Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
File:                     jworuIE7dNeCg7Fyj9ubvF1XhF0.mft (raw, json)
Hash identifier:          g1+Xgo9Urx1JM1yXHL6xK2dXsNnNAjC+qdNONs4+n+o=
Subject key identifier:   F2:0F:87:A6:89:84:72:95:01:A1:79:5C:D7:AA:A7:80:FD:5D:2A:C2
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Certificate issuer:       /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial:       01992AB3FAB2DCA1BFD35B08EAE767C65B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
Manifest number:          04E6
Signing time:             Mon 08 Sep 2025 19:01:02 +0000
Manifest this update:     Mon 08 Sep 2025 19:01:02 +0000
Manifest next update:     Tue 09 Sep 2025 19:01:02 +0000
Files and hashes:         1: CydDVAKyohnqLi0wWXvTVMJ6qrc.roa (hash: CgTETwq/5IJ8p47GbXwZWPzz5v+JUI2QPE1EE37OngM=)
                          2: ZObyvsAzhsjT703W96HfcivH5Zg.roa (hash: WXGaHy6oTKKfybN+lNKV7S10VAPqe8014otEct9fqTo=)
                          3: bADe8xiQTt_A88q5kXJmeUt-iHk.roa (hash: u6CJ9DSqw8LvcUhQI42InBQIP+wN1G/r5EtVs1sq02o=)
                          4: jworuIE7dNeCg7Fyj9ubvF1XhF0.crl (hash: RfkfwOIz+KPYG1Glxt/rGzNJDSb5ojPNyiJFOH4OjyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2a:b3:fa:b2:dc:a1:bf:d3:5b:08:ea:e7:67:c6:5b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
        Validity
            Not Before: Sep  8 19:01:02 2025 GMT
            Not After : Sep  9 19:01:02 2025 GMT
        Subject: CN=f20f87a68984729501a1795cd7aaa780fd5d2ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:d1:60:76:a3:5d:6f:41:b3:9c:8f:1a:09:
                    1c:d5:a0:d3:56:86:e9:69:39:7d:84:37:c0:0f:71:
                    ff:d2:e7:43:e2:5f:e2:7d:34:84:8f:aa:ab:ee:cf:
                    33:48:2e:bd:ec:9a:bc:cf:29:cc:43:51:48:42:d6:
                    84:3c:31:49:ea:25:a2:c9:e6:89:fa:16:cc:f1:2c:
                    0d:f5:48:84:c4:ee:24:5e:1a:1b:53:8f:26:7d:c2:
                    64:2d:bf:23:b3:b2:e2:dc:13:e4:9e:a6:a9:e2:2a:
                    fa:6a:61:05:f4:da:ea:ba:2f:ce:fc:e1:35:77:d8:
                    b4:bf:d0:27:15:54:cb:7a:58:cb:87:59:7c:90:14:
                    83:1a:93:12:c5:e3:31:35:53:8e:d2:3f:cd:f7:b9:
                    7d:c3:57:41:bc:4a:42:7c:fb:d5:5f:ec:59:79:1a:
                    96:e8:c9:09:ef:79:c9:23:91:71:24:e7:47:13:25:
                    43:e6:78:a9:6d:9a:52:7f:14:72:e7:a3:f1:0d:37:
                    b9:78:af:5f:26:02:9c:fc:c1:ca:18:62:c5:c2:35:
                    ac:27:a7:1e:f3:8e:e2:9a:55:88:a5:47:21:42:ed:
                    31:65:91:48:d8:90:b4:d9:0f:b6:36:f4:75:28:d1:
                    18:30:06:f8:55:2d:b5:38:4c:24:fa:4d:90:86:c0:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0F:87:A6:89:84:72:95:01:A1:79:5C:D7:AA:A7:80:FD:5D:2A:C2
            X509v3 Authority Key Identifier:
                keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:39:ea:81:80:9d:0c:5b:16:6f:cb:fb:33:85:0b:9f:32:21:
         ab:80:46:52:93:dc:a3:6d:31:50:66:71:11:67:a6:e9:13:e8:
         6a:dd:4d:aa:7e:f8:bc:b9:9b:cb:c8:2c:8e:c2:71:9c:5d:e4:
         7c:41:7f:62:b0:9a:a8:ea:3e:38:c9:9f:d7:a2:8b:7f:f9:7c:
         d0:55:62:c9:64:b6:a1:75:a0:e9:c0:da:51:9d:33:e2:e5:1c:
         af:1b:8f:96:29:8c:5e:90:d9:ec:1b:b4:4b:14:b9:43:83:17:
         70:d7:60:65:ab:6e:87:df:d8:e3:6f:10:7d:0e:0a:c3:ad:2e:
         11:03:0b:62:7c:f1:68:e2:fd:6b:be:93:57:1e:2a:87:1a:6e:
         a6:06:3c:51:a4:c3:bc:4a:67:85:7b:95:53:f4:5d:d9:10:06:
         a7:33:32:59:41:45:4e:7a:db:8f:f1:91:87:79:c0:a7:b8:23:
         43:a7:ed:e8:15:73:ce:19:22:c5:44:ac:a1:bf:47:57:45:e4:
         e4:fd:f1:e7:b6:68:2e:9a:f0:a5:92:e9:f7:70:a6:8d:a7:9f:
         f1:ac:de:10:0f:59:04:77:a0:57:86:78:71:d3:07:5f:e3:f1:
         c2:74:75:54:be:a3:cc:0a:df:09:86:53:6d:94:c8:1c:ce:ce:
         35:b4:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:25:26 2025 by rpki-client