Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          Otjvaa8M/pgn5X+px8syc3kY/XxnEH3Yp0z3ff262eM=
Subject key identifier:   1C:AA:8C:C9:BE:36:BC:6F:71:2D:24:CC:67:87:59:98:6A:E7:65:05
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       019894B8857D728306099A58A4C753BE6802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          123E
Signing time:             Sun 10 Aug 2025 16:02:57 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:57 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:57 +0000
Files and hashes:         1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
                          2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
                          3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
                          4: StWwJRIdLVG2AMr41LeqT3VLiMY.roa (hash: eHQmJVkUkkZ8vtMtrgklqHvKfJQIUIWoCE0Hf2r79IE=)
                          5: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: 9f8kTOnLyNMPSKCUXk3x89C2/c6DxSRpJPvqf2RbBFk=)
                          6: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
                          7: xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa (hash: ntcfKusbnH6G9LFWYHB/n9gMG8BQt0xnq4XPHB5frGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b8:85:7d:72:83:06:09:9a:58:a4:c7:53:be:68:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: Aug 10 16:02:57 2025 GMT
            Not After : Aug 11 16:02:57 2025 GMT
        Subject: CN=1caa8cc9be36bc6f712d24cc678759986ae76505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:d0:9a:ca:b7:a5:48:d1:48:87:8a:d6:d3:
                    e7:2a:27:1d:ed:f1:2c:6c:41:01:72:f9:af:6b:5d:
                    5f:b5:bb:aa:be:60:94:3f:8c:83:d6:dc:46:8a:17:
                    f6:30:ad:80:56:fe:cb:76:f1:0f:78:c1:41:1a:f8:
                    0b:d5:47:8c:b3:c8:c5:46:9b:03:44:fd:03:ec:df:
                    99:9d:9e:55:37:0f:7a:51:e9:57:98:00:ed:b7:c8:
                    32:3b:24:72:5d:52:7f:b0:4f:df:b9:4f:f9:29:b6:
                    69:80:10:92:24:8b:4c:7c:06:2c:19:fb:c4:5d:87:
                    2f:6d:33:3e:7b:84:1e:17:1c:2b:01:ee:cb:b5:bb:
                    be:fe:46:c7:ab:0f:a7:23:b0:ee:cd:c2:a3:55:c8:
                    b1:13:af:72:e9:57:da:2c:01:64:12:1d:09:8a:5b:
                    cd:4c:85:6e:64:af:7a:4b:3f:0b:0d:d8:08:22:b1:
                    56:da:e2:e8:3a:0a:2a:58:a2:58:a1:ce:8e:dc:a5:
                    ca:9a:57:b0:32:2f:37:8b:a2:85:27:a1:f2:bf:6c:
                    29:5c:b4:c6:b7:f0:47:c9:af:9c:5a:d0:b2:d9:00:
                    63:fd:2b:52:12:9a:8b:47:bf:bb:72:81:48:23:d3:
                    af:73:4d:6a:b6:1f:cb:c7:61:28:d4:56:22:6b:f3:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AA:8C:C9:BE:36:BC:6F:71:2D:24:CC:67:87:59:98:6A:E7:65:05
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4a:de:80:d3:24:cd:d4:89:64:76:43:52:73:9b:32:5b:25:
         f7:61:4b:e7:ff:65:9a:bc:36:d1:39:81:e4:d9:74:dd:62:0c:
         93:1d:67:e7:ee:6a:81:96:f2:65:62:21:83:5d:98:01:51:d8:
         f1:a6:2a:d1:4c:3d:61:92:67:c4:9d:6e:93:98:e3:9c:57:4e:
         22:85:1e:e1:60:08:b9:26:19:d2:88:34:b9:eb:97:5f:c0:a7:
         ba:27:e7:7b:cd:bf:64:da:1d:20:5a:77:da:7e:d9:16:0f:5e:
         0c:64:16:4b:b4:cb:e0:91:23:f4:8e:51:8c:db:8b:81:2c:a5:
         6f:34:17:8a:19:fc:17:47:3f:34:2f:c7:0f:a4:85:f9:80:6d:
         1c:72:c5:64:18:5a:cc:41:4a:28:3e:df:9c:da:91:7e:ea:da:
         87:09:95:46:14:2d:86:11:d7:fe:d1:78:45:ed:50:fe:69:f9:
         6e:c7:59:5b:75:02:2f:0c:e7:1e:0f:99:ea:2c:39:72:2c:74:
         1b:07:54:18:90:07:ee:97:71:9a:3c:06:e8:1a:81:68:19:08:
         ba:9b:f4:ea:5c:22:6f:f4:1b:82:31:6c:d4:2e:3d:ae:ce:e2:
         48:3c:39:77:f9:19:5d:df:1d:2e:15:80:bd:21:dd:44:15:0f:
         f0:de:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:25:43 2025 by rpki-client