Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          t1BOdm0Vs7tPhS5MHAAZfOL8TktY+GVFVIbMHYWW+JM=
Subject key identifier:   C2:0B:B8:1F:4D:EC:0D:D3:F9:32:BB:8D:80:A9:61:8B:D2:FF:77:9E
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       0198469B1B3C3D71E3861E8877FCA38EA6E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 12:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:26 +0000
Files and hashes:         1: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (hash: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=)
                          2: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: 4scPU3Hy14K1GbiV9J/QdNwoPRkbpeQ2kS6qdTN335Y=)
                          3: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (hash: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=)
                          4: k_-rD0qGkNwGwcLu6HW3p8mmNtU.roa (hash: 2oKRAJvxuw9ZlCxWfoLf08ddChOQxfTyMJhpORXiSP8=)
                          5: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (hash: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=)
                          6: px36HXCD5Tde7rc7667drQlCUgM.roa (hash: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:1b:3c:3d:71:e3:86:1e:88:77:fc:a3:8e:a6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Jul 26 12:00:26 2025 GMT
            Not After : Jul 27 12:00:26 2025 GMT
        Subject: CN=c20bb81f4dec0dd3f932bb8d80a9618bd2ff779e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:1e:95:36:3f:a3:62:e0:3a:00:3f:4c:da:
                    5d:19:03:6c:c5:3b:2e:b3:eb:8e:db:26:3e:38:a5:
                    d4:be:54:df:eb:c9:a8:86:78:5a:c4:96:d4:c7:b7:
                    d4:45:6f:90:d8:f5:46:46:7a:5e:19:34:e7:09:c8:
                    b6:80:8d:9b:24:0e:dc:56:94:5c:eb:f1:77:fa:38:
                    a0:8c:f0:2e:9a:3c:5f:14:34:df:f6:bf:57:87:ba:
                    64:29:a7:44:1f:00:43:d2:12:ea:4f:21:e9:ba:b7:
                    be:26:f6:b2:ef:f8:f6:79:6b:e0:f4:4b:60:50:2a:
                    f4:4e:2b:68:39:23:5c:ce:41:31:e1:d2:a6:d9:c0:
                    81:fa:5d:b3:6e:fa:fa:91:aa:c3:2b:f2:7f:4f:12:
                    bd:2b:43:f3:72:cf:f2:61:0d:3a:7a:00:6f:93:76:
                    fa:6e:bd:49:77:5b:18:ec:4f:ee:52:be:4f:92:48:
                    de:68:f5:b8:3a:18:1e:a5:0c:9c:62:2b:3e:97:8b:
                    87:9f:7f:89:ab:09:9a:58:f5:68:f0:c6:70:28:fc:
                    51:3f:52:5c:0a:79:98:50:8a:02:de:3b:56:1c:2d:
                    2b:d9:ba:b4:ab:32:cb:6a:89:b6:b4:81:80:16:72:
                    44:ff:4c:bc:36:5f:39:aa:bb:2f:35:3c:59:73:f2:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0B:B8:1F:4D:EC:0D:D3:F9:32:BB:8D:80:A9:61:8B:D2:FF:77:9E
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ae:c7:94:a8:cc:cd:87:d9:06:60:ce:62:54:6b:39:38:fb:
         08:8e:ed:d1:e1:ad:06:8d:57:cd:e5:18:52:02:07:46:06:2d:
         54:7a:a6:b4:3b:f3:a7:ee:ef:9d:5c:9f:5a:fe:ef:f2:5e:5f:
         08:bb:de:6c:57:01:45:71:07:e4:ef:ff:6b:97:7b:ee:0b:81:
         b2:a1:80:c3:1a:7f:02:bc:f1:c2:1f:06:ea:6e:e5:3f:2d:07:
         30:1e:86:00:32:d3:a3:ca:83:40:4b:fe:ac:38:b7:32:9e:e6:
         75:c8:f8:aa:b3:92:ea:c8:87:70:e8:83:26:53:c3:5a:99:0a:
         93:ea:ff:56:bb:ed:67:69:17:05:17:4b:65:ca:71:ab:27:65:
         35:1e:37:c3:08:72:c4:23:2f:09:4c:b0:bc:20:b9:db:0a:17:
         34:02:14:5a:8c:61:93:be:43:54:dc:19:3e:75:95:f2:75:60:
         09:93:11:80:a4:d4:92:dc:b3:17:f3:df:9f:c9:64:cd:fa:30:
         82:1b:ae:bb:c0:74:4e:7e:92:c1:a1:ac:22:91:1b:31:fe:55:
         98:ab:c7:a5:25:79:9d:a9:56:79:1b:22:6e:35:91:04:ee:ac:
         e8:cb:71:c8:c6:e4:68:c7:22:14:1f:43:17:89:35:72:76:b7:
         da:e1:bd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:54:42 2025 by rpki-client