Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          sXoOHcuGsrlQLAz/WdTg2j3N4MVnTVfuSobYYawQQLI=
Subject key identifier:   9B:A0:22:9E:FF:58:AF:BC:54:FF:DE:5D:FE:F5:97:BF:D1:33:30:19
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       0198D4A82D2DF811FDE4366584219A265CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          1682
Signing time:             Sat 23 Aug 2025 02:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:48 +0000
Files and hashes:         1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=)
                          2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=)
                          3: 1wyAYxpyA9FCN1lyvO-C57LVFXA.roa (hash: y/6pL2V+BG6MuxMmBUR7F2hu5ij3F/ux58ms3Mk1R0w=)
                          4: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=)
                          5: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=)
                          6: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=)
                          7: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=)
                          8: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: G58QX9MLbbkMm8MQu+TyqjPwbxdJ5q9AoC8t/xqH5/o=)
                          9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=)
                          10: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=)
                          11: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=)
                          12: ihHtPAN8QSDA6Zld01BcrS3MT-M.roa (hash: RzmSWNAhNrVDMebEkoT9y/i1rKzaQVygfWsAoClH5ZM=)
                          13: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=)
                          14: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=)
                          15: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=)
                          16: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=)
                          17: sgjR_TQoyxizIzgpiP-8OxPCBvo.roa (hash: iPQU3YE5gJm0+Jc6VvldyH+AsK4ZTxvbcSdICCWexFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:2d:2d:f8:11:fd:e4:36:65:84:21:9a:26:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Aug 23 02:00:48 2025 GMT
            Not After : Aug 24 02:00:48 2025 GMT
        Subject: CN=9ba0229eff58afbc54ffde5dfef597bfd1333019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:cd:64:cc:35:9a:f5:22:d9:29:ee:19:36:
                    b9:a8:b4:eb:67:a5:d0:fe:e4:ee:21:47:14:3a:3d:
                    20:a2:51:83:45:56:c7:02:34:ce:16:1e:fd:87:7c:
                    f6:f0:26:c8:ee:82:be:e6:54:49:19:0a:3e:39:e7:
                    a1:8c:a7:28:1a:e2:d5:c3:0c:01:bd:b4:50:d5:f5:
                    86:0c:1d:e2:75:42:60:17:4d:85:b0:79:fb:97:25:
                    bd:8d:f9:ea:6f:cd:4e:8e:db:02:30:90:25:72:49:
                    4c:be:b5:59:ed:54:90:bb:41:40:97:dc:b3:97:1a:
                    aa:87:c1:a7:10:78:56:7b:c2:fb:2c:d8:ca:11:30:
                    9f:fc:82:bc:06:5d:b7:58:d8:77:8b:b4:d1:a4:10:
                    79:31:6d:bd:86:06:75:69:52:01:56:d1:ba:10:72:
                    7c:f7:81:f2:94:c5:a8:53:ac:a8:fd:d2:bd:b9:a9:
                    17:21:f9:58:e0:76:74:eb:69:45:62:ad:47:2a:92:
                    87:dc:ed:90:d4:c6:af:63:e0:ce:f2:3e:43:c1:0a:
                    f5:58:8b:d5:80:d3:8a:84:47:60:58:ab:2b:d1:b4:
                    81:a7:27:77:78:ca:48:83:42:ca:75:45:f8:aa:50:
                    1e:33:ab:54:75:f3:7b:e1:d9:ad:15:07:4b:3d:ab:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:22:9E:FF:58:AF:BC:54:FF:DE:5D:FE:F5:97:BF:D1:33:30:19
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:85:b4:c0:5c:9b:e1:11:c9:25:45:81:16:a8:7f:61:b5:ec:
         66:b4:54:48:03:f8:16:bb:1b:f3:41:3f:c4:56:d3:af:f0:d3:
         db:b0:03:62:d9:87:53:01:34:f8:01:72:33:25:fb:49:b8:05:
         f8:a2:fa:74:f8:59:23:52:56:e1:49:ec:72:eb:eb:18:7f:cf:
         34:c4:c9:bb:2c:1b:0f:a3:81:85:8b:1b:a6:d0:97:1d:bb:7d:
         a8:b1:1f:fe:14:17:62:d0:a5:19:f6:17:ec:5c:9b:af:d9:73:
         59:39:cd:13:b8:18:7b:8b:ba:d7:35:0e:31:c1:9c:93:01:a6:
         f0:f8:95:a5:78:4a:ec:60:5f:9d:3d:96:c5:fb:c7:75:1b:62:
         6b:83:92:d2:8f:78:68:0d:8c:20:3f:76:60:5f:a5:2c:b0:e3:
         b3:e4:e3:eb:d0:55:0f:e6:5c:5b:45:11:61:c3:46:7a:ec:3a:
         fd:a4:9c:b6:33:cf:9d:37:cc:d6:23:87:90:7d:58:7b:42:12:
         e7:ca:7e:dd:8e:18:16:64:ed:ef:ea:85:dc:d4:45:1e:21:80:
         ce:d8:cc:75:27:dd:7b:53:55:74:cc:23:c8:30:48:c6:ef:0f:
         62:c9:1d:8c:ed:68:f1:83:5a:a3:dd:b5:45:93:2a:1a:8d:f2:
         c0:80:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:39 2025 by rpki-client