Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          7QGAt3pBSQI0CwJF2lXSPEOLpIEbQm7ikhV6u7LIPHk=
Subject key identifier:   F0:F0:93:9A:1F:67:4D:FD:D7:36:A6:86:DE:AC:A7:0B:5E:D2:A4:0D
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       01992D0FBCAED91AABC658471E3722A0BA1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          0F5F
Signing time:             Tue 09 Sep 2025 06:00:30 +0000
Manifest this update:     Tue 09 Sep 2025 06:00:30 +0000
Manifest next update:     Wed 10 Sep 2025 06:00:30 +0000
Files and hashes:         1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=)
                          2: DMHspTa-m7YS1bn5e9JmcIJBzcE.roa (hash: Tguv/ZlkRRgsKXeIni29cWwqnVhv5X7wO7u2hzkn37U=)
                          3: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=)
                          4: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: 1WVN/zjTcBzV3TqEjN+I/bZ0HiXOjz5J6ydZLzZRc90=)
                          5: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:0f:bc:ae:d9:1a:ab:c6:58:47:1e:37:22:a0:ba:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Sep  9 06:00:30 2025 GMT
            Not After : Sep 10 06:00:30 2025 GMT
        Subject: CN=f0f0939a1f674dfdd736a686deaca70b5ed2a40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:3b:a4:93:a8:42:9a:de:97:f6:fa:30:eb:
                    37:bd:4d:40:1b:8e:87:70:0e:fa:43:de:a4:40:c1:
                    ac:90:d8:5e:cb:32:2e:4d:60:8a:7d:7b:ce:f2:1b:
                    43:95:79:4f:96:f3:79:15:4a:22:14:a3:c2:85:13:
                    85:85:77:75:09:c3:fb:72:c8:76:94:3e:40:08:86:
                    f0:c9:35:45:5f:78:0c:2a:8e:62:d6:f3:83:a1:50:
                    61:7b:74:d2:0e:3a:94:15:cc:06:bf:d3:1c:d0:17:
                    de:a0:53:b9:c5:68:99:3b:40:15:a5:54:66:87:0e:
                    e0:e1:c0:bb:36:38:4a:c6:4a:29:b4:f5:9e:80:c8:
                    c8:bd:c1:3a:a4:2d:2c:10:cf:42:b4:3b:8e:7c:bc:
                    13:3f:ca:88:9a:b9:de:b0:af:32:60:ab:15:4f:a7:
                    a7:d6:48:69:5e:01:b0:cc:53:16:ba:78:45:19:de:
                    24:dc:3a:df:4b:5a:8c:4e:64:ad:7a:84:04:6f:3b:
                    3b:da:15:f7:01:f0:b6:2c:01:e1:bd:c4:23:51:a7:
                    b2:39:e6:a7:31:3c:e2:bb:7f:3d:f6:0a:a2:17:4f:
                    8a:d6:cd:4f:a0:f9:fa:30:7c:67:74:44:39:af:b0:
                    8c:64:d7:47:75:3f:e0:9b:fa:38:b5:68:f4:44:81:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:93:9A:1F:67:4D:FD:D7:36:A6:86:DE:AC:A7:0B:5E:D2:A4:0D
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:57:b1:ae:ca:21:7b:ee:2f:b0:ee:56:60:a0:e0:fd:9f:39:
         cc:2a:74:4b:ad:0a:ac:81:d8:39:f0:56:37:f1:32:b2:86:f4:
         dd:28:d8:95:c0:b4:e0:7c:bc:39:9f:80:3a:8d:ae:a6:b9:9b:
         91:68:01:b0:0e:e6:41:3e:df:1b:4f:f1:a7:d1:60:34:b0:69:
         a9:62:d9:9a:ae:36:3f:f3:89:3d:48:32:cb:39:d7:e1:15:13:
         f6:44:a7:3b:68:54:92:2f:77:74:28:fd:f5:97:85:95:40:c8:
         d9:d7:18:1b:42:5a:28:07:18:25:ad:0c:ea:3a:fb:1c:fb:fd:
         a9:da:59:70:63:65:88:97:58:45:bd:50:55:c4:33:1a:3c:c3:
         35:83:85:45:19:c3:99:0f:10:b3:e3:7d:63:40:7c:21:9f:91:
         f2:98:4a:43:8c:be:a5:6f:93:a5:31:24:8d:d4:18:3f:9b:1e:
         1f:01:ae:c5:bd:66:62:aa:18:ea:94:1e:ee:00:66:be:a9:23:
         dd:90:75:d4:15:27:96:3b:44:5c:a1:ff:a9:6d:88:b0:d6:0b:
         88:51:bd:9e:1c:f2:bb:ea:35:89:15:9e:70:77:18:04:c2:3f:
         76:fa:03:7f:68:cd:a6:f9:5b:d9:d5:5e:94:5e:4c:94:db:f2:
         5b:69:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:44 2025 by rpki-client