Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File:                     jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier:          zjZUT+NlzS/0XUbVmP8rmypgUnt9XtshMqL+YeQHPas=
Subject key identifier:   F3:37:63:08:25:64:1B:13:E2:7F:BB:30:1E:C5:0D:73:48:BD:38:57
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer:       /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial:       01987373E0977632335174309F3417D47AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number:          020B
Signing time:             Mon 04 Aug 2025 05:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:30 +0000
Files and hashes:         1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
                          2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: mM8BeWn8RE7D0jv2IEWL8nZWfelJobym2b0DKLTIty0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:e0:97:76:32:33:51:74:30:9f:34:17:d4:7a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
        Validity
            Not Before: Aug  4 05:00:30 2025 GMT
            Not After : Aug  5 05:00:30 2025 GMT
        Subject: CN=f337630825641b13e27fbb301ec50d7348bd3857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:85:53:ae:44:05:9a:b4:4d:6b:e9:43:d0:
                    d5:9c:a5:5d:19:60:1b:e1:c3:94:e8:4d:01:67:ca:
                    f9:d5:6a:9e:4c:0c:9d:6d:74:09:24:0a:68:29:0b:
                    32:2d:10:ff:fd:a3:55:70:e4:ee:c1:14:ff:1f:ed:
                    f2:f8:91:9e:3d:7d:4c:9f:8b:83:8a:e7:fc:45:d2:
                    c4:a5:35:c9:0d:d4:18:80:f8:71:d2:48:91:ec:7a:
                    8b:e5:b7:cd:6a:0c:e5:f1:09:2f:6a:a8:4d:6c:a0:
                    ad:28:b4:8a:a4:89:67:ad:52:90:c0:f2:49:e6:45:
                    07:57:f7:b7:91:bd:22:33:29:dc:21:37:9b:c3:8b:
                    1d:d8:0e:b6:00:ec:82:83:21:ad:a8:01:9e:f9:e2:
                    1f:43:af:a5:f8:c7:ad:b2:8a:db:ae:ab:bf:c5:1f:
                    74:9a:2c:58:8a:79:a5:ad:5d:86:f6:ed:79:69:36:
                    a6:d3:af:c8:7c:2a:94:44:26:4c:2b:eb:b6:6f:82:
                    fc:9f:44:56:a9:0b:ec:a6:d5:6a:5e:1b:c2:d4:d8:
                    32:e9:eb:94:32:be:d7:6d:a7:bd:f5:5b:2b:d5:49:
                    4e:f5:d4:02:4d:7e:fb:2e:07:9e:6a:c6:da:d6:e2:
                    64:1c:d1:94:f9:8e:4a:85:98:53:fd:75:0b:8e:69:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:37:63:08:25:64:1B:13:E2:7F:BB:30:1E:C5:0D:73:48:BD:38:57
            X509v3 Authority Key Identifier:
                keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:60:f6:26:c6:18:cc:0d:e5:bb:be:7b:cb:52:ed:69:f3:91:
         5f:3e:62:da:8e:f0:ae:86:25:0d:ea:b6:e2:01:7b:3b:c1:16:
         c2:f0:91:9f:b2:33:7a:d6:5f:8a:de:fd:eb:71:ad:63:38:47:
         12:4d:49:eb:5a:b9:f6:c3:cf:2e:bf:58:72:63:42:02:3f:2f:
         ca:24:d2:bf:d4:4e:ca:b9:8b:4c:10:c6:68:b5:00:07:01:7e:
         42:44:d4:e8:da:6b:e5:2d:b2:5e:c6:25:0a:f2:76:9d:02:9b:
         1b:1a:43:74:39:f3:7a:20:4c:6c:f8:42:04:ae:d7:ce:17:e8:
         b2:76:7e:34:3b:59:70:42:3d:d6:cb:b1:f9:03:85:a6:76:da:
         f3:25:b2:d7:06:d4:aa:b3:8a:3b:5a:5f:a4:b1:be:c1:d0:05:
         f0:45:55:48:56:0c:48:5d:94:c2:38:8e:72:86:fa:17:6a:0b:
         06:17:d4:6d:94:7d:f7:fe:a1:2f:b9:0f:4e:8c:d3:bb:bb:23:
         cc:28:62:f7:7b:40:53:65:c7:1c:37:a5:6a:b2:65:df:46:22:
         74:5c:f0:50:7b:98:0f:1f:b6:cb:7b:d9:c0:0a:66:6c:02:dd:
         aa:fe:0d:56:f9:ef:0e:3f:a3:92:f3:24:dd:bc:c8:88:41:11:
         56:00:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:46 2025 by rpki-client