Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File:                     jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier:          /2HIdrtHB6Q2dZ53nNOM1ypq28vwBl6g7fryNE/A7Ws=
Subject key identifier:   F5:E9:42:01:48:EB:5D:B4:93:A7:BC:B6:6F:E1:6B:8A:09:AE:76:8E
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer:       /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial:       0198D8BD6F866152F77B9B62BE12527DF115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number:          0236
Signing time:             Sat 23 Aug 2025 21:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 21:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 21:02:30 +0000
Files and hashes:         1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: 0Her112SO5aJQ82l87z741g5QtXW7PGmB00+2fN5OWk=)
                          2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:bd:6f:86:61:52:f7:7b:9b:62:be:12:52:7d:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
        Validity
            Not Before: Aug 23 21:02:30 2025 GMT
            Not After : Aug 24 21:02:30 2025 GMT
        Subject: CN=f5e9420148eb5db493a7bcb66fe16b8a09ae768e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:a5:f4:3f:be:3e:a4:5e:27:f6:3d:fe:af:
                    71:af:56:20:47:3b:b5:13:2f:67:00:8e:bd:65:ab:
                    55:94:62:da:da:f4:cb:03:3f:72:65:52:c7:cb:c0:
                    7f:56:16:6a:ee:0b:83:66:70:54:7d:ed:7f:03:17:
                    2f:e6:9f:d3:39:ba:24:19:4e:8f:0e:24:31:38:41:
                    92:bf:23:e4:4d:c2:29:4e:53:de:d8:ee:2e:12:99:
                    c5:0a:fa:a5:ce:94:59:64:ab:07:d5:46:72:db:dc:
                    fa:df:a5:55:5a:45:a6:71:28:08:f0:a0:eb:65:5a:
                    f9:fa:3d:04:b0:1e:05:c1:c6:7e:9e:40:9b:48:9d:
                    49:af:7f:7e:6b:c0:5e:61:27:0f:f2:57:4a:55:80:
                    9d:2f:5f:43:4d:ca:48:d5:ed:29:5a:24:8b:b5:a5:
                    d4:a0:18:fa:e2:2c:93:ec:f4:78:d9:c0:24:83:31:
                    70:34:7f:44:13:7a:e9:86:55:2d:48:8a:09:34:26:
                    48:47:a2:91:49:da:d4:9e:97:25:4d:3b:4f:7e:4c:
                    7f:ed:06:ce:ed:e6:cb:74:e5:b7:dc:e3:d7:9e:ac:
                    0b:3a:f2:c3:a5:ae:49:e7:dc:a1:cb:77:f0:48:b3:
                    d7:2d:13:02:36:ce:7b:b7:d7:a5:24:c0:32:f3:6a:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:42:01:48:EB:5D:B4:93:A7:BC:B6:6F:E1:6B:8A:09:AE:76:8E
            X509v3 Authority Key Identifier:
                keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:29:fe:15:e1:74:ce:b3:75:18:89:6b:ef:02:54:7f:b6:6d:
         80:0b:31:b0:ad:94:b0:f2:83:27:d8:7e:9b:d0:d7:ab:45:2f:
         77:e9:85:d9:80:f3:46:c7:7b:69:a7:1a:af:19:19:a8:90:6c:
         bd:9d:cc:0d:2d:ca:8d:cf:65:8e:26:19:c5:3b:67:cf:ae:e9:
         db:4b:8f:88:dc:03:fc:05:8d:d0:11:7e:eb:63:63:3a:0d:40:
         ba:c9:48:f1:a4:61:72:fc:9d:b3:be:e5:96:39:1c:f1:80:ee:
         7d:4f:5d:a2:f1:65:ac:71:31:c9:00:96:97:a3:3f:b5:2f:bc:
         48:4c:16:58:8c:1e:01:61:3d:19:05:e9:4d:c8:4e:6a:34:18:
         8d:ba:ac:4b:c0:c8:7f:ae:bd:1f:0f:9f:f5:46:0b:a5:c6:99:
         fd:51:08:4a:e0:ce:f0:48:81:21:52:7c:da:6d:f5:ae:5b:ec:
         6a:fa:35:1d:02:b8:39:55:b4:25:52:7f:ee:b4:63:4e:6a:a3:
         88:bb:99:0b:86:ba:26:b3:40:31:de:9f:09:90:49:58:4e:17:
         2e:96:8a:bd:d3:25:3e:5a:e9:6e:7b:ce:79:18:66:77:d3:4c:
         44:b9:ba:f9:89:5b:fc:9f:45:fb:9a:a7:7b:82:52:3f:6a:c2:
         80:91:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:20 2025 by rpki-client