Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          0NabVXB7w9Rycqu3Dyx8kM/rSkTOqb1siY/YufWRAjE=
Subject key identifier:   91:2B:C8:4E:3B:4A:43:1E:4B:C1:77:05:A3:75:5D:42:50:14:AE:F0
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       0197D66275A944647C1C82C32DCEB35F581A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          3B
Signing time:             Fri 04 Jul 2025 17:01:06 +0000
Manifest this update:     Fri 04 Jul 2025 17:01:06 +0000
Manifest next update:     Sat 05 Jul 2025 17:01:06 +0000
Files and hashes:         1: 8h3pv0a91kH2-o2C39d5WQpx7to.roa (hash: fKts1ckJPbwc+fkpahnzOZr8FcFxDtnjhN/I5DI8A/Q=)
                          2: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: 64lhoVM8LxN5h+UtFGFC7eELx5LWA3ZMp7z/0sy0MRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d6:62:75:a9:44:64:7c:1c:82:c3:2d:ce:b3:5f:58:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Jul  4 17:01:06 2025 GMT
            Not After : Jul  5 17:01:06 2025 GMT
        Subject: CN=912bc84e3b4a431e4bc17705a3755d425014aef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:43:f8:d2:78:11:5d:ca:bf:e6:5d:b4:b9:
                    64:07:a7:9e:0a:33:cf:71:ee:38:9a:03:db:ff:4b:
                    35:7f:44:b9:81:69:ee:28:33:b3:97:3e:f6:fd:fa:
                    a3:52:8a:97:ce:a6:e2:bc:c6:99:64:47:7d:39:d9:
                    45:fe:62:b4:c8:7b:e9:15:f1:97:f2:ff:b0:c9:5e:
                    f5:80:f0:9a:d8:8a:da:8e:ba:f5:c6:ee:87:49:a5:
                    fe:13:b3:d2:7c:4f:e6:a1:ff:63:cb:56:17:7f:9a:
                    c2:a5:98:15:bf:15:78:69:17:83:17:3b:eb:f2:ae:
                    a8:90:cb:a2:a0:61:35:cc:0a:71:4a:d2:c1:d6:e2:
                    2d:07:ec:18:df:98:90:2e:d8:00:76:bc:22:03:6c:
                    90:a8:9d:4e:77:47:84:f9:cc:d9:18:80:44:fc:4d:
                    b2:bf:ad:56:46:a5:aa:be:9d:00:bb:cd:e9:da:9b:
                    6b:d7:e3:7c:fa:07:f7:f6:4c:dc:6e:18:af:b1:c0:
                    85:ea:e4:be:de:b9:49:56:29:37:b6:03:03:eb:65:
                    26:c3:7c:8c:a2:b2:10:a0:0f:c7:0f:c8:a0:ab:a9:
                    a1:98:41:f1:2b:dd:04:26:5e:08:3f:65:ef:15:46:
                    16:09:84:68:ec:86:47:e4:f5:a9:b2:0c:d4:db:c7:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2B:C8:4E:3B:4A:43:1E:4B:C1:77:05:A3:75:5D:42:50:14:AE:F0
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:76:bd:c9:f9:6b:88:d8:3d:85:ba:34:fe:66:46:a9:f6:53:
         a3:60:fd:fe:81:a4:c7:ba:82:ee:8d:8b:a7:c7:81:9f:f2:cf:
         fa:81:42:d1:50:ae:fa:a4:66:32:7e:4a:d7:86:5b:ab:fd:8b:
         e9:39:f0:73:4d:a7:b6:8a:6b:93:70:cb:c5:7a:bc:70:a6:60:
         e0:bb:8d:22:06:60:d1:49:37:a1:47:43:c0:44:d8:ea:65:be:
         9a:f1:7a:20:0e:d8:dd:79:ee:d9:86:db:85:76:cd:0a:19:be:
         f4:e5:f1:06:a8:6e:3a:fc:c1:f3:c2:a5:f1:da:5b:5f:c8:db:
         3f:2f:70:44:c1:c1:26:44:3e:e8:3d:03:24:ac:4b:84:8d:f9:
         9d:38:9f:5b:c3:7f:40:ca:f4:35:a6:67:15:ac:cb:43:22:25:
         42:3b:dc:10:a2:73:89:50:0f:d0:d6:0c:e8:c2:65:7b:59:56:
         f1:16:5a:c1:21:2d:42:fc:0d:94:4e:e1:71:54:48:80:b3:86:
         13:f9:8d:1f:40:6f:06:91:d1:72:a6:50:20:c9:2b:5a:36:48:
         2c:6e:e7:11:69:4e:98:6d:2d:52:31:fe:4b:b4:a8:da:db:e4:
         13:c3:b4:fc:64:c3:ff:dd:88:ab:09:95:12:be:4b:ee:cd:a7:
         2e:d8:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:49:31 2025 by rpki-client