Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          77E+29+0XvgTLhlPy8g1E4EKGy5MwMvUfs1TEuv2/Z8=
Subject key identifier:   FE:36:45:99:5D:26:65:66:11:A6:45:4D:8B:F6:97:32:9C:3D:19:53
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       0198D51575A914EEDB75B71B83137ED65F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          1234
Signing time:             Sat 23 Aug 2025 04:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:10 +0000
Files and hashes:         1: 0h2grdbQdf4vYHZWDkedoxq82j4.roa (hash: D+Sm+7GDNJl3LW55KT6DhNCDqELpjmMWvTt+C/YfxSA=)
                          2: 54maDBwwKTxHdkusWjL9_Ovz-qw.roa (hash: K+6mHC5B4TYfPyOtC0Ws3X1xogH31t6cVYvGSG2+010=)
                          3: GpJsbUU7ynXwevk6zegWgWclf9Y.roa (hash: Gj5/c+xCgDWNgWsyAfXPaCh0mgF3UrEUlCabtiae4lk=)
                          4: QKYFwfEUtIsE2zwk360KHQOdATU.roa (hash: J7RPiiX3svZf1ggdl8vvm2b4xvCEOydrVgV6jBu1CtA=)
                          5: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: 6Yszc6zPCAOyYtGxvjOhATZGD18D3Fdi+by0/Z0WRB0=)
                          6: nbxUHEZP7nLPsSWUzZlv-6zoI8E.roa (hash: b2RlxLzrg3Jt5vsvNFiprNhu9Bg/P/h2jB1aLvcyUR4=)
                          7: prOxBQFXKQHVMxFfWuCKBN6cC28.roa (hash: KQkvvBw6H6mLNvuqMCwSPUrSIm6c/c/LV/GGLcSdkGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:75:a9:14:ee:db:75:b7:1b:83:13:7e:d6:5f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Aug 23 04:00:10 2025 GMT
            Not After : Aug 24 04:00:10 2025 GMT
        Subject: CN=fe3645995d26656611a6454d8bf697329c3d1953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:e7:9a:43:b3:bd:04:63:76:5c:93:99:fe:
                    32:91:67:37:9f:fd:e8:1d:5f:4d:24:a4:ca:dd:62:
                    7d:41:eb:ee:9a:55:1e:bb:7b:14:64:20:58:6d:c8:
                    9d:ac:65:e1:65:28:d1:96:7f:32:d6:5d:06:cc:87:
                    93:11:bd:ac:3f:4a:ef:66:c2:70:25:da:e5:0f:f0:
                    8f:e6:84:d8:71:ff:d2:9d:30:cc:2b:45:5f:2f:d8:
                    fb:7e:2b:db:39:cb:07:c6:9d:64:5a:f5:28:1f:18:
                    31:7f:65:8b:d5:c7:f6:f4:95:39:b8:10:48:9b:36:
                    60:1c:25:75:8b:48:b7:b4:89:dc:8a:14:77:81:a4:
                    df:2f:17:8f:0a:b0:7b:dc:86:af:df:09:5f:21:ac:
                    7c:9d:91:7c:af:37:b7:a7:cf:a4:9d:46:1b:63:00:
                    4c:4a:28:4a:39:74:ad:d7:af:b7:99:8e:fc:d4:d6:
                    db:3f:d0:b2:b5:46:88:21:46:b5:d9:81:26:4d:62:
                    2f:c3:89:ee:5c:32:3e:ac:9f:d7:94:dc:7a:37:3c:
                    d5:33:0b:4b:a6:b2:89:3e:b3:8c:c0:3d:5e:3e:e6:
                    11:fc:f9:fa:3e:54:9a:3c:e0:5b:ea:3f:40:35:d6:
                    a7:68:ac:e4:d1:75:44:98:26:b9:ea:5f:ce:65:e5:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:45:99:5D:26:65:66:11:A6:45:4D:8B:F6:97:32:9C:3D:19:53
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:6a:5c:89:f2:0e:62:39:bc:4c:94:00:2b:c1:9b:0f:45:50:
         c3:de:53:b3:27:f1:34:77:3a:ea:7c:63:da:e2:4f:07:6f:b7:
         1f:a8:5d:0a:85:ea:36:44:e3:6e:5e:71:b2:f7:df:ea:b7:73:
         d6:1b:7f:39:2b:d3:a2:09:3a:77:31:65:b6:ce:48:2a:35:3d:
         f2:ea:e6:e3:28:56:a3:af:f4:c1:6e:2e:2c:3b:39:3b:7f:59:
         40:20:70:dd:08:cc:d8:8e:f9:ac:32:93:4a:fb:d7:b5:21:15:
         e5:f4:cf:ff:68:04:b7:88:4a:13:98:6e:54:f3:8e:1a:3f:90:
         ae:2b:e1:04:8b:91:b4:a5:d9:72:bd:35:b8:cc:15:1a:ba:76:
         7f:e6:7c:64:58:4a:e9:41:d7:f5:1d:c5:90:db:04:3c:49:54:
         5b:86:0c:13:e9:0c:55:70:b9:f0:24:0c:c9:83:95:a0:60:20:
         67:c3:c4:d8:46:61:b6:d2:66:ab:54:dc:fe:ba:c8:e0:28:39:
         11:4e:48:35:7d:8b:76:86:1b:9f:0b:91:e6:f9:76:78:4d:30:
         d5:9a:df:53:f9:e8:9d:29:e2:41:87:ad:f9:fb:0c:03:23:df:
         a8:75:c0:b5:44:02:40:e6:c0:35:e1:c3:e5:87:4a:58:65:bb:
         4c:1d:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:10 2025 by rpki-client