Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File:                     rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier:          x8ZQaILF9IXaMHlFJEyZYofa2xv7dkuuSegLjPIA+1M=
Subject key identifier:   81:9E:C4:54:08:DA:3D:16:A5:EE:D6:22:60:34:A8:2C:3F:56:DD:1A
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer:       /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial:       0198D54DD5BF2E56A98F5055044900800FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number:          0B3B
Signing time:             Sat 23 Aug 2025 05:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:44 +0000
Files and hashes:         1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
                          2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: UNZiZ4dOiKBnT4Sk5UUNrETg29Fp+qlrCyCexYPTpAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d5:bf:2e:56:a9:8f:50:55:04:49:00:80:0f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
        Validity
            Not Before: Aug 23 05:01:44 2025 GMT
            Not After : Aug 24 05:01:44 2025 GMT
        Subject: CN=819ec45408da3d16a5eed6226034a82c3f56dd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:45:eb:83:37:ef:ce:6a:c1:30:d0:09:cf:
                    76:a1:e5:ab:c0:b8:fb:d3:10:78:f3:18:4d:7c:5e:
                    ff:45:af:9e:bd:51:e9:6a:d0:52:7c:fa:da:1a:de:
                    be:db:b2:10:47:6c:62:5b:5c:a6:65:a9:d8:db:69:
                    da:ef:11:b0:c0:03:dd:73:c7:85:6a:ca:5f:5e:59:
                    96:eb:6d:65:ec:37:0c:1f:a3:95:74:4d:fb:27:50:
                    60:c6:3e:a2:b9:57:60:e3:d0:83:18:a0:04:30:2f:
                    08:aa:99:ca:b7:d2:a3:d1:20:a2:47:32:0e:32:0e:
                    bd:d3:cd:b0:d7:1e:a0:b7:54:3f:74:1c:af:03:e3:
                    35:d7:a6:54:c6:97:76:17:1a:de:eb:90:5a:a5:ff:
                    e7:cd:cb:82:f2:8e:b4:3d:5a:0c:81:ea:27:4e:ef:
                    fb:e4:20:52:d6:70:c1:6e:eb:ed:bd:f0:7b:6c:05:
                    a7:1e:7b:e9:2f:14:2a:e7:14:68:b9:6b:2b:ec:75:
                    e8:5d:d2:36:f5:01:00:73:44:1c:4e:0d:86:29:5f:
                    28:7a:12:ab:7c:19:e8:38:bc:3d:3f:59:1f:bb:a3:
                    86:1e:8f:9a:65:64:d4:c4:b1:1d:3f:80:84:67:66:
                    0b:b2:c0:e6:33:d7:87:62:c9:4b:78:02:8d:7e:2c:
                    36:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:C4:54:08:DA:3D:16:A5:EE:D6:22:60:34:A8:2C:3F:56:DD:1A
            X509v3 Authority Key Identifier:
                keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e5:2b:5d:95:38:5b:02:ad:a7:ca:9a:7f:9a:29:56:c3:4a:
         2a:15:20:cf:1e:c6:2f:00:b2:95:e6:6a:22:70:29:99:2e:39:
         26:9f:e0:e9:1f:0b:9d:9c:44:49:0d:ee:1a:bc:0a:68:21:b2:
         d2:7c:8d:b7:f1:bc:86:7c:b6:6f:55:49:e6:34:09:33:87:0d:
         19:ce:11:af:9e:3a:72:f2:92:12:6b:cb:85:eb:5f:82:b9:c6:
         99:5d:ff:63:4b:4b:74:94:db:51:ca:a1:dc:6e:86:76:a9:2f:
         ae:51:e7:07:e8:a5:0f:0b:f3:bf:e2:d0:85:aa:26:2b:99:06:
         2d:c5:34:cf:4a:3b:b8:c1:c7:a7:50:9c:96:73:72:ea:67:47:
         e8:4a:5d:39:cc:f4:c1:92:0d:37:97:a9:60:94:c4:ee:13:35:
         dd:e4:da:d5:9c:53:7a:d0:16:3c:e4:56:6d:45:e2:9d:f5:6d:
         61:5b:f0:42:2e:0b:ac:e9:46:80:7b:26:79:ff:82:6b:dc:69:
         85:b6:e5:3b:8c:c3:43:c7:2d:5b:fe:cb:f4:c7:a6:97:7f:d4:
         e2:bf:52:c7:f4:16:c7:3c:7e:17:cd:53:df:39:fb:e6:a9:bf:
         0e:84:e0:f4:a7:ea:b8:0f:6d:01:2e:01:bf:52:ac:2f:69:69:
         a6:4e:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:12 2025 by rpki-client