Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          oCmHr8g/3Xil1t1Y2V2Uz8ZA4gy0qnIVSthHlBHg8r4=
Subject key identifier:   9F:5E:91:B6:F1:76:79:C7:42:1B:1B:E0:98:69:E5:C8:F0:55:31:A9
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       019921B2884F48E14F826E0A747A6440AB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          E8
Signing time:             Sun 07 Sep 2025 01:02:52 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:52 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:52 +0000
Files and hashes:         1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: fchJEimKkPQLxyZz77YYSRyBeSARqBoHWqL5e6LVXyI=)
                          2: METktZ2idAiZeDz9hpktU55-5Jw.roa (hash: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:88:4f:48:e1:4f:82:6e:0a:74:7a:64:40:ab:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Sep  7 01:02:52 2025 GMT
            Not After : Sep  8 01:02:52 2025 GMT
        Subject: CN=9f5e91b6f17679c7421b1be09869e5c8f05531a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:63:f7:9a:aa:87:18:14:ce:0b:16:6e:d0:
                    1a:18:76:6c:43:ad:25:29:01:7b:48:41:4e:79:ce:
                    43:c8:03:29:b9:bd:d3:4f:31:77:43:a7:f8:9d:75:
                    96:a9:47:11:7f:94:d5:ad:22:87:64:c8:31:62:40:
                    75:65:ae:17:63:1b:02:df:72:19:ff:84:d9:45:4b:
                    16:ac:4d:e4:bd:a2:6f:09:60:2e:fc:9f:45:8c:51:
                    57:0c:dd:be:b8:5e:14:ce:61:4e:47:1a:cd:85:09:
                    8d:d1:d6:91:97:99:ea:b0:6b:2a:65:8b:60:8a:f5:
                    23:d6:f0:e9:97:35:81:b6:ef:2b:49:15:23:03:2c:
                    c1:8a:c4:f4:57:cf:96:de:e2:b3:d3:8c:7d:21:b6:
                    31:c7:f8:39:d4:35:cf:52:1a:83:3f:f7:4b:64:74:
                    53:47:98:3d:83:16:3a:71:aa:c3:5c:a1:29:63:91:
                    00:24:9a:c1:ea:bf:79:84:50:3e:e1:23:93:9a:49:
                    7e:09:4b:17:f0:21:29:98:6d:fb:88:04:6a:a9:3f:
                    d3:ce:2f:6d:12:97:90:20:9a:1b:46:4a:2a:ca:cd:
                    99:40:82:31:2d:e7:f7:06:bb:5a:3b:40:e7:23:b0:
                    db:31:d0:eb:6e:e5:18:96:aa:8e:6b:29:24:26:30:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5E:91:B6:F1:76:79:C7:42:1B:1B:E0:98:69:E5:C8:F0:55:31:A9
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:98:6a:86:16:32:0d:54:f1:82:b3:93:f8:8d:6c:1e:09:cb:
         b1:74:e0:2d:e8:b4:dc:33:7f:ac:6f:96:0d:ba:13:dc:17:16:
         d4:1f:90:26:dd:6d:f0:43:b7:4f:f2:6e:a4:bf:e4:0e:f2:cb:
         52:ec:cf:39:14:6b:40:d6:a4:f7:ec:f0:58:91:af:d2:ad:65:
         2e:37:24:49:d5:b6:af:e5:7e:aa:d6:5b:f9:98:db:66:8d:e6:
         c4:02:04:15:11:42:13:14:c2:8c:93:d1:b5:fb:3e:cc:c9:14:
         31:39:21:17:85:d2:6e:e0:95:0e:cf:35:fb:23:24:ec:44:a2:
         4d:cb:fb:47:a9:21:28:cc:da:1f:08:fd:bf:44:3d:d1:c1:82:
         da:ba:58:52:04:eb:a7:fd:75:fc:4d:7d:bd:a6:e8:d8:72:8c:
         97:13:e5:9a:bc:0d:c3:ef:a5:94:75:4c:93:21:92:73:f9:08:
         79:c0:00:b8:3a:f5:81:8c:dd:a3:82:93:60:cb:bc:44:a2:fd:
         90:87:f2:46:c2:ab:e0:d5:09:02:60:bc:1a:4f:f8:c3:f5:36:
         89:10:7e:96:03:76:1e:16:b9:66:8a:ff:50:af:e1:8e:39:9f:
         8a:91:9b:d0:15:3f:ff:f5:78:3e:5b:b4:10:4f:e8:e3:83:ed:
         aa:0a:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:07 2025 by rpki-client