Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File:                     jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier:          bjaVb0LRZN/czxIiq2wlsYKHL+VjdBw9POHiZtxT49Y=
Subject key identifier:   E8:54:EB:AF:63:47:EA:00:14:90:F4:D6:64:0E:BD:F2:E1:8B:88:96
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       0198D65FBF445F2642CA899D2CB0FCF411E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number:          048C
Signing time:             Sat 23 Aug 2025 10:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:55 +0000
Files and hashes:         1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=)
                          2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: s3z0QsRQyjsR3XrLTxwKEf/0YJlE1tzjHjFKvl9+4aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:bf:44:5f:26:42:ca:89:9d:2c:b0:fc:f4:11:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: Aug 23 10:00:55 2025 GMT
            Not After : Aug 24 10:00:55 2025 GMT
        Subject: CN=e854ebaf6347ea001490f4d6640ebdf2e18b8896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:38:9a:19:aa:85:64:e0:11:24:0a:07:0c:
                    76:79:09:b8:1e:85:a8:d6:16:b1:6a:2d:f1:92:f0:
                    2d:59:90:56:d1:88:e4:69:32:8f:db:72:67:ed:a7:
                    ff:54:eb:7c:76:49:01:4c:5f:5f:97:e9:bd:84:95:
                    ca:4d:23:2b:61:8c:69:1b:01:ca:fc:df:2c:79:ea:
                    9d:4b:0f:d2:d5:1d:b9:46:ed:55:5e:a6:98:ce:2f:
                    8e:7b:56:2f:ad:98:a0:61:cf:0f:78:f6:c4:5f:3c:
                    af:a3:26:8c:c1:e7:8e:55:b1:dc:91:29:68:11:bb:
                    f6:ad:da:f8:c1:13:40:1e:5a:67:b1:0f:2a:34:26:
                    54:b7:b8:51:af:e6:b7:0a:ec:4a:90:6a:c5:c7:b8:
                    f5:7c:76:86:a9:b0:b9:5c:2e:9a:ab:bd:58:35:df:
                    7b:02:5c:7a:8e:4d:cd:68:6a:15:0f:2d:cd:5b:c1:
                    84:74:0a:63:26:1d:27:44:ec:5f:f1:dc:e4:24:58:
                    6f:37:c4:f5:d2:3d:9d:92:80:b9:3b:d1:f4:dc:48:
                    91:8f:3a:55:32:d5:50:35:c5:b9:c5:5b:c4:ce:51:
                    7d:49:05:ac:88:83:db:98:44:69:dd:c3:d9:e9:d1:
                    fe:17:42:c1:7e:df:ff:6d:36:e8:74:a4:f9:de:f7:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:EB:AF:63:47:EA:00:14:90:F4:D6:64:0E:BD:F2:E1:8B:88:96
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:3c:7f:89:12:d1:df:84:a5:1c:a3:a4:6d:40:42:b9:2c:
         3e:ec:78:6b:a4:21:3f:48:28:15:90:82:e9:85:af:f5:c7:0e:
         00:c9:70:b6:2f:c3:5e:9d:1c:f2:fb:20:91:4e:22:8f:7e:65:
         fa:ce:b6:0a:8f:5b:8e:3b:38:88:a6:27:c6:9b:4b:00:ba:fc:
         42:4d:74:84:7b:37:b9:9a:1d:f2:0c:6c:c9:cd:32:3d:16:f8:
         12:4c:0f:92:91:14:1e:bf:43:5d:28:40:f6:54:5c:96:0e:47:
         19:9a:2b:df:48:f2:26:fb:d5:05:84:fc:43:f7:c1:b9:bf:ed:
         19:c8:17:ba:ea:20:bd:a2:fa:8a:c5:ce:a7:19:43:9b:b6:88:
         03:a3:95:80:29:88:bc:eb:83:bb:eb:a1:cb:4d:89:5f:00:1d:
         0c:ee:78:a3:52:50:95:1e:94:8a:9f:98:5a:e8:c4:9a:58:d2:
         21:4f:da:1b:6f:ea:3c:e0:0a:44:b1:aa:55:5f:d8:ef:8c:c5:
         03:0b:c0:31:cf:58:40:38:ce:db:42:29:bc:de:03:d2:13:a6:
         75:4c:eb:2c:ac:af:c8:3e:23:69:58:b0:58:7a:e6:eb:91:62:
         dc:d5:23:05:5b:82:7f:c8:a9:9f:0e:ca:8c:17:51:26:23:c4:
         70:ce:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:10:29 2025 by rpki-client