d:ac:
         85:d4:39:ed:39:30:6c:5d:1a:70:32:88:da:8a:03:e5:95:05:
         bc:87:62:4b:f0:67:1a:4a:31:94:be:32:1f:a7:44:b3:f8:2e:
         d8:2b:c9:a1:b8:ae:cd:00:39:a3:45:53:6e:89:a3:05:b0:0c:
         08:bf:87:12:ae:0d:6a:eb:3c:2c:aa:e4:28:c8:d0:99:2b:b7:
         a9:3c:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:54:38 2025 by rpki-client