Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File:                     josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier:          7i9X3kgDp9A9kfJYTrQ7oudd7AkIFHLXZR8CnamBV/k=
Subject key identifier:   B0:35:A7:3B:94:E7:1D:76:F9:8A:67:9D:E6:66:F0:97:01:42:74:A8
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer:       /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial:       0198D5BBD8A791F73D1B3C8975510FA98D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number:          13C0
Signing time:             Sat 23 Aug 2025 07:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:54 +0000
Files and hashes:         1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
                          2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
                          3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: QWJVe/vOfIH72VwCNY3uEefn4TjN68oNjpvJTWiHFxE=)
                          4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d8:a7:91:f7:3d:1b:3c:89:75:51:0f:a9:8d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
        Validity
            Not Before: Aug 23 07:01:54 2025 GMT
            Not After : Aug 24 07:01:54 2025 GMT
        Subject: CN=b035a73b94e71d76f98a679de666f097014274a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:6c:c5:1f:d5:df:28:54:bd:66:87:ec:cd:
                    99:5b:50:0e:49:a2:6d:b9:91:2f:34:0b:5f:2d:b0:
                    8e:00:59:a6:32:ea:34:37:da:0a:5e:90:81:4e:12:
                    10:d1:96:81:50:b2:fa:dd:6d:38:bd:ba:29:26:86:
                    ff:ca:10:3c:5d:a0:20:a0:c3:fc:0f:88:68:76:3e:
                    de:f4:48:7d:78:57:be:d2:e5:89:9a:a8:d7:28:21:
                    d7:33:64:e8:04:95:e2:a5:a3:52:7e:2c:81:97:67:
                    ee:5a:42:5e:63:4b:2c:8a:15:8f:1c:96:28:9f:f1:
                    88:7c:b7:79:2a:d2:aa:e4:1f:86:09:fd:58:b0:1a:
                    3b:1f:69:89:60:df:34:38:9e:1b:4f:60:9b:44:14:
                    b7:d2:f2:ff:33:2b:9d:96:3e:9a:dc:2a:ca:ae:89:
                    ee:2e:9d:e7:ae:25:ab:4e:0a:68:48:a8:39:fb:db:
                    13:7d:7e:bc:82:82:0a:11:f6:f9:28:4d:41:2d:82:
                    96:94:d3:56:bc:9b:cf:fd:50:88:58:f1:51:37:57:
                    ae:e7:3f:5d:96:9d:a1:60:91:fe:6a:1d:33:4f:36:
                    3f:a9:3e:3e:0b:82:fe:d6:3d:53:e7:3c:18:39:0c:
                    87:bb:3d:c5:42:97:2e:f9:46:8c:7a:59:73:df:43:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:35:A7:3B:94:E7:1D:76:F9:8A:67:9D:E6:66:F0:97:01:42:74:A8
            X509v3 Authority Key Identifier:
                keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:89:1f:80:f1:eb:de:6c:a3:c8:11:7b:cc:fe:b8:ba:4a:
         bb:de:43:7d:e8:6a:29:29:60:5f:91:2c:ab:92:8e:76:12:84:
         ee:9d:b0:b8:b7:21:91:ca:a6:f9:1d:db:40:25:a5:cc:fb:2c:
         40:51:70:0e:ba:65:eb:83:02:08:b3:64:2a:16:87:02:ff:f4:
         07:f3:0c:a5:e4:3e:96:21:e5:e9:5a:e8:51:0f:97:71:97:b0:
         ed:b4:49:86:53:31:bc:d5:ef:0f:3d:c7:bc:26:e8:3e:86:0d:
         27:16:6d:b7:52:bf:e3:aa:5f:f5:d7:03:f1:35:93:bc:db:2e:
         f6:47:6d:78:63:f2:44:20:a2:9d:b6:51:a7:b4:d1:82:16:1c:
         d0:25:2b:55:af:21:6d:eb:16:3d:dc:81:c9:48:1d:02:b5:02:
         4a:b6:99:60:ff:1f:fa:b1:ff:a0:14:57:08:8e:ec:c7:50:3c:
         34:f7:39:36:00:e7:50:85:6f:35:91:36:5f:5c:54:5d:1a:8f:
         4c:62:fc:9d:ad:41:eb:8e:f8:ed:84:c7:52:8b:f3:59:51:f2:
         0d:04:36:11:a2:df:2b:59:41:7a:0c:bd:dd:01:9a:13:bd:06:
         7f:e1:26:a2:da:94:81:73:2d:e6:9e:bc:1f:3f:cc:cc:d3:9f:
         f1:1a:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:20 2025 by rpki-client