Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          YmkxQI2AqW//mW8SnRCa9BX1mSjWZ5Pwkb24LIlXosk=
Subject key identifier:   34:74:AD:50:B3:DC:24:1F:CF:3F:23:30:09:AE:77:34:7B:F3:61:A1
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       0199350037937863BE94FFC3AA4CE8A551D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0D5C
Signing time:             Wed 10 Sep 2025 19:00:30 +0000
Manifest this update:     Wed 10 Sep 2025 19:00:30 +0000
Manifest next update:     Thu 11 Sep 2025 19:00:30 +0000
Files and hashes:         1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: E6S6ypKOtRPK8TF+IUJLTrM8eIs8YU0fw1VHNB+p0xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:00:37:93:78:63:be:94:ff:c3:aa:4c:e8:a5:51:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: Sep 10 19:00:30 2025 GMT
            Not After : Sep 11 19:00:30 2025 GMT
        Subject: CN=3474ad50b3dc241fcf3f233009ae77347bf361a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:ed:b5:44:59:a5:e1:33:b9:ea:95:3e:a5:
                    cf:37:b0:20:91:47:21:a3:94:a6:cb:4e:ca:2a:13:
                    e8:78:f9:6e:ad:1d:65:f0:aa:c3:d5:c2:ce:4f:0c:
                    3d:92:15:a6:fe:a8:94:35:61:31:89:2e:ad:3b:0b:
                    fb:5f:fa:a9:d5:be:4e:8a:14:40:4a:f7:48:39:72:
                    d5:d5:86:35:92:fa:ed:56:6d:3e:33:e5:10:a0:ef:
                    48:e9:1a:f1:22:ce:b9:aa:c2:2c:95:09:de:54:29:
                    d9:46:e0:64:4c:6c:23:0e:f5:75:c1:ec:f9:0e:cf:
                    86:58:ba:50:72:07:81:bc:69:a0:b6:84:7b:4c:be:
                    c0:bc:60:7e:8e:1a:41:35:ed:54:bc:cd:fd:c9:77:
                    cc:3f:25:c4:2c:0c:64:b0:32:9b:21:eb:03:41:59:
                    c6:b0:7c:02:99:16:e7:90:79:87:b2:cb:f9:65:69:
                    cf:e9:6a:1c:88:98:b7:da:a7:fc:3c:fd:74:d2:6e:
                    d6:39:0d:1a:4a:b2:22:c4:97:49:9a:bc:2f:b8:98:
                    4f:50:2b:b5:91:ba:a2:cb:d9:71:d0:43:27:99:b0:
                    39:9c:6c:b7:33:8c:f2:f5:88:04:f4:bb:7a:1e:2c:
                    4a:20:e9:34:90:9d:b7:ff:ab:23:13:4c:cc:0f:a1:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:AD:50:B3:DC:24:1F:CF:3F:23:30:09:AE:77:34:7B:F3:61:A1
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:8a:88:c2:0d:ad:25:24:00:b8:23:10:a8:81:8c:a0:b8:
         46:40:2f:43:0e:de:62:87:30:69:3d:eb:54:4e:4c:35:57:14:
         b7:b4:d0:f8:94:10:92:4e:9d:d1:31:c1:63:ad:ca:64:6f:12:
         68:21:36:42:b7:8c:d2:26:e7:27:62:3d:20:69:5b:f1:4e:02:
         f0:ca:b2:57:35:c8:98:89:e7:b8:16:bb:04:97:cc:e7:d2:78:
         9b:e0:e8:fe:ae:95:eb:19:93:4f:d5:72:ba:45:d6:77:16:a4:
         09:26:98:0d:fd:1b:32:ea:03:79:94:64:d2:b1:39:0c:c8:a6:
         a8:97:9a:a3:50:e6:83:e2:c2:de:87:d5:8c:8c:49:4f:01:3d:
         a4:61:19:97:8a:35:2a:49:e0:ba:17:35:eb:24:42:fb:48:b7:
         b5:50:25:9c:f8:00:e0:75:14:6b:c1:04:01:f5:d8:26:2f:97:
         db:c5:45:f4:ff:3e:33:5f:46:a8:04:5c:a1:d6:43:00:bd:f9:
         f2:40:a6:08:4e:18:74:70:16:f1:24:9f:81:c9:d0:8b:b8:1a:
         d6:52:3a:c6:35:36:47:6a:3c:dd:0e:e4:6f:77:bd:f2:17:6f:
         cf:28:74:47:5a:db:95:33:02:c6:1e:2d:3f:d5:03:cb:f5:24:
         f7:d0:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:27:11 2025 by rpki-client