Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File:                     jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier:          /jflLw2LJ8fJtWaZXw1iZxvwvxqhW/YZqhn4JKjN5KM=
Subject key identifier:   29:00:34:F1:FD:C6:BB:88:4E:93:D1:7B:D3:D1:AD:E6:B7:32:C2:B1
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer:       /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial:       0198D5F1B4C24237C16AC4691F2DE0C6512B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number:          022F
Signing time:             Sat 23 Aug 2025 08:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:44 +0000
Files and hashes:         1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=)
                          2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: 6DnNcVnCmBoS8AqU74sJ2qNpXSo0s115Sz94Wi5DNPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:b4:c2:42:37:c1:6a:c4:69:1f:2d:e0:c6:51:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
        Validity
            Not Before: Aug 23 08:00:44 2025 GMT
            Not After : Aug 24 08:00:44 2025 GMT
        Subject: CN=290034f1fdc6bb884e93d17bd3d1ade6b732c2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:7e:48:70:94:15:23:69:a0:69:97:01:4a:
                    f8:71:88:95:bb:83:09:f5:c5:35:85:3b:fc:12:b6:
                    97:a5:36:60:a2:a0:85:9f:9a:a3:70:cc:3b:09:12:
                    cf:41:a9:00:34:a5:dd:5f:27:bc:60:28:2b:d7:73:
                    c0:d0:b3:2d:c6:79:54:bd:e9:51:b7:50:ef:a7:65:
                    9d:0c:2e:3b:7c:f3:2d:7c:90:db:94:75:af:8e:35:
                    cc:96:f2:47:ef:0b:aa:3a:2f:c6:83:fb:5b:ec:22:
                    47:b1:f2:28:44:b5:91:e1:a2:09:19:a1:c4:ef:9e:
                    82:9f:9f:e3:89:4b:17:b9:b9:bb:f0:34:7b:9e:17:
                    d6:22:1a:79:9a:b1:ff:4d:0c:da:fd:bc:ae:e7:11:
                    09:4f:f2:1d:74:4b:d7:32:04:d6:e6:67:b2:39:7d:
                    5c:64:88:6a:98:2a:cf:61:f7:38:18:4d:73:e0:67:
                    13:83:7a:6a:ba:4b:8d:42:10:b0:c1:36:56:d6:ec:
                    d2:b1:49:c1:61:e2:a2:5d:50:0d:16:39:5f:c0:2b:
                    05:2a:01:0f:5e:47:62:9f:0e:66:ef:68:e1:af:4e:
                    11:8e:66:8c:d3:b5:2d:69:af:e7:40:28:1f:01:46:
                    23:af:75:3a:91:f2:6d:92:9a:68:4f:f7:28:df:54:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:00:34:F1:FD:C6:BB:88:4E:93:D1:7B:D3:D1:AD:E6:B7:32:C2:B1
            X509v3 Authority Key Identifier:
                keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:93:3c:e4:72:aa:3e:62:8c:80:17:18:59:76:d8:19:05:
         2c:9e:04:9b:dd:23:a5:99:e9:f8:65:9d:4f:c4:03:0c:b7:64:
         cc:98:5e:39:ee:b0:b1:b8:ba:23:a0:6f:d5:47:76:5e:ae:47:
         0f:a2:a9:b4:b9:5c:8b:ce:41:b0:02:83:bc:6b:61:af:f9:73:
         a2:bb:0a:c7:45:4e:ab:63:bf:82:96:91:c7:63:75:38:d3:3f:
         b1:70:c6:7a:5d:c3:36:ad:bf:8c:37:59:f0:25:cd:a2:82:cc:
         cf:d5:ac:6d:6f:43:92:04:7c:b2:13:09:5f:df:b2:ad:73:bf:
         27:20:34:9d:27:51:53:06:7a:c6:5e:41:44:d3:91:3b:51:4e:
         32:dc:5a:b3:4f:28:10:31:8c:62:74:ef:63:56:8a:8a:e0:60:
         17:fd:4b:9a:dc:ef:a0:1a:80:66:d7:1c:fe:e7:ed:1c:90:9f:
         35:64:c4:37:5b:e1:1b:30:d5:72:ad:44:50:1c:9e:b8:17:1c:
         e7:44:38:2c:70:80:1b:ff:31:6f:6d:ab:b9:b3:76:5c:63:9f:
         58:fb:f3:5a:9b:92:36:d8:3a:72:cf:d0:71:b2:11:ac:06:f7:
         ee:1e:69:d9:89:a8:bc:fe:05:7c:b6:06:76:8c:89:07:cc:b2:
         d6:08:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:36 2025 by rpki-client