Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
File:                     jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json)
Hash identifier:          LPk9OozRVtSJE19vIFpiqgastUH5GePJbpBMWDpidK8=
Subject key identifier:   B0:33:B7:70:76:2F:3E:81:3E:6A:37:B2:24:4E:AE:94:61:2B:13:34
Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
Certificate issuer:       /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Certificate serial:       0199228CD40EC775D3CD3C0827EDB31A0CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
Manifest number:          2F
Signing time:             Sun 07 Sep 2025 05:01:18 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:18 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:18 +0000
Files and hashes:         1: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: pordkfm1mFJZ0Aa5xNRs9EK721nj/yxVLjpHbQOVOUg=)
                          2: usm9wn0ranV8cJoAdmlA0D2Pk2s.roa (hash: lnjChVLXxICPBgsN6v1LDI5Ki8JFy1bjGXMD/7hIN1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:d4:0e:c7:75:d3:cd:3c:08:27:ed:b3:1a:0c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
        Validity
            Not Before: Sep  7 05:01:18 2025 GMT
            Not After : Sep  8 05:01:18 2025 GMT
        Subject: CN=b033b770762f3e813e6a37b2244eae94612b1334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:85:44:54:5a:56:1f:dc:27:de:77:c6:dd:
                    10:00:37:a3:c2:aa:38:b6:68:3c:6f:2a:66:6e:8f:
                    2c:85:20:52:19:cd:f5:d7:bf:76:70:fc:df:4a:2b:
                    46:4a:3e:f5:ea:72:e3:e4:9f:86:e3:6e:f8:b1:55:
                    84:b7:a7:e6:56:6a:77:06:92:20:78:f2:c1:3c:8d:
                    ad:e8:c5:9b:aa:a8:b2:47:02:5a:15:8d:2f:24:eb:
                    25:35:96:8a:c7:fe:d9:72:34:64:57:5e:2c:b8:13:
                    80:12:d3:64:6b:53:4b:21:ec:12:58:82:7f:d6:54:
                    1e:6b:0f:c5:06:0d:2a:5b:4d:d1:55:04:57:cc:36:
                    dc:8e:f2:37:bb:0d:65:f3:59:0e:eb:2a:0c:56:90:
                    73:83:74:69:38:d8:b1:9c:55:44:00:e8:75:e7:24:
                    98:6e:1e:14:a3:87:b6:d6:01:46:6a:3b:61:0c:22:
                    b8:8b:b1:45:57:7b:0f:85:8f:37:bd:c5:34:2a:e3:
                    03:e9:ff:e3:0a:7b:2f:28:52:4b:d4:5f:4b:f6:d1:
                    f2:2b:ce:11:af:f6:98:4b:1e:e7:72:af:31:b1:b7:
                    28:27:e7:4e:28:d8:3a:47:22:bc:68:d2:07:68:bd:
                    e3:eb:df:05:4a:27:00:ad:d8:da:16:92:5d:82:c8:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:33:B7:70:76:2F:3E:81:3E:6A:37:B2:24:4E:AE:94:61:2B:13:34
            X509v3 Authority Key Identifier:
                keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:41:90:4c:1b:ef:a1:e3:8e:38:b3:a5:ad:00:63:75:23:
         81:eb:73:4c:ce:22:ab:83:dd:ec:16:cf:87:45:76:b0:31:06:
         6c:72:7b:20:ba:f3:a5:8a:05:32:4e:5d:95:83:df:ee:6e:45:
         08:35:0f:86:79:1c:7f:c8:40:2f:7d:5a:60:af:03:b9:d8:08:
         b8:b9:d8:1c:4a:64:03:6d:df:b1:a5:d1:6a:10:40:0d:6c:77:
         a2:a9:6a:4a:ac:a6:cf:89:8d:37:b4:f9:68:8e:f0:cd:59:fd:
         26:30:d5:d9:f3:0e:37:13:9a:ac:f8:89:f4:fa:95:85:45:fa:
         7e:b9:e4:d5:cb:d2:8f:09:72:7b:0e:62:4a:50:97:98:00:92:
         dd:85:c5:c0:e2:77:a4:cf:22:2c:dc:d5:fb:93:db:0e:dc:d7:
         ab:e6:99:d1:12:e9:b5:39:59:5b:82:78:a5:5a:43:fd:17:3b:
         a6:60:18:21:46:6e:55:67:c1:b3:6a:10:bf:b7:49:f2:ac:46:
         bc:55:36:e4:31:65:4e:d6:fa:78:e0:de:e9:b2:40:17:6f:93:
         25:3d:30:fd:10:51:b4:52:d8:07:fb:97:4a:75:97:54:da:00:
         fe:38:83:e9:09:69:ba:e5:a3:22:3f:35:67:12:98:f4:73:86:
         e0:4b:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:11 2025 by rpki-client