Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          HdhxTcTwcyC1JhNmDMUkLbuYjZ26xa+aNcsA60OgxvM=
Subject key identifier:   3E:5B:0D:6C:DD:DC:36:A2:2E:DE:8C:03:7A:D0:DD:73:3A:E8:50:55
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       0198D4A7DF516146149BB6E9B49B96228B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          1668
Signing time:             Sat 23 Aug 2025 02:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:28 +0000
Files and hashes:         1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=)
                          2: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
                          3: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
                          4: ap-CQNVkX98mFn3ro8X-u0Z5ytQ.roa (hash: +GioIV7wmV/PxdEFnTECTYhJxvq+IEyFtRu6eqMs3Ac=)
                          5: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
                          6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: EcLRFmwCTPuZYtB/HpPFauc/UULRBDWxxzyLZUFxprY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:df:51:61:46:14:9b:b6:e9:b4:9b:96:22:8b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Aug 23 02:00:28 2025 GMT
            Not After : Aug 24 02:00:28 2025 GMT
        Subject: CN=3e5b0d6cdddc36a22ede8c037ad0dd733ae85055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:23:f4:03:7a:9a:ee:81:c0:7d:d2:63:9b:
                    27:f5:26:14:6f:97:c0:3a:5b:ff:a4:dd:82:37:96:
                    cc:74:66:3f:0d:fe:67:ca:22:95:f0:01:93:d6:26:
                    1c:01:e6:0e:42:33:da:73:99:ec:ef:ac:c3:d8:39:
                    f0:12:4c:f5:2c:f1:82:9c:62:a1:ed:ac:04:79:a6:
                    58:85:fb:1a:35:0f:69:46:5f:df:c0:8e:55:94:f2:
                    1c:d7:13:ed:c9:97:2a:ae:71:e7:c6:c1:ea:57:4d:
                    7e:15:52:78:8a:1a:2b:91:2c:1c:7b:92:cf:c3:81:
                    ec:fa:eb:b4:13:d8:05:b0:36:ea:a8:65:11:a7:af:
                    ee:1a:fe:88:2d:fd:0a:f6:9b:7e:cc:07:c8:00:9e:
                    8a:16:21:61:b4:26:fc:d9:7d:39:98:a5:7e:13:43:
                    20:7f:d5:c7:0e:d1:4b:4e:59:d7:3a:d7:be:08:6c:
                    9b:e1:d3:93:eb:9d:79:de:d8:e6:6f:c9:5a:8a:f1:
                    95:d8:ea:ee:10:9f:32:06:ed:f0:5d:69:14:0b:3c:
                    ec:e9:0f:9c:f2:85:c4:9d:ff:7e:93:b3:5c:c6:bd:
                    67:eb:dd:75:c0:35:a9:0f:23:7d:5f:21:22:fb:44:
                    c6:73:48:d2:e0:8d:9b:ab:1c:53:5c:25:6a:f7:d8:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:0D:6C:DD:DC:36:A2:2E:DE:8C:03:7A:D0:DD:73:3A:E8:50:55
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:ee:44:a5:71:41:4e:4d:67:72:4a:8c:a4:a2:bd:fb:5d:
         f6:e1:21:b8:14:40:99:25:a8:55:a6:52:ca:e5:a2:23:54:74:
         71:e3:18:a5:e8:23:84:9a:64:73:44:3b:6a:ad:19:ef:51:0b:
         1e:fa:c0:a7:53:0c:f1:77:7e:25:a4:12:7b:bb:ff:22:0e:6e:
         85:33:6d:87:ec:4f:c1:31:30:17:15:21:ef:54:ff:8b:1b:4c:
         67:ef:28:18:37:6b:04:1b:51:96:8a:a4:f5:5b:00:08:f0:5e:
         47:64:ea:27:a6:87:fb:d3:80:dc:4b:d3:c8:5d:04:32:8d:21:
         3d:92:dc:3f:df:c9:d7:cd:78:c3:35:ea:4f:88:70:a7:2f:1d:
         76:55:a6:06:8d:cd:51:bf:83:95:0f:20:26:55:86:ff:fd:5e:
         b6:08:0c:35:56:c5:12:1a:63:1c:a4:26:70:4d:52:37:52:54:
         8e:3f:03:35:4b:11:0d:0e:b0:f4:0a:7b:0d:1c:4f:23:c8:a2:
         b8:70:be:aa:0a:ae:c7:70:c0:f0:72:9d:fc:d2:f8:3a:9b:af:
         68:62:b2:c8:c6:22:43:bd:c1:7d:ee:96:f7:35:cd:78:53:c5:
         4a:e5:95:3b:5c:e1:42:6f:84:11:1f:1e:61:d8:d2:82:98:49:
         24:e3:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:16 2025 by rpki-client