Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File:                     jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier:          SS/mMsQ/NWOnc6LlVAQ7K9b7twTuErt44af9j7gO980=
Subject key identifier:   A0:AD:B4:C6:68:5F:14:1C:EB:B0:F1:D6:54:C0:56:02:1A:A4:0C:AC
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer:       /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial:       019872CFB39C4A40EF4BB0EBFDC68A73D05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number:          0136
Signing time:             Mon 04 Aug 2025 02:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:11 +0000
Files and hashes:         1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=)
                          2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: 1GOVbrDtG6VuNlJhJ/Axc+bam+im7mIqQHA9bv9cA2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:b3:9c:4a:40:ef:4b:b0:eb:fd:c6:8a:73:d0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
        Validity
            Not Before: Aug  4 02:01:11 2025 GMT
            Not After : Aug  5 02:01:11 2025 GMT
        Subject: CN=a0adb4c6685f141cebb0f1d654c056021aa40cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:13:dd:f3:d5:c6:fc:20:21:1c:12:02:10:
                    e0:ad:4b:5e:b7:f3:7d:51:db:dd:69:c9:d3:3e:b2:
                    01:77:80:ae:89:dc:3f:2b:0b:e6:e6:0d:8d:16:4f:
                    7c:0d:15:3b:d1:53:40:4a:2b:d8:82:64:b5:80:ae:
                    84:0c:63:fa:a8:b7:50:62:3b:71:e9:9d:70:a8:19:
                    61:df:10:52:a0:a0:20:92:ab:d2:33:c3:4a:b2:62:
                    9a:ea:bf:08:95:5a:15:fb:86:9a:e1:28:a9:80:41:
                    73:27:09:77:02:0d:a7:db:48:c5:56:e7:2f:ca:ed:
                    d8:54:dc:3d:0e:ba:fc:d6:57:b4:f2:70:64:b5:09:
                    70:53:62:69:d5:35:b4:12:c3:99:55:21:7b:49:77:
                    e0:6b:06:b4:6b:75:53:1a:04:95:ea:7b:dc:76:54:
                    b3:80:bf:01:45:2d:a5:d1:1c:c9:f0:e2:2c:26:5f:
                    ea:48:58:15:39:fa:e0:5e:16:9a:1e:48:d7:95:f5:
                    b8:cf:ff:95:57:5c:16:cc:45:43:91:14:05:41:be:
                    57:7b:29:6c:c4:dd:02:28:63:13:e2:90:96:07:6e:
                    30:2f:46:0d:b7:2f:d9:0c:88:54:67:aa:ed:87:23:
                    7c:15:84:54:eb:a7:ee:b5:ce:f4:32:39:f6:70:67:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AD:B4:C6:68:5F:14:1C:EB:B0:F1:D6:54:C0:56:02:1A:A4:0C:AC
            X509v3 Authority Key Identifier:
                keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:13:37:e4:76:1b:16:09:ec:11:7d:ce:97:14:b6:78:34:
         63:2e:54:5f:81:c9:e6:08:7e:77:59:56:b1:8b:bf:28:ef:6d:
         c7:9f:42:99:ae:e8:12:86:5c:4d:db:43:2a:30:ea:84:ff:45:
         ab:13:75:14:49:8c:6d:a5:16:f6:8d:b2:10:73:44:26:3b:76:
         54:05:0f:97:67:87:64:3c:11:39:aa:83:37:e0:ec:1c:a3:4e:
         01:7d:66:24:94:9c:7f:07:d1:53:da:c9:bb:b9:97:5c:1b:00:
         0c:87:19:d5:a0:63:c9:de:7c:95:1f:bf:a7:22:5a:6d:81:4a:
         02:d1:a3:3c:23:d0:54:3d:3d:81:d3:83:6d:25:38:82:ee:f0:
         21:bc:1c:ee:64:ab:79:25:ea:5c:9f:48:f2:d8:2c:b4:30:02:
         8e:40:b1:3e:a9:2a:df:de:99:c3:17:ab:3e:9e:78:83:76:c7:
         22:08:05:72:c6:fa:1d:de:4b:88:3c:9c:2a:4a:20:38:8f:b6:
         4f:73:f9:d4:9b:dd:81:80:ab:a7:45:f6:80:2a:83:fc:29:10:
         c6:39:2d:36:d3:c7:fd:41:92:50:47:4a:6d:ea:e0:31:e4:24:
         2c:4d:aa:ad:dc:7c:98:71:67:c1:2c:75:88:44:a6:ab:f4:c8:
         65:73:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:12 2025 by rpki-client