Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File:                     fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier:          Yw7zmOMSonbMzj9kYNQbE+szbrhTU3Omq6lb9ohQxME=
Subject key identifier:   52:AF:07:8D:1F:51:01:55:FB:67:27:C0:56:09:8F:01:AA:40:22:5B
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer:       /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial:       0198D54DE3678378FA9B7F7B6A6DFFFFF6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number:          09A0
Signing time:             Sat 23 Aug 2025 05:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:48 +0000
Files and hashes:         1: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: AamNc76RZ/7GCfCLAFoGtZ8pqfEVj1ANUluObTdg8zA=)
                          2: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (hash: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e3:67:83:78:fa:9b:7f:7b:6a:6d:ff:ff:f6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
        Validity
            Not Before: Aug 23 05:01:48 2025 GMT
            Not After : Aug 24 05:01:48 2025 GMT
        Subject: CN=52af078d1f510155fb6727c056098f01aa40225b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:35:ab:61:cf:19:cb:43:b9:c7:4d:fc:0b:
                    e1:a4:06:ee:e7:50:d4:c9:8e:e8:52:6f:0f:f3:71:
                    28:12:19:d1:c1:ee:38:96:00:7b:fb:5b:4a:82:45:
                    52:d0:94:f8:bd:91:62:e6:fd:35:de:5b:a7:67:0f:
                    b5:d4:35:5c:d8:34:36:45:b4:f2:45:00:d7:73:a1:
                    27:c5:06:e8:2c:c5:bb:17:f7:ea:82:fc:ad:43:ce:
                    4e:22:0f:60:29:3f:d8:18:d6:d3:68:10:81:f4:68:
                    4f:b0:81:39:ff:c8:1d:59:ac:6d:67:33:7f:ed:97:
                    e1:47:f8:a4:7b:9f:14:2e:3a:27:93:47:eb:9f:fb:
                    da:8b:a1:73:f0:39:1f:c5:21:72:c0:7e:86:e9:29:
                    a2:8c:c1:8a:6e:14:03:6f:a0:c7:c9:2f:30:b5:e9:
                    4a:68:7a:f5:ee:43:64:2a:40:e9:28:5c:b4:3e:46:
                    1c:41:49:75:45:c7:26:e9:07:b9:27:23:c3:63:f6:
                    2d:b9:36:79:ea:c4:bc:37:70:cb:52:cc:90:09:43:
                    25:9d:e0:7e:d4:c1:a3:8e:17:d5:52:52:52:ff:d0:
                    0c:3f:c0:5e:d8:58:03:8f:dd:ea:e5:6b:f2:43:1c:
                    04:e9:1a:2c:f6:fa:1a:e1:53:8e:d2:83:4f:0d:a9:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:07:8D:1F:51:01:55:FB:67:27:C0:56:09:8F:01:AA:40:22:5B
            X509v3 Authority Key Identifier:
                keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:b9:ca:2f:8a:12:5e:c5:13:6c:2e:b3:c4:b2:f9:21:ae:
         9c:f3:98:c6:8a:e4:01:b3:fd:5d:d4:90:e9:d1:75:ec:12:32:
         54:9c:78:fe:b0:58:e2:54:a4:0a:57:a2:2a:30:92:10:04:72:
         33:39:15:6d:ef:22:17:62:43:a6:22:cd:0a:b2:af:e8:31:9e:
         21:c0:ba:f3:50:5a:b5:75:7c:77:57:7c:e4:81:cd:ec:37:89:
         f6:af:d8:5e:25:7f:83:93:c1:43:15:f6:40:dd:ac:cb:dc:80:
         d8:94:17:f9:da:f2:31:2c:89:3d:d0:51:41:5c:52:69:7f:25:
         cc:1d:d2:08:bd:72:4e:6b:2f:c0:83:09:bb:6d:e5:88:c3:02:
         1d:3a:0d:ca:f6:79:ce:51:40:f6:99:47:fc:84:a7:36:31:45:
         ec:21:1f:27:13:d7:b8:4d:45:66:8f:23:9e:45:2a:d0:a1:0a:
         17:c9:3c:7c:5d:f8:9b:a6:68:cc:3f:86:f1:09:77:b4:a5:8e:
         e2:4c:e4:01:dc:3b:a0:f5:1f:81:ba:38:b5:47:91:9a:c0:c3:
         b0:88:b1:c7:8c:6f:a9:4f:6c:3c:3c:9a:8f:8f:cc:d8:03:5b:
         be:b0:7f:34:14:a0:6b:ef:93:9b:94:a3:ae:fc:06:e4:82:26:
         a6:4e:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:53 2025 by rpki-client