Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          vnCKXvjCF3QkY9crX0yx4U/L9X2hkEHIL/NvRnpvn9U=
Subject key identifier:   72:B2:72:C1:C6:53:44:90:5F:8E:33:AE:49:DD:FE:63:41:55:B7:DD
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       0198C9ED7E7C7CA912BC110858469E60F864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          1644
Signing time:             Thu 21 Aug 2025 00:00:41 +0000
Manifest this update:     Thu 21 Aug 2025 00:00:41 +0000
Manifest next update:     Fri 22 Aug 2025 00:00:41 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: LvCVfKcj1RguO/gB9KvDJFLvDHrxkdFerR8kkpzGy8A=)
                          2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:ed:7e:7c:7c:a9:12:bc:11:08:58:46:9e:60:f8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: Aug 21 00:00:41 2025 GMT
            Not After : Aug 22 00:00:41 2025 GMT
        Subject: CN=72b272c1c65344905f8e33ae49ddfe634155b7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:0f:c0:d7:36:34:31:91:8e:a7:9e:19:74:
                    3e:80:47:70:25:db:6e:29:90:af:d9:e3:bd:86:f5:
                    1c:b4:50:0b:62:13:bb:da:4d:06:0a:91:6b:46:98:
                    00:17:9f:ba:30:78:55:58:7d:cb:ac:fc:45:dc:b2:
                    71:d2:00:20:5b:18:05:83:5e:5b:ea:cc:d6:2d:f8:
                    4a:11:41:43:e9:b1:7e:03:91:d0:35:20:9a:52:ba:
                    9e:4b:22:1a:06:4c:7a:27:6a:c6:23:ea:94:71:61:
                    db:7f:e5:77:1d:5b:b1:ac:c8:fa:8d:11:c2:03:40:
                    0c:db:0d:db:a7:e7:dc:00:47:37:ae:f6:18:3f:89:
                    ee:8c:6c:9f:29:fe:a0:2f:9b:82:94:e7:dc:4c:67:
                    d6:e4:f3:8e:6b:55:5a:d4:03:e7:65:cc:58:ea:15:
                    46:7f:d3:af:81:b5:0a:04:ca:7c:50:0c:db:f1:df:
                    9a:a8:e3:48:c1:08:e7:c6:40:4f:e9:4d:0d:a5:95:
                    64:ad:0e:7a:37:05:f8:aa:8e:60:90:d1:a9:e8:97:
                    07:10:fb:5b:87:89:24:1d:6e:d5:01:b4:02:42:64:
                    64:41:0a:31:31:e4:a2:d5:41:80:48:84:34:b5:1d:
                    27:48:ea:49:7d:e3:47:73:f5:8d:b5:07:6c:ce:1f:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:72:C1:C6:53:44:90:5F:8E:33:AE:49:DD:FE:63:41:55:B7:DD
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:28:1c:ba:78:f6:8f:16:aa:c8:0c:fc:f3:16:11:64:da:
         28:96:67:ea:7f:1e:48:48:76:99:20:31:4d:2a:41:20:42:0b:
         fa:b5:85:84:d6:1d:18:73:56:b4:3b:a2:92:53:d3:16:de:94:
         1e:84:34:c6:0c:2b:a2:30:af:5a:09:54:a7:90:8b:e4:99:87:
         48:2f:21:c5:c3:43:18:2e:47:5f:75:3b:cf:86:c4:2b:9a:77:
         ab:46:86:99:38:bc:ce:e5:4f:7e:eb:e9:06:e2:e7:17:a0:4f:
         98:7d:b1:2f:b1:16:d3:88:11:42:13:e9:28:58:1e:96:03:31:
         27:fd:26:18:93:16:e2:a8:3c:75:d5:93:bb:fe:03:40:df:eb:
         3f:14:9a:09:8b:3f:18:2e:e9:b7:a0:0a:e9:61:a3:15:60:5e:
         81:da:92:99:8e:b5:c1:25:fa:90:b9:d2:a9:0e:ef:20:da:ef:
         92:a1:77:a2:ee:1e:0a:33:18:29:33:9f:b0:55:e2:0e:17:7d:
         6a:e6:f5:79:53:3f:80:87:43:72:34:80:ca:7a:51:c0:3e:7f:
         e0:6d:91:b1:f9:a3:29:f4:a1:83:54:90:92:f8:cd:4d:fd:cf:
         9c:a8:80:40:d6:89:50:a5:48:33:e7:8a:7e:97:64:66:62:49:
         ea:c9:f2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:52:50 2025 by rpki-client