Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File:                     jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier:          oLXNmnwQXXKvToGaaC8zc8VbSL4HZO/dQfqgdoQ7PgU=
Subject key identifier:   27:9A:49:36:00:AB:2C:FB:E9:6C:7A:E1:D2:40:0A:CF:A2:D0:9B:EE
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer:       /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial:       0198D660A541F7DECABEECA630823006B34A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 10:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:54 +0000
Files and hashes:         1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
                          2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: usmGR1AZ1IG96slP4q8dO03nylA+MCXHIhDUnhQPAQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:a5:41:f7:de:ca:be:ec:a6:30:82:30:06:b3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
        Validity
            Not Before: Aug 23 10:01:54 2025 GMT
            Not After : Aug 24 10:01:54 2025 GMT
        Subject: CN=279a493600ab2cfbe96c7ae1d2400acfa2d09bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:e4:dd:a8:d1:d2:62:95:41:59:a9:95:a6:
                    0d:3c:ac:b2:e8:6f:93:56:21:20:3c:8b:73:66:14:
                    1e:4d:4d:44:ac:fa:8e:b2:4d:89:f2:fb:f2:00:fa:
                    ad:29:5d:ee:de:63:e4:f2:21:e4:9d:91:be:40:f4:
                    84:5c:02:50:79:ea:5a:2e:27:ae:ad:09:ec:1e:fd:
                    93:3c:e0:4b:d6:18:0c:27:4b:25:a0:b0:a7:7a:43:
                    4c:1b:00:42:5b:5c:c9:51:c5:bc:d5:c1:ef:b8:59:
                    9a:8c:3c:a9:e6:b6:f9:5a:eb:c7:28:da:a2:80:2e:
                    9f:08:f8:3c:3e:48:68:be:82:e1:81:68:22:f9:0b:
                    b3:7f:86:08:84:bd:0c:a6:d0:99:68:e1:d5:d6:f1:
                    25:a1:12:73:b9:f8:af:4c:83:d3:85:53:e2:ba:f5:
                    07:08:d8:5b:3a:78:07:06:7a:a2:f8:0e:c3:fc:e5:
                    ae:27:11:15:a5:82:7a:34:a8:06:6d:44:06:aa:43:
                    ef:30:37:b7:7e:4f:7d:39:82:aa:ad:4e:cc:02:b6:
                    8a:75:d4:77:19:71:64:f0:ac:7c:38:5c:f9:58:82:
                    30:b7:40:09:52:0b:f4:93:33:80:fe:60:8d:40:17:
                    88:71:1d:96:e4:21:de:b3:f2:51:56:86:d8:55:58:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:49:36:00:AB:2C:FB:E9:6C:7A:E1:D2:40:0A:CF:A2:D0:9B:EE
            X509v3 Authority Key Identifier:
                keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:46:bb:69:b3:2a:30:de:63:03:48:ae:b2:52:5d:48:da:29:
         4b:e4:51:a3:ae:51:07:1a:46:80:09:ca:65:c9:cd:1e:e3:47:
         65:2e:ae:39:f3:8a:3c:7b:61:4d:df:f6:7e:ab:83:29:6c:46:
         71:6d:6b:d2:b8:7f:f0:e4:52:a8:e8:e3:e6:c6:e7:62:d5:0f:
         0e:17:48:fd:eb:83:20:91:b0:d5:cb:1c:a1:00:0d:72:09:a2:
         2b:d9:f3:46:39:2b:db:a1:0b:7a:a5:d4:42:18:4b:84:9f:18:
         85:76:49:08:bb:7e:ae:58:f7:db:6b:90:6d:25:5c:a0:59:72:
         d6:8a:d6:66:16:d7:3f:85:2d:0a:db:0f:b5:4e:2d:83:45:26:
         ce:2e:35:1e:c5:be:c7:0a:e5:78:c0:3f:57:17:a3:0b:27:e6:
         c0:bc:db:bc:31:c3:56:17:c7:c6:cc:79:a8:ac:95:59:74:55:
         eb:61:6a:af:32:3d:8a:c9:97:9b:a9:e6:72:b6:50:29:9f:5f:
         66:95:b0:fd:0c:9e:96:3b:49:75:3f:0b:aa:83:96:26:cc:2a:
         8a:ed:d0:dd:8c:c6:67:26:c1:a7:af:64:06:09:7e:fd:39:c9:
         ba:8e:a4:bc:fd:3c:30:4e:77:99:8e:4d:2a:6c:bd:1c:75:de:
         95:ec:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:00 2025 by rpki-client