Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File:                     jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier:          KIePzoeNu2zlu2RJCWTz0YTRyVnyI8AD/NFrUTA9Bfo=
Subject key identifier:   9C:E8:B9:54:7C:9B:B2:19:20:25:CE:83:84:96:B6:87:5B:56:85:FC
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer:       /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial:       0199239F9D8B694EDD482974B10D376CB3ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 10:01:26 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:26 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:26 +0000
Files and hashes:         1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=)
                          2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: Davjgm7ium4jPlFcKAvelno/siWeVT2yYTUW3ATqT70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:9d:8b:69:4e:dd:48:29:74:b1:0d:37:6c:b3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
        Validity
            Not Before: Sep  7 10:01:26 2025 GMT
            Not After : Sep  8 10:01:26 2025 GMT
        Subject: CN=9ce8b9547c9bb2192025ce838496b6875b5685fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:83:10:d9:cc:18:e5:5c:13:58:2d:96:f9:
                    1f:ba:c0:59:b2:bc:c2:cf:d8:e0:8f:ca:79:f5:4b:
                    71:e1:c9:a1:a2:d7:61:05:f5:be:7a:9a:75:bf:2c:
                    ce:a0:5a:73:26:0a:72:3c:1c:91:ef:13:bb:18:a7:
                    64:73:6a:e8:d2:85:88:f0:37:60:9e:9b:81:83:26:
                    64:6b:04:90:c9:f5:51:92:a7:aa:1b:27:c7:1a:ea:
                    3c:d3:16:46:d6:80:0c:af:76:67:b0:c8:fe:9a:75:
                    cd:a0:e7:2a:f1:e8:ca:eb:73:57:50:29:14:57:fc:
                    b9:e2:a1:69:2b:d8:16:dd:05:82:bc:50:42:f4:55:
                    8f:df:f5:23:0b:42:43:5f:96:75:e3:11:35:a9:0e:
                    ac:ba:f6:d5:37:70:17:e7:33:02:31:e1:2a:0c:0a:
                    81:8c:e2:5c:29:0f:6e:b6:2f:f9:28:ce:1a:c5:4a:
                    ac:d7:5e:8a:2e:36:a1:7f:10:a6:f8:69:f9:50:e2:
                    39:ce:06:7f:53:a7:db:ab:36:88:74:dd:5f:a8:62:
                    5b:9b:2e:06:4a:c7:ec:5f:cb:6c:93:0b:fa:8b:68:
                    96:a4:34:2d:5a:de:68:d2:ca:52:6b:4f:00:f9:cf:
                    af:dc:3d:0d:9a:59:1c:40:32:60:06:b1:57:bd:24:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E8:B9:54:7C:9B:B2:19:20:25:CE:83:84:96:B6:87:5B:56:85:FC
            X509v3 Authority Key Identifier:
                keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:01:54:00:5a:a0:98:74:04:ba:f4:8c:66:b4:01:dc:c8:25:
         93:e7:6b:18:09:46:37:41:8e:5d:e3:95:72:eb:30:6c:0c:c0:
         b1:7a:44:ab:80:ad:07:e7:ca:30:8c:09:2e:c3:b3:5c:32:dd:
         b4:ca:1d:07:8f:96:e2:88:6c:fd:b6:c9:f6:45:f1:9d:d0:3c:
         63:f3:59:87:88:27:7a:a0:60:fd:53:62:54:d8:bf:c9:99:c4:
         44:a6:42:4c:4d:b7:69:12:e5:19:37:c7:c8:60:78:67:db:0c:
         70:d2:9a:c6:3f:88:83:b8:37:81:e0:46:7f:00:90:5a:e1:b2:
         db:50:ae:15:66:f0:58:fb:1d:ce:d1:d7:91:3d:72:fe:2c:36:
         11:d6:f9:79:21:0a:8b:6f:72:a7:67:e4:4a:71:22:29:e5:4a:
         e1:ea:be:18:ea:e5:8a:f5:fb:e1:21:f4:0c:59:f7:ad:cd:fe:
         d1:84:98:71:80:87:f4:8c:39:74:27:bf:3d:93:f6:b0:aa:4c:
         e7:be:07:2c:45:0e:59:31:5e:c2:0c:bd:0d:92:72:51:82:04:
         23:db:64:e7:80:fe:53:6e:72:97:df:8e:40:fd:8d:01:3f:3c:
         e2:ea:a3:a6:3d:e2:74:8d:94:98:d4:b1:1a:45:5c:68:a1:88:
         53:a3:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:12:19 2025 by rpki-client