Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File:                     INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier:          Vbj+HW42E68NAN8pnQqfpMSK7w3EkIEz54kOt9Zj5Zw=
Subject key identifier:   F7:4D:46:E4:24:14:B7:AE:88:A2:78:C8:67:D3:0A:8C:46:0B:BC:73
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer:       /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial:       0198D515F3BC7D1A47BEE1B1A2884812BE92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number:          0AC1
Signing time:             Sat 23 Aug 2025 04:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:42 +0000
Files and hashes:         1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
                          2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: FlNv2ytPUcc2tFmmi1EfWf1VcXxDP5LFbvQMbHMFLIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f3:bc:7d:1a:47:be:e1:b1:a2:88:48:12:be:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
        Validity
            Not Before: Aug 23 04:00:42 2025 GMT
            Not After : Aug 24 04:00:42 2025 GMT
        Subject: CN=f74d46e42414b7ae88a278c867d30a8c460bbc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:f7:d7:c0:ad:bf:c0:d5:91:60:d6:30:75:
                    6a:63:ef:9f:a1:d6:19:ab:49:d3:1a:f1:a1:1c:3a:
                    06:6f:cb:a2:d9:91:bb:9f:89:29:ca:5a:55:23:8a:
                    6e:1b:9c:56:c9:3a:f5:b5:2e:c2:be:81:df:49:04:
                    f4:05:13:ed:a7:0f:e2:ff:4d:ca:77:00:11:b5:d5:
                    02:a2:5a:af:35:22:9e:4e:82:2b:da:58:38:1b:db:
                    19:c2:04:41:b5:39:27:14:df:8e:c8:75:f7:8d:73:
                    a6:8c:82:d9:b0:c6:7e:cc:62:7f:fe:cc:b3:34:5c:
                    c2:ab:15:95:20:1b:d7:06:a5:38:8e:2c:bb:c2:23:
                    93:00:29:61:66:e3:b1:ee:b3:02:ff:fd:89:c7:5b:
                    53:6f:9a:b1:31:23:01:2b:cc:5a:92:7c:da:64:8f:
                    e5:c4:06:77:a9:e6:af:de:9c:26:05:ec:9b:86:11:
                    f0:5f:e9:96:9b:51:e1:e5:79:79:86:af:c6:d1:89:
                    af:f1:47:18:aa:48:dd:10:a6:7e:88:fa:4e:28:9d:
                    c5:ea:a8:a3:29:fe:bc:ac:4f:a7:39:6e:bf:ff:40:
                    a6:bd:67:33:08:51:2d:16:5b:49:e9:b3:13:12:cd:
                    5f:98:5c:55:03:0f:a3:e1:67:e6:62:10:1e:a5:df:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4D:46:E4:24:14:B7:AE:88:A2:78:C8:67:D3:0A:8C:46:0B:BC:73
            X509v3 Authority Key Identifier:
                keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:59:5e:bb:f8:fa:8d:72:f0:e7:ca:16:e3:41:1b:a6:47:e3:
         9c:a3:0e:24:d2:da:11:6c:f4:a6:6e:e1:f1:ea:99:cc:ba:35:
         46:a6:5a:f7:f0:6f:f0:e2:48:ee:88:32:f3:3b:c5:1d:2c:0d:
         fe:35:60:67:d0:0e:57:b3:64:20:1e:8d:b7:60:13:23:21:e7:
         68:f6:4e:42:6e:45:5b:7a:86:d0:96:f6:9d:3e:06:56:4e:a2:
         e1:4a:56:ad:7f:b0:47:5e:85:86:e1:f2:3a:b3:20:12:c3:61:
         86:2b:e3:81:12:2c:72:a7:76:20:bc:2a:ec:89:aa:c0:6c:52:
         5f:b8:47:4e:6e:9c:9b:6a:c9:73:5c:d6:4c:80:12:f9:a3:2a:
         02:7e:63:85:e8:8c:b4:c4:02:cc:3a:04:7e:06:9a:b4:2f:cf:
         e5:a7:7d:1e:27:20:dc:20:6c:0e:9c:5a:38:b4:a5:b1:fc:5a:
         1a:35:fa:25:2e:e6:6c:12:72:f4:69:ec:6f:e6:69:ab:0b:2b:
         a3:3d:88:1b:1f:b4:db:af:bc:29:d7:b6:3e:8b:19:02:4e:ac:
         d8:a2:66:e1:4b:97:e4:1a:aa:94:5b:d9:13:09:6d:31:6a:fa:
         c2:14:6b:80:a4:ef:8b:45:35:f5:59:99:2b:a8:49:c1:76:df:
         5c:01:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:03 2025 by rpki-client