Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File:                     j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier:          Vtyjke1MEvI06qxUCpkqsAck8WKudmeHachhh/2iECw=
Subject key identifier:   AC:FC:AE:17:14:19:06:D5:E8:F6:A3:82:03:75:2C:0F:5C:5E:55:5D
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer:       /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial:       01987306B9B3AE83C26D04BC0C5235DA002D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number:          02FF
Signing time:             Mon 04 Aug 2025 03:01:17 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:17 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:17 +0000
Files and hashes:         1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: 5LHzwnmcI0hPAYJ0qvAq21allmnbUWz+tawtiShfP8M=)
                          2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:b9:b3:ae:83:c2:6d:04:bc:0c:52:35:da:00:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
        Validity
            Not Before: Aug  4 03:01:17 2025 GMT
            Not After : Aug  5 03:01:17 2025 GMT
        Subject: CN=acfcae17141906d5e8f6a38203752c0f5c5e555d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:f8:f8:aa:95:a9:c6:2a:ec:36:c1:f8:93:
                    cd:55:cc:2e:25:d3:28:e8:0c:6f:5d:87:51:ff:92:
                    3b:bf:e3:0b:c6:0b:17:aa:ad:b6:71:66:35:9d:e0:
                    d9:b7:2a:e7:1a:28:56:f5:4d:93:bb:31:4b:17:14:
                    81:8a:bb:cb:7d:f4:46:5d:43:2c:ec:aa:9f:4f:62:
                    0a:66:bb:5a:c7:5f:12:93:d3:15:86:bb:6e:f3:f3:
                    91:90:c7:6b:32:0a:8c:92:90:12:63:68:05:0f:c0:
                    72:67:b1:3f:5d:58:18:85:36:16:6a:e4:fc:52:29:
                    81:c2:20:30:36:e3:a6:bd:c4:ab:7f:d0:f5:8a:2f:
                    7e:10:e7:92:dd:be:4b:bb:8b:ee:11:e8:c1:f9:bc:
                    13:ce:05:d0:3f:c2:b4:33:43:32:0b:9b:43:e6:05:
                    76:9b:15:be:cd:c0:de:d3:16:fe:5c:6d:ba:0f:05:
                    1f:8e:53:06:3f:73:5b:83:96:c1:80:d5:67:dc:9a:
                    d9:d6:87:69:29:44:8d:4c:33:a3:05:17:c2:39:dd:
                    78:79:b0:1c:dc:b0:44:60:ef:4c:92:0c:5c:e6:88:
                    0b:85:c4:bb:f0:f7:6f:76:f6:4f:98:83:e1:44:fa:
                    12:98:0b:5a:8a:98:8c:e4:99:78:e5:c2:41:50:41:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:AE:17:14:19:06:D5:E8:F6:A3:82:03:75:2C:0F:5C:5E:55:5D
            X509v3 Authority Key Identifier:
                keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:b7:f6:5b:cf:96:4b:97:91:03:4b:9a:67:d4:ab:86:00:
         5d:4a:f1:10:d4:5a:8a:02:04:3f:75:d3:57:4e:7d:29:ca:59:
         bd:56:b2:e4:a2:2a:34:1d:71:2d:a3:49:d4:db:68:6c:7e:20:
         7f:fe:ae:91:ef:15:b4:51:f1:f2:81:51:a3:e8:e7:c9:b1:f7:
         21:0a:ef:ab:23:63:ed:f1:d0:c6:eb:1a:16:f3:2b:e1:ec:5b:
         14:f1:15:65:b3:86:d0:6f:f0:a6:1b:e0:a9:f9:bc:64:e3:36:
         4e:8d:6f:8b:a6:f3:be:1e:22:6b:37:78:35:bf:e9:ed:d3:29:
         19:fb:68:b0:fb:33:16:b0:b3:e3:3e:2f:73:04:28:dd:e9:2b:
         3f:50:c0:ca:c2:e0:04:cf:8e:db:88:54:55:69:2b:5c:91:9d:
         4f:c2:09:d8:cb:f6:1b:1d:43:66:42:6d:2b:94:da:f5:9f:06:
         e7:ae:5a:80:96:44:e3:b2:0d:26:36:f4:d9:03:a3:8e:6f:4d:
         6c:d2:d8:0f:b9:52:23:ba:95:8f:be:fb:65:8f:dd:e2:2a:b8:
         58:cb:10:ad:ee:fa:5c:78:e5:76:db:2c:32:1c:2e:ca:30:a7:
         2c:a7:a3:7a:8b:b3:62:9b:32:d9:dc:dc:03:5c:7b:d2:fe:8d:
         d6:06:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:56 2025 by rpki-client