Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          3QD7qqbT6nO5OkMy5JppiNswDAbmI5qIaU9BjPOfsLI=
Subject key identifier:   9E:F9:AB:6A:05:94:97:F7:F9:39:05:85:F0:54:DA:7D:D0:B9:D5:EB
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       0198D73B8C3E5727F350985FDE57738B7B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          C0
Signing time:             Sat 23 Aug 2025 14:01:00 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:00 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:00 +0000
Files and hashes:         1: 8h3pv0a91kH2-o2C39d5WQpx7to.roa (hash: fKts1ckJPbwc+fkpahnzOZr8FcFxDtnjhN/I5DI8A/Q=)
                          2: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: If60scYC4738ZljRmih8cbGstDtcMyS36vBlH8j7S8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:8c:3e:57:27:f3:50:98:5f:de:57:73:8b:7b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Aug 23 14:01:00 2025 GMT
            Not After : Aug 24 14:01:00 2025 GMT
        Subject: CN=9ef9ab6a059497f7f9390585f054da7dd0b9d5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:d8:62:89:74:50:2c:6b:65:8a:3b:bf:9a:
                    e9:46:02:5d:43:5e:66:fb:39:9e:42:ea:f5:73:ea:
                    07:16:60:04:24:f6:9b:bb:0d:12:68:c3:63:0a:0f:
                    a5:39:c8:05:21:a9:fb:fd:b6:d8:80:13:06:15:36:
                    77:d4:3d:e8:d9:82:d1:66:37:b2:fd:5b:85:2e:78:
                    5b:7b:6c:75:97:55:ef:2e:2e:ce:1b:12:a6:f1:71:
                    46:9a:73:cc:e6:84:dc:30:2c:3c:4b:9a:66:dc:55:
                    a6:42:80:9a:72:78:96:74:9c:8e:ee:45:20:3e:5b:
                    99:ae:91:7c:06:99:31:0b:38:14:c6:d8:c4:01:1b:
                    59:4b:7e:77:a0:53:be:ae:a7:ec:dd:30:08:f8:47:
                    37:27:d0:55:9f:22:db:11:bc:6c:29:17:a4:42:c7:
                    2e:69:11:87:60:e0:81:ff:b1:5f:16:f0:d6:33:0f:
                    3f:60:7b:55:bd:b3:92:37:2e:61:6f:5d:20:fe:fc:
                    5b:cb:01:03:18:0e:3b:a2:15:c9:60:85:19:d7:03:
                    0c:c4:ed:7d:1b:0f:11:cb:c4:3b:cf:bd:8c:b4:7b:
                    af:c6:55:07:70:ab:d6:57:4a:75:4a:dc:b3:be:40:
                    76:2d:66:fc:1f:21:67:0d:a8:5b:0d:24:cc:a7:ac:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:AB:6A:05:94:97:F7:F9:39:05:85:F0:54:DA:7D:D0:B9:D5:EB
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e5:c8:5e:cb:cf:70:64:30:6f:5e:7a:85:5d:e3:90:50:a0:
         53:1d:e0:19:34:58:07:a2:b1:e4:bf:36:19:6c:82:33:09:8f:
         c5:1b:dd:51:6b:0d:83:80:28:35:98:fd:57:48:b8:c7:9e:e1:
         cf:a2:6d:5c:4f:47:2b:ee:83:d2:7d:75:78:01:1e:5a:11:24:
         24:e8:92:1e:4f:1a:bc:2a:fb:f6:9a:b2:23:15:43:cf:46:c9:
         f6:4f:58:4c:c2:8a:de:f9:73:dd:a7:5d:3e:c4:24:60:1c:d0:
         ea:96:a9:e6:9c:d5:6a:c9:21:34:df:82:90:ea:01:f8:b4:ea:
         71:fd:1c:06:a5:01:d6:a4:9a:47:7a:e9:73:4d:cb:fd:da:06:
         a2:04:9e:e5:02:a4:9f:dc:d6:3d:1f:54:f6:d8:02:89:b6:ca:
         b3:66:22:2f:54:84:42:14:e7:15:cb:51:7d:b0:98:df:72:65:
         8a:ee:4a:81:2e:64:70:99:03:53:d0:c2:ee:43:35:53:45:1f:
         12:7c:46:ee:d4:4e:34:c4:92:a3:1e:2d:5e:85:27:d4:1b:f4:
         6f:f9:95:0e:76:52:92:c9:a5:0e:4f:a7:c1:77:9b:f4:ed:98:
         da:5c:80:01:54:4c:2b:ac:47:df:11:a8:82:4d:4c:14:96:9f:
         7f:32:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:20 2025 by rpki-client