Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File:                     mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier:          Gu/en4FJtQcNRav/wYooHBe6hRpHS2Zd+nWmwmEsrcc=
Subject key identifier:   7E:7E:AD:A3:EC:83:9E:BB:26:47:79:BF:0C:D4:51:97:6F:B0:C4:5A
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer:       /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial:       0198D515B3E151CFC348CD6A91A7A00DFF69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number:          0AAD
Signing time:             Sat 23 Aug 2025 04:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:25 +0000
Files and hashes:         1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: ZWMn3DUHfJpSYEP/gdrO0KRs8X8zR3lMsSbAUaPxB90=)
                          2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b3:e1:51:cf:c3:48:cd:6a:91:a7:a0:0d:ff:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
        Validity
            Not Before: Aug 23 04:00:25 2025 GMT
            Not After : Aug 24 04:00:25 2025 GMT
        Subject: CN=7e7eada3ec839ebb264779bf0cd451976fb0c45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:77:8c:b9:36:5c:11:70:f0:00:cb:2f:39:
                    80:29:7e:4f:ac:2e:c1:b5:6c:85:53:02:61:69:1a:
                    a7:e0:f7:aa:08:9d:e6:8c:38:1f:98:0b:33:e8:ca:
                    5a:fc:0f:0d:71:15:bb:2b:af:66:00:0b:bd:6c:bb:
                    35:b1:ed:cd:be:20:11:42:11:5d:ea:04:c3:91:3f:
                    68:36:41:f2:12:4c:c2:5c:f5:e1:e6:c7:7d:6e:82:
                    4a:28:ce:85:c0:f7:15:43:3b:e9:97:ba:21:3b:b6:
                    b2:f8:12:10:43:02:e8:ef:93:73:d0:53:14:0d:e4:
                    cd:7c:ae:ce:b7:c8:16:eb:ff:91:06:b7:6c:8b:fa:
                    e4:35:03:99:1b:18:fa:ae:75:c1:8c:ef:24:0a:1d:
                    47:73:6d:de:d1:24:c3:b6:76:a8:fb:13:6a:9b:23:
                    2e:12:c1:b2:e0:27:e2:3f:1c:7c:47:dd:0b:cf:50:
                    06:8a:2e:8c:65:e1:11:be:f9:36:2f:7c:d4:52:b2:
                    fd:34:38:b1:06:5f:07:7f:20:ab:11:02:52:14:99:
                    fe:e0:03:c2:da:21:43:6c:4a:24:13:b3:8e:4e:7d:
                    e7:31:0b:38:e0:f0:0d:98:b0:1d:56:a5:2e:11:79:
                    fe:2f:7a:ec:55:db:a4:ea:b3:4e:2e:31:1e:2c:28:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:AD:A3:EC:83:9E:BB:26:47:79:BF:0C:D4:51:97:6F:B0:C4:5A
            X509v3 Authority Key Identifier:
                keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3c:16:df:40:26:c4:4f:73:7e:04:5e:0a:48:1a:60:a1:33:
         4c:e3:7e:de:6f:5b:66:ce:4f:5d:e1:88:84:0a:7a:7a:6a:66:
         17:54:55:d5:1a:59:5c:30:db:6e:17:cc:d0:cc:90:9e:68:a4:
         9f:b2:a0:c4:b3:a2:f0:71:f8:3a:fe:02:43:68:f5:a5:15:bf:
         e9:96:3c:a5:37:5b:cf:9f:ef:4d:b1:af:89:77:db:05:d2:01:
         42:39:55:82:22:e2:ff:fc:6f:7f:d0:44:1e:ce:f1:c3:14:fd:
         0c:aa:7e:1b:14:94:2f:ad:31:78:28:d7:84:97:1d:a8:1f:81:
         23:ef:87:72:d6:29:51:fc:aa:c8:01:f5:2f:71:bb:32:20:d1:
         88:ee:2c:2e:f4:13:4f:9a:6e:ca:ca:45:b4:d1:6e:cc:38:57:
         ac:e2:89:03:2a:e1:36:36:2a:3a:f7:90:96:20:02:1b:93:12:
         41:87:fb:4d:f2:da:3e:55:ba:07:46:db:db:c1:06:4b:24:2e:
         8e:6c:5f:18:41:4e:d2:34:0a:25:28:3b:15:8d:36:4d:d2:41:
         1c:a9:86:1a:58:88:dc:71:14:5f:c0:53:7b:35:49:88:6c:bb:
         47:6e:6d:c5:2c:b6:35:c8:c3:3d:3a:ac:ef:58:41:a7:b6:ea:
         c5:af:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:47 2025 by rpki-client