Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File:                     jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier:          EOY0F6k2IemsKaSmUuCy8Mfgzj06OFpj6Cq/cWy58AY=
Subject key identifier:   31:DA:52:39:55:C6:CD:65:CA:CD:F2:93:6D:26:8F:3E:8A:1D:64:68
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer:       /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial:       019931C83B85E846D924293B4A96E8A36177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number:          1498
Signing time:             Wed 10 Sep 2025 04:00:30 +0000
Manifest this update:     Wed 10 Sep 2025 04:00:30 +0000
Manifest next update:     Thu 11 Sep 2025 04:00:30 +0000
Files and hashes:         1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=)
                          2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: nYySADp4ftvVYKYe9ChGVs73pPm8V9T3S2jXbXTIUw8=)
                          3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
                          4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:c8:3b:85:e8:46:d9:24:29:3b:4a:96:e8:a3:61:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
        Validity
            Not Before: Sep 10 04:00:30 2025 GMT
            Not After : Sep 11 04:00:30 2025 GMT
        Subject: CN=31da523955c6cd65cacdf2936d268f3e8a1d6468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:5c:7a:20:99:ee:96:eb:57:4f:b9:01:f3:
                    cf:1b:98:5f:0d:19:06:5c:82:08:a6:0a:f2:8f:2c:
                    7d:3d:6a:3d:46:4b:ed:b0:3d:24:12:ba:5e:01:0e:
                    0c:76:38:cc:4d:44:f0:ca:0b:b4:5f:1a:ce:48:35:
                    2f:7a:71:44:6a:81:00:7d:f9:39:6a:47:30:bf:0f:
                    cd:49:13:39:52:f4:bf:98:72:ce:ee:d6:05:2f:dc:
                    e8:7e:e9:ba:39:48:a5:10:39:36:36:88:5c:77:fa:
                    8b:73:c5:6f:fb:e4:91:ae:55:2f:69:73:89:65:03:
                    d0:af:2b:b7:49:59:da:7f:9f:61:b5:a8:66:fe:0b:
                    43:6e:90:07:2b:3e:e0:5a:26:4d:88:40:21:f1:fd:
                    7e:e6:78:62:6f:eb:54:8b:14:8a:5e:e4:6d:69:1b:
                    e1:9c:f5:0b:37:49:68:a7:33:fb:b3:bf:3d:4c:fc:
                    39:24:1d:86:34:0e:56:7b:16:eb:69:5f:64:40:90:
                    83:44:67:c4:e8:95:af:82:9b:2d:08:02:73:07:82:
                    7b:0f:60:92:cd:7d:e3:e7:bd:38:e5:f4:cc:94:bc:
                    63:12:13:ce:18:df:21:7c:5f:f3:7f:9a:bc:c2:3c:
                    e2:d3:7f:cd:9b:fb:df:3b:6b:46:bb:d2:29:e4:2d:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DA:52:39:55:C6:CD:65:CA:CD:F2:93:6D:26:8F:3E:8A:1D:64:68
            X509v3 Authority Key Identifier:
                keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:48:7f:3f:f9:53:a1:ab:76:4e:5a:30:53:b9:2d:54:d9:05:
         ed:8e:b7:12:15:a4:99:f9:99:0d:0f:cd:a2:d7:83:9c:57:de:
         38:29:6e:46:11:93:98:3a:bd:19:ad:c5:89:34:26:f7:83:2c:
         0d:26:dd:fb:5d:63:2c:30:05:3d:6c:00:16:da:65:13:8d:a7:
         1e:6f:df:90:96:a6:f7:3a:9f:d6:49:c3:b8:2a:c9:bf:c6:68:
         79:03:44:ef:02:61:48:d1:c9:a4:b4:21:71:15:23:41:0c:df:
         8c:c4:2e:ff:e4:b2:ca:d3:b7:0f:a9:9e:55:b6:fd:b6:bd:61:
         44:8a:23:38:27:95:33:1a:03:25:46:dc:db:d0:51:09:61:c9:
         04:d7:08:50:1b:38:21:1d:44:60:41:09:7e:74:0c:86:5d:7d:
         86:15:e9:bc:20:ac:6a:2c:19:07:da:09:9b:7d:00:f5:78:15:
         23:34:51:c0:ba:bd:6b:5c:07:14:64:9f:05:05:6d:62:10:5d:
         e0:47:1b:13:82:12:f2:8a:c5:3a:b6:72:31:13:32:63:1c:e5:
         a5:b7:95:3b:ce:22:a6:23:48:72:53:ff:f9:39:08:4b:6b:97:
         0b:45:27:67:c7:00:87:2e:14:79:93:c6:32:10:7a:aa:f2:dc:
         6d:c1:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:24:42 2025 by rpki-client