Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File:                     0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier:          QOwTz2gZIo7IgxMw70yexWHxlLwexHPPtT9G00fqNIk=
Subject key identifier:   76:AB:8E:60:22:57:8F:32:92:09:A9:A8:00:0A:EE:23:F3:05:59:94
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer:       /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial:       0198D661036FD4A477C0CA266A5007F10051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number:          136A
Signing time:             Sat 23 Aug 2025 10:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:18 +0000
Files and hashes:         1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: 6iptA/9Eo/KELupBv/y9S6EznK/n6+fm4xkNJOOaRGI=)
                          2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:03:6f:d4:a4:77:c0:ca:26:6a:50:07:f1:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
        Validity
            Not Before: Aug 23 10:02:18 2025 GMT
            Not After : Aug 24 10:02:18 2025 GMT
        Subject: CN=76ab8e6022578f329209a9a8000aee23f3055994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:3f:33:d6:25:32:87:24:6f:ee:24:6e:73:
                    47:80:2e:ec:d6:76:ac:28:63:04:ce:74:52:23:c7:
                    14:53:f9:7e:9a:b0:c8:84:6c:00:67:8a:66:d8:7b:
                    d5:b2:e0:be:53:cc:9f:52:aa:a3:37:42:64:3b:4d:
                    0d:f7:33:77:d1:f2:48:12:66:78:dd:12:bd:88:e4:
                    3d:33:e4:e8:f9:46:a3:b3:f6:55:b5:35:b0:02:5c:
                    fa:fc:24:86:bd:25:5f:cd:e4:44:c9:50:05:9c:34:
                    2e:42:34:65:e7:a9:9c:2d:d6:8c:ac:b8:db:00:07:
                    bf:c2:5d:6f:29:76:17:32:d4:4a:75:58:3d:c6:f3:
                    6e:2f:1f:30:76:b0:fd:b6:40:4f:b7:80:a2:3a:dc:
                    1c:8f:91:21:59:9e:08:3a:f0:37:c5:d2:f3:af:fa:
                    ea:14:75:8c:0b:21:74:0a:3d:c7:06:7b:c5:00:2a:
                    2c:a8:2f:f8:a2:26:76:94:6b:88:e6:9b:fd:e4:ac:
                    f2:04:ce:81:11:2a:f5:52:d2:46:ee:41:78:c2:25:
                    0a:63:d9:a1:3d:a2:4f:fc:37:35:24:fa:be:cb:a2:
                    a7:07:89:61:46:f1:9f:75:c0:50:21:b3:11:db:9f:
                    a7:e0:cb:7f:36:96:03:bc:24:a7:d2:ae:25:d1:4a:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AB:8E:60:22:57:8F:32:92:09:A9:A8:00:0A:EE:23:F3:05:59:94
            X509v3 Authority Key Identifier:
                keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:b5:05:c2:7d:4e:54:3f:7c:c9:25:24:3a:22:98:15:69:
         09:23:ec:7e:fe:f7:9e:05:0b:8c:4d:37:a7:af:3c:fc:57:92:
         fb:d8:4e:69:52:b0:bd:16:65:96:ea:57:23:93:01:d1:f2:07:
         f4:24:90:ef:3a:c1:bf:a8:06:58:c5:81:f6:7a:e6:b7:11:8d:
         c4:47:69:7e:23:ba:3a:77:e6:ca:cd:cf:e8:4a:08:3b:f4:09:
         14:f1:c0:4a:ce:2e:d8:d0:be:6d:13:9f:00:cb:12:e1:f3:52:
         5f:8e:34:80:78:d9:e5:99:67:90:cb:dc:ec:03:5d:37:38:f9:
         3c:9d:84:e9:81:c2:81:e4:5d:d3:1a:8e:ac:44:e9:2f:d5:dd:
         9a:a5:b8:af:d0:8e:ee:33:95:4a:fc:5a:c6:af:d8:16:d1:9e:
         52:4d:dd:c0:07:b5:9d:f9:ee:c2:74:3f:43:d3:19:72:fc:80:
         ae:c8:a5:e2:35:06:5a:8a:a9:97:74:96:d5:6f:cf:e2:6e:88:
         51:34:07:fe:9b:1b:20:4d:d0:80:9e:a6:f6:3e:84:6e:58:ab:
         99:59:f5:1c:e5:1a:32:db:a2:95:da:90:d0:05:cc:38:7e:2c:
         4a:81:dc:e8:94:2a:1e:b0:7e:2a:06:cb:c0:8b:dc:1b:a9:77:
         bc:bc:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:51 2025 by rpki-client