Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          zN0hU6Ys+2ZD6P3kCFyx/F1opw/UzopDEmOnb1J6oIY=
Subject key identifier:   8D:AA:5B:89:28:29:F9:A6:AE:6C:11:EA:5F:3B:B7:E0:04:1D:98:FF
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       0197CC83A2A4CC78CCBE9268BC8B1BB1EF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          15BF
Signing time:             Wed 02 Jul 2025 19:01:08 +0000
Manifest this update:     Wed 02 Jul 2025 19:01:08 +0000
Manifest next update:     Thu 03 Jul 2025 19:01:08 +0000
Files and hashes:         1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
                          2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
                          3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
                          4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: FAHNmzy0Rh6HGJpiq+8y/zT08Z6+ZNbj9AkPiX1x/dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:83:a2:a4:cc:78:cc:be:92:68:bc:8b:1b:b1:ef:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: Jul  2 19:01:08 2025 GMT
            Not After : Jul  3 19:01:08 2025 GMT
        Subject: CN=8daa5b892829f9a6ae6c11ea5f3bb7e0041d98ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:f6:7f:c4:79:d7:d7:9d:8d:fa:6e:25:34:
                    30:86:ce:70:27:09:d8:db:04:10:8f:f5:b5:71:45:
                    0f:7e:39:8a:ef:f3:55:bd:86:3b:72:2e:50:f1:c7:
                    fa:01:b9:79:bf:62:b9:40:7b:23:b9:b2:2b:bd:3d:
                    10:44:65:54:4b:df:15:bf:24:bf:29:28:7a:08:67:
                    91:da:79:1a:ef:ad:f3:4d:58:6d:89:70:54:f3:3c:
                    5e:b2:e9:18:f5:e3:95:38:b7:ae:9f:ff:39:65:17:
                    a3:9b:c8:c5:aa:60:51:a7:46:92:c2:d1:1d:d3:50:
                    19:06:3f:dd:28:06:38:7c:92:2a:7c:17:27:34:3a:
                    07:9d:74:a8:6b:a7:23:44:a6:33:3c:f8:54:21:16:
                    a7:ed:bc:6e:5c:3b:47:4e:df:bb:37:77:a8:88:5d:
                    85:f9:22:a2:e4:c7:36:d9:1e:ed:82:93:b8:83:30:
                    05:fb:4c:21:ab:87:3d:dd:e5:16:d1:5d:99:54:c5:
                    0e:be:80:cc:2a:33:1e:4e:7a:36:a9:8d:94:23:ec:
                    af:9f:fa:0c:cf:fc:41:44:7f:bd:2d:64:09:84:e5:
                    a1:3b:76:55:8e:ad:4c:ad:5d:39:3b:ad:c6:52:00:
                    d1:2e:8b:1f:0a:3e:96:3f:13:01:54:e6:7c:32:1b:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AA:5B:89:28:29:F9:A6:AE:6C:11:EA:5F:3B:B7:E0:04:1D:98:FF
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:aa:cf:94:c7:46:98:61:38:90:f8:5e:c2:1c:9e:e7:e4:
         f1:55:20:88:42:a7:fb:98:38:f8:27:c3:1d:14:9b:03:50:2a:
         bb:de:48:f9:05:36:56:a5:83:c2:fb:fe:9a:b6:c1:dc:2a:e0:
         dc:6d:89:44:05:e1:6d:4f:e5:31:50:90:c1:27:eb:1c:4b:85:
         cb:1a:4b:d1:af:87:5a:c5:42:5f:71:f5:96:05:79:f8:38:1a:
         cc:40:7e:e7:d0:51:65:88:e0:6d:65:52:76:73:83:82:4e:ff:
         51:32:f5:05:b7:49:36:71:c1:ec:86:e9:09:43:a6:a4:3f:84:
         5b:7f:4d:5c:5f:6d:0a:73:1e:74:9c:9f:e1:b6:c1:6a:da:6b:
         79:ef:c1:5d:67:c1:b9:49:97:68:63:89:37:fb:79:e4:9a:3f:
         7e:40:3a:9f:58:2e:bd:63:7a:71:e5:27:72:ab:6b:41:50:61:
         59:a5:3a:1f:fb:c2:b6:48:21:19:52:52:af:70:dc:2d:8d:77:
         24:7f:a0:73:b2:45:59:6f:fb:c1:7b:7c:bc:67:6b:f9:b4:eb:
         d8:5b:d0:7f:f3:42:91:31:ff:4b:a1:eb:45:d7:81:eb:3e:93:
         c5:9c:b0:88:c2:aa:8e:84:9a:df:f1:5f:bb:05:84:63:6d:74:
         82:8d:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:03:06 2025 by rpki-client