Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File:                     jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier:          GM+3R5bx4siGojSL8CbHy18x279YiTbNemSuiebwpIg=
Subject key identifier:   C5:9A:5D:3D:AC:01:76:EE:28:A4:C5:B4:CB:C5:69:11:5B:E6:E5:A1
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer:       /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial:       019934929CD5B8D72A936CC287FEBB1DCB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number:          0260
Signing time:             Wed 10 Sep 2025 17:00:47 +0000
Manifest this update:     Wed 10 Sep 2025 17:00:47 +0000
Manifest next update:     Thu 11 Sep 2025 17:00:47 +0000
Files and hashes:         1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=)
                          2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: raw0q7fChY6puvCr6Ai/nxlGVD46u8M8UynBvKhZKKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:92:9c:d5:b8:d7:2a:93:6c:c2:87:fe:bb:1d:cb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
        Validity
            Not Before: Sep 10 17:00:47 2025 GMT
            Not After : Sep 11 17:00:47 2025 GMT
        Subject: CN=c59a5d3dac0176ee28a4c5b4cbc569115be6e5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:d1:cc:b5:1f:79:fa:2e:96:c7:cd:d9:76:
                    08:d0:60:e9:06:c7:b5:9a:17:89:eb:98:15:f9:02:
                    27:c6:79:74:93:b3:ab:dd:a7:00:3f:ca:df:08:ee:
                    0c:1e:8d:e3:41:0a:47:bb:d1:77:da:48:a5:a7:f5:
                    1b:e9:35:84:dd:9a:4d:b1:92:10:84:dc:f0:97:64:
                    62:56:e2:60:f0:df:d0:57:64:de:db:b7:97:b0:2c:
                    52:39:10:bb:c1:bc:ff:8d:a3:50:9a:a9:d2:34:f4:
                    9d:bc:bb:d8:8d:f4:79:9c:e4:40:44:43:5a:fa:19:
                    60:c8:be:05:cc:75:20:5a:94:28:12:b7:80:af:9c:
                    ff:85:c5:a4:1a:33:c6:fa:1a:b1:c0:c0:a1:22:aa:
                    23:3c:b3:d7:0e:22:21:65:0c:46:c4:6c:dc:d4:ba:
                    9b:7d:64:8e:fe:5c:b0:46:55:66:9a:a2:b5:d7:3a:
                    d6:90:68:19:d9:ed:94:89:00:02:b5:1c:21:31:e8:
                    14:98:34:ac:b0:bd:9e:0f:25:13:d5:6c:e2:c5:43:
                    9c:e3:d5:42:f8:c5:00:e7:5a:c1:e3:41:bc:2b:23:
                    32:1a:21:fe:1d:08:5d:a6:de:de:fc:36:30:ce:12:
                    49:cb:e5:c7:a8:c5:7d:87:9a:b2:f8:25:64:f0:80:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:5D:3D:AC:01:76:EE:28:A4:C5:B4:CB:C5:69:11:5B:E6:E5:A1
            X509v3 Authority Key Identifier:
                keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:94:79:d4:47:b1:2b:80:57:3b:7d:d2:85:03:34:b8:8c:25:
         b5:f2:0f:a0:2c:15:cc:6a:95:c5:b3:c3:48:54:11:97:66:c3:
         48:23:00:9a:8e:b3:c3:ec:99:7e:87:29:86:c5:2d:cd:b3:7a:
         5d:34:6a:ea:93:1f:08:ad:00:6f:96:73:56:9a:be:14:88:14:
         d2:06:b2:4a:47:6e:f2:13:0d:42:64:1c:bb:af:99:92:e3:78:
         ef:97:7e:a0:4d:f1:ab:d1:4b:e1:4b:ef:ae:10:33:d2:24:71:
         7f:7a:c2:a4:08:f9:c4:e0:52:bb:2b:b4:c8:a4:32:b8:4b:68:
         2e:23:5d:53:18:c5:a6:0c:71:d6:5d:9f:9b:c5:32:e5:37:42:
         ff:99:a5:5a:f2:26:79:19:9e:53:c3:da:00:e8:b1:a3:2d:17:
         4b:51:33:61:ad:dd:72:e8:e4:09:d7:d8:9c:7c:7a:ee:15:d8:
         dd:96:8f:76:a3:55:a7:60:8a:75:6b:3e:45:fb:ce:23:f9:b7:
         1f:cc:84:39:26:04:c5:6e:4d:94:4e:3c:a8:a8:f3:29:d1:9e:
         b7:e5:05:10:c5:3b:d1:9c:1e:1b:01:ad:c1:e4:82:82:8b:0b:
         be:e1:6a:58:f5:46:86:3e:ae:5d:2f:01:91:2c:b0:d6:79:95:
         9a:82:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:02:59 2025 by rpki-client