Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File:                     jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier:          NBoGbcxmqGf/K0oC7W9YsYp9EJEiSEcjxFpXgsbmpm8=
Subject key identifier:   94:6E:7F:DF:CC:9B:30:30:BB:21:E8:9A:AA:1F:08:C8:13:DD:65:76
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer:       /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial:       0198733DDAA2E3FFD312F4AFC0A06BF6187A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number:          15EA
Signing time:             Mon 04 Aug 2025 04:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:30 +0000
Files and hashes:         1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
                          2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: 4A/1oPnkJsaeDDdpRKPiiVS1cQhlp+Xv0PGQSrKVKBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:da:a2:e3:ff:d3:12:f4:af:c0:a0:6b:f6:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
        Validity
            Not Before: Aug  4 04:01:30 2025 GMT
            Not After : Aug  5 04:01:30 2025 GMT
        Subject: CN=946e7fdfcc9b3030bb21e89aaa1f08c813dd6576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:c1:e6:74:7c:de:21:b9:69:be:4e:f2:c0:
                    7c:4b:4b:15:5e:bf:6b:fb:be:59:f6:24:49:2b:80:
                    9f:37:c8:47:0a:04:40:06:f4:47:c7:37:40:eb:03:
                    e9:35:ec:21:22:c3:4d:b9:27:11:ba:f6:82:bf:ff:
                    4c:df:db:65:0c:64:6e:21:74:7c:2b:b3:60:38:6a:
                    e4:e6:3a:6f:86:5f:df:fc:01:0a:e6:40:f9:13:27:
                    f2:a4:4f:97:8f:cc:af:cb:51:76:3a:09:89:ef:80:
                    47:37:89:bf:a5:13:db:91:75:03:e8:0e:c2:1b:f4:
                    a5:47:ea:66:17:14:5d:bd:8f:8c:ae:42:23:cc:b5:
                    0e:d9:36:b6:6f:56:55:06:2a:c8:17:b6:b5:33:7d:
                    19:20:fc:a4:ea:f9:62:8a:b1:7f:9e:78:54:98:95:
                    fd:59:bf:1e:c5:1e:e5:58:48:23:2d:bf:71:3a:fd:
                    3a:e4:65:bf:be:a7:28:41:3d:ab:a2:a0:24:15:d7:
                    4b:05:06:1e:f5:4e:1a:18:cf:60:04:4e:8d:d4:8a:
                    19:2b:12:30:1c:b2:32:8b:aa:fc:97:f0:96:32:79:
                    f7:52:2a:c9:e3:e7:1d:f3:96:5f:dd:2b:0a:03:4d:
                    d6:f8:ce:6f:c4:66:46:26:ec:42:6c:3f:9b:d2:44:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6E:7F:DF:CC:9B:30:30:BB:21:E8:9A:AA:1F:08:C8:13:DD:65:76
            X509v3 Authority Key Identifier:
                keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:61:40:fc:7d:03:13:ab:7b:1d:6d:e9:2e:be:01:46:7a:0c:
         ad:eb:ad:20:ca:42:74:ee:58:86:67:63:cb:57:60:43:bf:dc:
         99:8d:02:ee:ba:cf:a3:49:de:d3:80:fb:e6:a2:39:75:9e:b7:
         d5:3e:68:45:00:f6:9f:59:a7:cc:6b:ec:c4:e1:23:f4:0d:9f:
         33:ca:be:8b:ca:cd:90:18:ee:8f:0d:2e:4a:29:30:a1:e2:2a:
         8b:62:8d:f7:0d:21:cd:87:30:c3:11:32:58:66:75:c0:3b:cb:
         ff:d1:6e:60:05:4b:cc:1e:eb:4c:1b:a6:52:67:ca:8e:09:53:
         62:c5:e5:88:8a:bd:b6:80:28:ec:3f:b9:fa:2d:d1:e6:bd:9b:
         0e:75:0f:86:f9:66:4e:31:1e:06:61:ed:81:0a:06:fe:6a:a8:
         d5:ad:85:c0:7c:1e:76:4a:bc:37:78:55:04:f8:3b:19:ab:c7:
         37:77:4b:13:5c:f6:be:27:64:38:fc:d5:c4:aa:e6:4b:17:4b:
         3a:59:2d:38:95:5e:30:87:47:2d:cb:8a:12:19:86:11:57:ec:
         4e:38:ae:5d:95:03:dc:66:15:06:5f:a6:d4:d6:c6:65:57:42:
         b5:05:5e:81:8a:9d:f5:6c:18:2d:50:43:13:2a:cb:c5:67:14:
         d3:e2:64:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPdqi4//TEvSvwKBr9hh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk
ODYxNjkwHhcNMjUwODA0MDQwMTMwWhcNMjUwODA1MDQwMTMwWjAzMTEwLwYDVQQD
Eyg5NDZlN2ZkZmNjOWIzMDMwYmIyMWU4OWFhYTFmMDhjODEzZGQ2NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu3B5nR83iG5ab5O8sB8S0sVXr9r
+75Z9iRJK4CfN8hHCgRABvRHxzdA6wPpNewhIsNNuScRuvaCv/9M39tlDGRuIXR8
K7NgOGrk5jpvhl/f/AEK5kD5EyfypE+Xj8yvy1F2OgmJ74BHN4m/pRPbkXUD6A7C
G/SlR+pmFxRdvY+MrkIjzLUO2Ta2b1ZVBirIF7a1M30ZIPyk6vliirF/nnhUmJX9
Wb8exR7lWEgjLb9xOv065GW/vqcoQT2roqAkFddLBQYe9U4aGM9gBE6N1IoZKxIw
HLIyi6r8l/CWMnn3UirJ4+cd85Zf3SsKA03W+M5vxGZGJuxCbD+b0kRw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRuf9/MmzAwuyHomqofCMgT3WV2MB8GA1UdIwQY
MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt
Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi
LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmFA/H0D
E6t7HW3pLr4BRnoMreutIMpCdO5Yhmdjy1dgQ7/cmY0C7rrPo0ne04D75qI5dZ63
1T5oRQD2n1mnzGvsxOEj9A2fM8q+i8rNkBjujw0uSikwoeIqi2KN9w0hzYcwwxEy
WGZ1wDvL/9FuYAVLzB7rTBumUmfKjglTYsXliIq9toAo7D+5+i3R5r2bDnUPhvlm
TjEeBmHtgQoG/mqo1a2FwHwedkq8N3hVBPg7GavHN3dLE1z2vidkOPzVxKrmSxdL
OlktOJVeMIdHLcuKEhmGEVfsTjiuXZUD3GYVBl+m1NbGZVdCtQVegYqd9WwYLVBD
EyrLxWcU0+Jk/A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:29 2025 by rpki-client