Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
File:                     jswinlaZEFgoVkt4UJ87cvMJCiE.mft (raw, json)
Hash identifier:          tIhzFE8X3/XWjon5DUD5/fVJ0QAbNcqDuesnL+L8tRw=
Subject key identifier:   45:66:F5:F0:AF:D2:56:50:03:26:1D:FF:2C:FD:56:81:A5:CA:64:92
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       019933496A87E54293855E926DED7A19161F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
Manifest number:          1682
Signing time:             Wed 10 Sep 2025 11:01:13 +0000
Manifest this update:     Wed 10 Sep 2025 11:01:13 +0000
Manifest next update:     Thu 11 Sep 2025 11:01:13 +0000
Files and hashes:         1: FURjaUQ0FEbchTkhcxeSRtrU1s4.roa (hash: jQVRJAAAyS8YQn84udlC/TaV1qdxFSfvYs7sBZO1tP0=)
                          2: K5vbAl_H3B87djRm_AqpMSGgebs.roa (hash: Fe41AX22b8kKGMiquA7Aakj+0l+wq87HyZLc6RPvrEg=)
                          3: jswinlaZEFgoVkt4UJ87cvMJCiE.crl (hash: seUKG4ImYaCLJEPurxwE9RuEc4pjTtP6OqFY3r3gkg4=)
                          4: t8cq4b1nAfG-fC4vwdKSmjzZztc.roa (hash: URrKscem9x14TGL4Viw7da7kLuo3IZFxvYHMeZaxOEs=)
                          5: xqlVZBB9sO3vWj8zwFa7d_DV0K8.roa (hash: WJGw9tR1uFvJvx7voYo2acpZQ7m9lC9bCrk6L8c57Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:49:6a:87:e5:42:93:85:5e:92:6d:ed:7a:19:16:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: Sep 10 11:01:13 2025 GMT
            Not After : Sep 11 11:01:13 2025 GMT
        Subject: CN=4566f5f0afd2565003261dff2cfd5681a5ca6492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:5e:92:01:98:a7:cb:0a:3f:50:57:75:19:
                    57:82:a0:5c:da:8a:dc:de:0f:f5:11:9e:7c:cf:5e:
                    c8:40:68:4e:06:a6:08:6d:55:4e:12:d3:e4:51:d6:
                    4e:ba:4e:2b:0b:fd:2e:38:19:46:d8:2d:b8:ff:1e:
                    e8:0f:2f:94:5f:af:ea:67:0b:91:d3:c1:02:0f:cf:
                    b5:e7:3a:73:c4:38:03:bc:9f:bf:0b:7a:5a:06:5b:
                    d5:72:ec:e5:e7:07:7a:fe:92:34:02:e3:fd:e0:7f:
                    fd:0b:c9:75:ab:fa:fd:3a:96:0a:1e:c6:ce:4e:83:
                    80:c1:78:7d:96:63:e3:0a:22:ef:c6:7d:26:14:20:
                    1a:41:15:0f:39:6c:3b:49:e3:5e:5e:a2:7f:6f:a1:
                    9b:91:56:be:67:0a:de:16:2b:11:0d:79:4c:09:e2:
                    9c:1e:96:da:84:bc:68:19:64:20:21:61:20:c6:64:
                    5e:52:2c:dd:79:be:23:fa:0a:ea:8b:93:d9:cf:df:
                    9a:49:68:6b:0f:f3:58:57:0c:f9:03:02:5f:ef:7d:
                    25:c1:05:76:80:17:5b:52:48:4f:2c:2c:4a:45:df:
                    ed:07:7b:eb:13:2f:b5:7d:fc:ea:50:b9:6e:7a:f5:
                    00:d8:6b:0d:94:df:d8:0e:69:6e:00:11:01:70:5c:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:66:F5:F0:AF:D2:56:50:03:26:1D:FF:2C:FD:56:81:A5:CA:64:92
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:9e:05:a4:21:85:6f:b3:ce:93:1f:ef:68:83:e8:0a:e5:
         f6:9e:dd:db:f8:b3:84:42:16:c7:99:7a:78:9c:09:8b:62:10:
         ab:6f:97:7d:48:51:dc:c0:36:36:a2:02:29:28:89:81:f2:9b:
         8c:1f:0f:1d:71:da:f4:d1:cd:07:8f:38:0a:36:3d:37:6e:7e:
         30:ac:6f:d8:b7:ae:0f:5e:f4:1e:35:03:e5:7b:d4:0e:c4:10:
         28:68:84:aa:ec:63:6c:5b:3e:d6:cb:2a:6c:34:06:8f:41:41:
         db:8d:28:dd:72:15:9a:62:88:b1:cd:d6:1f:df:1d:49:7d:f2:
         11:7b:82:7c:b9:b0:e5:fc:39:5d:fd:42:46:0d:6b:d9:ee:cb:
         c0:b9:c5:9a:57:3d:57:30:f2:eb:76:5e:f5:d1:5d:ef:aa:b9:
         86:32:f0:d2:13:72:e3:64:3c:47:6d:24:b5:d9:ca:c0:e0:30:
         2f:fb:ae:f1:85:04:f2:c8:b8:f7:61:89:63:90:f6:c9:b7:bf:
         82:0a:3b:bc:89:e7:bc:80:11:97:4f:ce:0d:80:d1:a2:d8:c5:
         f3:34:fa:6b:1a:02:94:6a:6f:f5:dd:23:66:63:e3:73:73:fb:
         38:b9:aa:90:ea:03:cb:e3:4f:32:ac:38:db:f6:33:57:28:40:
         09:4e:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:38:58 2025 by rpki-client