Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File:                     _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier:          aXSdS4dKvwOrOuoeDpq+AYvUQthKHwH+B6Q5glM3OHQ=
Subject key identifier:   C1:35:FD:D0:1F:DD:B4:03:35:12:21:86:9C:07:25:EA:D8:3E:93:EA
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer:       /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial:       0198D583C80479DCDC4CF181227802C532DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number:          052A
Signing time:             Sat 23 Aug 2025 06:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:39 +0000
Files and hashes:         1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
                          2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: cR4A+ioQR+TJdAiOnqCDeNNJFyJuQtYmGdgB6OufhSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:c8:04:79:dc:dc:4c:f1:81:22:78:02:c5:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
        Validity
            Not Before: Aug 23 06:00:39 2025 GMT
            Not After : Aug 24 06:00:39 2025 GMT
        Subject: CN=c135fdd01fddb403351221869c0725ead83e93ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:19:91:85:77:40:c4:83:fe:ac:0b:af:8f:
                    d1:7f:22:65:da:ba:1c:9b:0f:95:7b:f7:21:0a:51:
                    50:ec:0d:75:fd:60:3d:ab:7f:6b:69:89:d3:98:14:
                    f3:82:15:c3:51:d1:34:c6:eb:6d:ce:d4:31:d1:83:
                    57:fd:8e:a7:e9:f4:f5:05:92:69:63:b3:02:18:09:
                    e7:89:9f:fb:85:e0:77:2d:96:a2:f1:2f:29:8a:9b:
                    fd:12:51:9f:d2:90:1a:c6:0d:49:de:f2:e1:72:f5:
                    a8:1a:c7:22:38:d1:99:0d:b3:f1:1d:ae:ab:22:28:
                    a5:d3:90:97:fb:f1:22:61:a2:90:38:1d:d5:66:97:
                    ac:00:f4:ce:ee:e5:0d:b7:fb:4e:cb:31:1f:10:d1:
                    04:9f:ff:47:79:1b:87:28:54:43:39:3f:f1:2e:4f:
                    7f:6b:09:8f:0e:38:b1:d3:17:ab:c0:f2:ff:01:7a:
                    9d:c7:1e:ec:59:11:2e:51:30:4b:c7:7a:ef:cb:68:
                    a3:34:cf:14:38:e5:ca:57:c0:1a:4f:1b:28:eb:cc:
                    73:6f:3b:5a:1f:2f:08:23:a2:59:a8:27:40:0e:34:
                    89:e5:d7:b3:eb:f6:2e:5f:c0:ad:ec:37:7e:fb:1c:
                    4f:96:d2:b2:07:74:ea:c5:6f:52:f7:ce:0f:e9:7c:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:35:FD:D0:1F:DD:B4:03:35:12:21:86:9C:07:25:EA:D8:3E:93:EA
            X509v3 Authority Key Identifier:
                keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:07:3b:59:d6:ca:38:49:ec:49:8b:55:3b:2c:cb:a1:ed:
         cb:84:24:22:50:67:97:28:0e:ce:b8:d9:c1:96:f3:b8:86:4c:
         ec:83:b9:67:84:d1:f8:91:22:c8:c9:af:16:fd:51:a1:17:9b:
         af:c6:a5:df:b3:83:5b:a9:b4:e6:e9:c0:ce:2f:b7:db:8d:41:
         18:02:73:18:9e:af:26:43:39:58:a1:d9:02:ff:86:1e:8f:55:
         ff:b1:cf:8b:c6:69:71:f4:c3:10:48:c9:53:e7:bd:96:ed:a2:
         ff:d4:78:47:6b:f2:9c:4d:35:e0:1c:1a:6d:83:fe:7f:ec:97:
         2d:a5:c5:14:e5:d0:83:36:a9:29:a6:87:ab:85:32:22:af:d8:
         91:13:64:86:d2:62:a0:e9:3a:2c:b2:ce:22:2e:ef:9a:51:f6:
         f2:e2:f0:98:f5:bb:e4:a6:72:69:8c:d6:6c:ba:d3:71:72:9a:
         cc:36:94:d2:e0:fe:ab:0e:a9:9f:4c:d8:22:23:c6:66:4f:b0:
         41:dd:dd:76:d8:16:a6:eb:30:21:90:f3:32:65:20:60:38:06:
         f6:72:31:d1:02:55:36:1b:1d:59:f2:b2:01:57:07:de:8f:f3:
         3e:6e:69:95:e5:fe:73:4b:f5:2d:02:8f:30:99:b7:03:80:3f:
         cc:12:78:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8gEedzcTPGBIngCxTLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2QyM2EzOWVkMzY1NmY5YTYwNjRiNjA5ZDAyYTJmNmU0
YTM4MjcwHhcNMjUwODIzMDYwMDM5WhcNMjUwODI0MDYwMDM5WjAzMTEwLwYDVQQD
EyhjMTM1ZmRkMDFmZGRiNDAzMzUxMjIxODY5YzA3MjVlYWQ4M2U5M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFgZkYV3QMSD/qwLr4/RfyJl2roc
mw+Ve/chClFQ7A11/WA9q39raYnTmBTzghXDUdE0xuttztQx0YNX/Y6n6fT1BZJp
Y7MCGAnniZ/7heB3LZai8S8pipv9ElGf0pAaxg1J3vLhcvWoGsciONGZDbPxHa6r
Iiil05CX+/EiYaKQOB3VZpesAPTO7uUNt/tOyzEfENEEn/9HeRuHKFRDOT/xLk9/
awmPDjix0xerwPL/AXqdxx7sWREuUTBLx3rvy2ijNM8UOOXKV8AaTxso68xzbzta
Hy8II6JZqCdADjSJ5dez6/YuX8Ct7Dd++xxPltKyB3TqxW9S984P6XwGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME1/dAf3bQDNRIhhpwHJerYPpPqMB8GA1UdIwQY
MBaAFP49I6Oe02VvmmBktgnQKi9uSjgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGIt
ZDlhODA4ZWMxYWIxLzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGItZDlhODA4ZWMxYWIx
LzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBoHO1nW
yjhJ7EmLVTssy6Hty4QkIlBnlygOzrjZwZbzuIZM7IO5Z4TR+JEiyMmvFv1RoReb
r8al37ODW6m05unAzi+3241BGAJzGJ6vJkM5WKHZAv+GHo9V/7HPi8ZpcfTDEEjJ
U+e9lu2i/9R4R2vynE014BwabYP+f+yXLaXFFOXQgzapKaaHq4UyIq/YkRNkhtJi
oOk6LLLOIi7vmlH28uLwmPW75KZyaYzWbLrTcXKazDaU0uD+qw6pn0zYIiPGZk+w
Qd3ddtgWpuswIZDzMmUgYDgG9nIx0QJVNhsdWfKyAVcH3o/zPm5pleX+c0v1LQKP
MJm3A4A/zBJ4Zw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:27 2025 by rpki-client