Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File:                     iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier:          Aat5Gl6FDCYzJgHMFP8xZBrqmgt4Ke4A1bSWIVFZh8E=
Subject key identifier:   4A:31:7E:EF:39:18:5E:E8:57:8A:3B:26:B9:4E:7B:2E:99:7E:06:EA
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer:       /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial:       0198D54E4718202ED6A0FB1FC78B0A2ECC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number:          15DF
Signing time:             Sat 23 Aug 2025 05:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:13 +0000
Files and hashes:         1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: ertR7fmXJS5BZVSkYeWr5r6dB0Wps/FFnyLWy2nDiOA=)
                          2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:47:18:20:2e:d6:a0:fb:1f:c7:8b:0a:2e:cc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
        Validity
            Not Before: Aug 23 05:02:13 2025 GMT
            Not After : Aug 24 05:02:13 2025 GMT
        Subject: CN=4a317eef39185ee8578a3b26b94e7b2e997e06ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:ba:af:ba:d3:71:94:39:53:f5:06:8b:52:
                    2e:a6:f2:f3:c7:c5:1a:86:b6:c2:f5:ca:65:57:63:
                    c0:3a:f6:3a:ec:a0:78:a4:3d:db:62:35:7d:7c:30:
                    00:81:78:b7:5e:9f:03:3f:42:67:eb:d4:0b:bf:b0:
                    bc:6c:6d:46:77:df:e8:e4:ef:e3:ac:f5:0e:ae:11:
                    0f:ca:a1:bb:c6:d2:2c:f5:27:01:f7:c3:fa:bc:9c:
                    a0:ef:95:46:f9:58:20:d0:3d:a6:b5:89:71:43:c9:
                    a8:bb:60:3a:27:ad:c2:f7:16:d4:67:f9:e8:0d:22:
                    fc:c6:4a:ad:46:26:75:79:d3:bc:9c:86:88:9c:0f:
                    22:c9:08:00:90:48:de:8c:7d:f4:b2:8e:92:c2:7e:
                    84:58:d2:81:25:48:dc:bc:20:a9:f4:76:8f:0c:4f:
                    43:53:e7:43:21:91:27:74:c9:62:38:1d:97:c0:a1:
                    fc:be:d7:a5:b3:64:63:a3:76:55:5e:88:d9:27:51:
                    32:e3:c0:ba:53:dc:6c:5c:34:23:7a:98:15:eb:ce:
                    2a:17:71:ab:1f:a9:52:96:52:4c:20:7e:d9:5a:0a:
                    50:e6:71:a2:a8:fe:31:27:07:94:42:36:1e:61:6f:
                    b0:a2:70:69:37:98:18:d6:59:15:63:c1:61:cb:32:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:31:7E:EF:39:18:5E:E8:57:8A:3B:26:B9:4E:7B:2E:99:7E:06:EA
            X509v3 Authority Key Identifier:
                keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:26:b0:44:a4:d9:8b:40:ad:d2:98:0a:59:ac:d6:cc:6e:6a:
         b1:90:25:4d:da:45:2d:89:5f:68:55:3e:e7:0a:74:31:68:57:
         99:aa:b8:01:3c:88:7a:dc:8f:5c:73:78:96:39:0f:a0:4a:4e:
         70:25:cd:2d:19:01:5d:e7:2f:ac:f1:d3:66:b6:82:f7:8c:fe:
         54:fd:5b:42:42:f1:f7:ab:13:12:b0:80:4f:fd:88:27:73:33:
         da:18:0e:1b:52:5a:73:63:a3:07:7c:73:07:ce:5a:f9:b0:b6:
         0f:87:86:68:34:23:ea:81:da:46:fe:df:03:14:79:d4:b9:6d:
         c6:ed:b5:bd:63:81:5a:27:a2:1a:34:45:03:d9:ef:9d:29:07:
         ca:ee:05:13:71:5a:94:51:4c:3f:16:46:cb:96:8b:41:5f:64:
         e5:6f:33:e8:5d:89:ba:41:69:ee:9e:4a:d4:f7:01:56:aa:5b:
         47:fe:01:ca:4a:0a:c7:f3:e7:71:97:c9:57:6f:3a:b1:1b:cb:
         e6:db:47:cc:f3:a2:e9:a5:09:32:0c:fc:3d:ea:64:8f:5e:52:
         c4:9a:20:23:0e:a9:d9:d8:04:65:56:6d:be:72:ac:0b:49:5c:
         1c:0b:03:01:27:00:c5:f5:44:b2:94:ac:10:dd:bd:40:9a:1c:
         30:0a:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:15 2025 by rpki-client