Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File:                     j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier:          1fIOCpRPgow3NHNIahBvWNHa4lLAiEoM+EkhXScfrOI=
Subject key identifier:   89:80:10:CF:E2:93:7A:80:94:AF:3C:89:70:20:14:EF:12:0F:BF:27
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer:       /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial:       0198D54E05644022767A65D33843AD1C6979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 05:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:56 +0000
Files and hashes:         1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
                          2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: FU4i/Ts0CA3ux3JKHMGU9+aDvVrbMggkLWxls7IKPko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:05:64:40:22:76:7a:65:d3:38:43:ad:1c:69:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
        Validity
            Not Before: Aug 23 05:01:56 2025 GMT
            Not After : Aug 24 05:01:56 2025 GMT
        Subject: CN=898010cfe2937a8094af3c89702014ef120fbf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:67:4b:06:ff:14:49:77:b7:8d:a6:23:51:
                    59:8a:b9:d9:07:0d:7b:8e:b8:6a:c7:cb:37:8c:08:
                    fe:23:ad:9f:17:04:73:12:e4:1d:aa:9c:5b:ac:2c:
                    4b:d6:1d:d2:bd:5a:a5:ee:7e:f4:7b:39:68:fa:81:
                    58:d7:ff:6a:80:15:d8:30:76:56:43:7e:76:f3:93:
                    b3:93:bf:b2:f2:b0:0b:95:ca:c8:ce:8c:e4:4d:57:
                    3c:4f:a8:a2:5d:10:04:0f:a3:63:dc:b3:f1:a3:21:
                    f3:6a:6d:7f:b5:d3:d8:fd:b2:9a:c3:92:f0:ac:fe:
                    ae:6f:ff:f0:9c:fa:0c:bd:24:ef:89:9d:30:2e:28:
                    f0:86:2c:16:90:e5:bc:ba:0d:22:52:c5:f2:de:f0:
                    e3:f0:eb:07:51:11:5b:11:f9:0c:55:7f:ff:66:67:
                    bc:a9:be:9c:28:8f:3f:c4:04:d2:a5:ae:0d:7d:50:
                    c9:a7:a8:53:8b:fd:9e:af:05:aa:0c:ca:15:64:fb:
                    cb:46:5b:df:62:e5:7c:e8:18:ab:6d:81:d2:3b:01:
                    5b:ba:6e:f5:68:ef:dc:9f:d9:30:9b:1d:d6:dc:bf:
                    58:0e:4c:3e:a6:35:f3:ae:b7:3f:39:34:52:7b:4e:
                    4b:cf:a2:56:7e:8b:72:65:d0:32:2b:85:6d:b9:28:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:80:10:CF:E2:93:7A:80:94:AF:3C:89:70:20:14:EF:12:0F:BF:27
            X509v3 Authority Key Identifier:
                keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:83:71:ed:83:bc:8e:9d:7d:3d:ff:2b:32:17:30:60:bd:
         e2:54:ef:f7:c6:e7:23:4d:63:e7:e3:42:ba:60:e5:43:19:fe:
         ee:30:0e:e6:4d:19:69:76:ae:e7:8b:f9:db:cd:1b:c9:87:1e:
         83:7a:d8:bd:4c:1d:76:94:7d:7f:0b:4e:d4:49:e3:b0:07:4a:
         ca:b6:57:71:c0:57:0d:7a:1c:85:4f:54:be:55:de:d7:18:a8:
         91:cc:72:e0:af:0a:70:ef:23:ae:7d:52:77:d3:8b:2c:0c:48:
         c7:ba:51:08:23:40:d4:53:a6:0a:63:b4:77:69:b4:5e:50:c7:
         c9:89:cd:1e:ae:12:44:3b:ae:2c:ae:a0:0c:f2:56:2a:83:1e:
         ff:77:d9:d8:3b:c8:55:f7:05:e2:75:38:5f:0a:3c:b5:dc:40:
         9f:20:b9:c4:8a:a3:48:39:6b:41:ed:8c:9b:4b:b1:7b:4d:78:
         f4:5d:04:7c:45:85:e4:97:7b:54:94:1b:a6:26:24:a1:12:9b:
         b3:a4:72:1f:a3:f7:8f:a6:28:2f:af:c2:66:e3:50:7a:4e:ec:
         42:ac:a7:ff:a5:7f:7c:96:6e:39:bc:f9:b3:5d:a7:f4:a3:2a:
         bc:70:06:dc:9e:b1:78:7a:c2:35:2e:8f:66:86:f7:c5:fe:24:
         8d:60:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:40 2025 by rpki-client