Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File:                     jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier:          PLfk01fYA8K/bdKY4/h7QL/dzPUxJkSI4KP+GSg+qyM=
Subject key identifier:   03:11:3E:45:95:3F:CA:16:7A:C8:17:12:8D:BA:BF:EA:BA:CC:F7:54
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer:       /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial:       0198D515A283C0233875B66A2CC6FF5BF50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number:          02BF
Signing time:             Sat 23 Aug 2025 04:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:21 +0000
Files and hashes:         1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
                          2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: 20aJzNQH5N9kHQ3dX8dhSkXUYVxCOZowJhdxCKZBUBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a2:83:c0:23:38:75:b6:6a:2c:c6:ff:5b:f5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
        Validity
            Not Before: Aug 23 04:00:21 2025 GMT
            Not After : Aug 24 04:00:21 2025 GMT
        Subject: CN=03113e45953fca167ac817128dbabfeabaccf754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:67:a4:fc:d6:2e:7a:c0:10:06:ca:d5:e4:
                    62:e7:38:fd:a8:17:17:fa:c7:08:93:09:5d:50:13:
                    c8:50:5e:d1:35:6b:da:e1:83:2a:b7:96:86:bb:ff:
                    67:55:9f:46:b3:e6:52:87:a0:64:26:4a:03:bd:4e:
                    fc:53:6b:de:d2:fc:c6:fe:d4:ee:3b:26:7c:ce:88:
                    2d:d9:24:aa:a0:73:32:72:e6:16:e4:cf:a1:96:a8:
                    b9:79:3a:f5:cb:a7:e1:bd:92:22:61:f1:c7:82:f2:
                    67:41:53:79:ff:e0:82:c3:e8:07:1f:62:f3:c5:51:
                    d3:ab:f4:30:ce:ce:b1:e1:78:45:99:42:7c:ca:d0:
                    89:fc:8e:90:57:8f:62:50:bb:8a:5f:85:24:0d:83:
                    63:7f:83:06:67:a2:62:c3:98:02:01:79:3d:07:84:
                    88:74:af:52:2d:66:30:77:9f:13:f4:69:70:6a:ac:
                    39:06:fd:40:fa:eb:15:05:f0:cf:39:b5:06:16:ac:
                    79:34:4b:70:83:f2:0d:ce:d3:31:9f:4b:69:4b:18:
                    70:20:9a:04:8a:39:8c:49:22:8d:23:e2:10:48:15:
                    65:25:93:1c:6d:11:3d:93:71:d7:8d:4a:14:97:b5:
                    42:be:54:b7:44:91:bb:1a:df:4f:a8:ce:0b:13:a0:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:11:3E:45:95:3F:CA:16:7A:C8:17:12:8D:BA:BF:EA:BA:CC:F7:54
            X509v3 Authority Key Identifier:
                keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:ec:c3:ea:35:f0:1d:00:0f:70:c1:4b:28:01:b7:79:bb:
         3a:b4:dd:2d:fd:12:c9:30:26:b2:81:ee:93:65:05:7f:22:c4:
         f0:59:b1:24:bd:c4:37:7f:7a:79:43:83:43:28:0e:26:ed:4a:
         3c:52:94:62:15:f3:e2:f9:f7:af:8d:99:78:4f:cc:f9:39:15:
         a5:09:68:f2:e8:73:f7:fa:c3:ae:90:b8:4e:f0:52:85:1f:e2:
         9c:59:50:e6:df:27:30:8f:ed:e5:13:cc:56:91:7f:bd:b4:36:
         e9:6e:aa:bd:d7:c3:45:92:61:ab:ab:8a:ec:45:9f:2f:0e:4a:
         d3:13:03:61:e0:c1:ca:f9:b5:16:08:27:cf:97:9d:d3:42:19:
         d0:41:71:44:9c:c3:3c:02:f4:b5:64:4f:ab:54:63:a3:a9:4b:
         ec:9e:42:53:93:a4:43:83:a3:7c:80:79:69:5f:7f:2c:16:81:
         10:cf:44:96:10:c1:c7:f3:38:74:1e:38:1e:a5:b3:a5:e3:9b:
         20:0f:53:57:d6:0b:34:fb:66:aa:d8:e8:5d:8a:ea:74:c9:d7:
         0d:35:32:69:98:7d:c2:a6:26:ef:62:df:3f:28:99:cc:f0:6e:
         ae:30:b9:dc:57:8d:fa:14:a3:3f:93:0d:2b:3d:b3:7f:4b:ef:
         ef:9e:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:27 2025 by rpki-client