Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          vCG8dHCLfBJq1iAob+Id+S8rrKqXn3L3k2IAl0Py8lk=
Subject key identifier:   D7:6F:21:1F:A4:A9:D5:E9:D1:6A:B1:E4:50:44:A5:9A:86:BC:2F:9A
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       0198861F5F81EFE99688E667142DC301F072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0CEF
Signing time:             Thu 07 Aug 2025 20:00:59 +0000
Manifest this update:     Thu 07 Aug 2025 20:00:59 +0000
Manifest next update:     Fri 08 Aug 2025 20:00:59 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: M8odGVJinqklFjD34wqsFB4x55KCc4IE/8tkLSYfD18=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:1f:5f:81:ef:e9:96:88:e6:67:14:2d:c3:01:f0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Aug  7 20:00:59 2025 GMT
            Not After : Aug  8 20:00:59 2025 GMT
        Subject: CN=d76f211fa4a9d5e9d16ab1e45044a59a86bc2f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:f8:c7:e0:7d:50:18:46:6f:d7:ca:5e:2f:
                    d2:2e:78:7b:32:ba:b2:12:b3:bb:90:be:b1:d1:c6:
                    65:72:b5:eb:62:db:26:4f:c3:ef:80:ac:1d:73:d3:
                    48:7f:03:90:43:90:d7:e6:be:fa:04:1f:8e:9d:e5:
                    a4:b0:6c:f7:c9:ec:95:53:45:4c:b9:9e:dc:35:5c:
                    4b:fb:42:df:99:b0:82:9b:84:34:7e:53:2f:58:ef:
                    2b:31:30:c9:92:db:88:ff:0d:c8:3f:12:bd:fc:ba:
                    19:b5:8c:5f:4a:fb:f3:ae:00:30:35:af:bb:c4:fc:
                    eb:42:46:2c:34:fb:39:ef:3e:7a:56:6c:3d:bf:0d:
                    0a:15:7d:3b:37:42:62:10:dc:83:33:d6:1b:a9:a5:
                    f5:5d:e1:cc:7d:2f:03:4c:fc:53:a8:de:a2:09:23:
                    20:3f:8b:86:3e:b9:e2:0c:0a:3c:ab:e3:92:1a:e6:
                    8c:d5:8f:31:4f:c9:9a:af:1d:d9:60:51:de:a0:93:
                    54:73:98:9d:6e:8a:0c:c1:df:e7:81:f8:a0:d8:28:
                    8f:67:65:82:e5:bb:68:67:67:2b:81:8b:da:88:96:
                    59:5e:94:73:b4:b1:5b:73:c5:ea:a7:5b:db:f9:5b:
                    a1:41:ab:24:99:79:33:a9:50:4c:38:45:75:31:3a:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6F:21:1F:A4:A9:D5:E9:D1:6A:B1:E4:50:44:A5:9A:86:BC:2F:9A
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:14:d0:d7:e7:3b:a6:77:8e:c5:2e:9b:2b:93:b3:87:83:
         73:c6:20:7b:f2:64:3d:e1:1a:ea:ee:18:e8:de:71:45:6b:6b:
         09:32:2e:48:2c:ef:4d:42:a6:f1:ca:8f:63:40:9a:90:85:fd:
         e1:e5:80:54:20:fc:47:c7:5e:01:cf:dd:5a:d7:6f:1d:b0:7e:
         13:8c:38:68:3d:ea:a3:65:3a:46:9d:e2:ca:3d:41:bc:58:3a:
         8a:b7:61:8c:a3:e7:e8:87:08:81:55:92:e4:4e:a9:cc:93:51:
         a3:83:8e:cd:ee:b9:1f:4c:c8:7d:00:5b:be:fc:4a:22:4f:fe:
         85:81:3a:13:7d:6f:3f:60:38:7d:87:1f:83:96:63:07:21:62:
         60:e0:f2:c7:1f:53:46:d0:16:c8:08:7d:6d:37:16:9b:ff:53:
         26:53:95:2a:70:d3:80:fe:4b:7a:85:59:3f:40:e8:4f:09:ef:
         b5:d0:35:7d:fe:57:c6:a3:76:d8:58:b3:bb:ca:ce:ec:5f:6c:
         6b:f6:2d:69:52:37:41:74:2c:4e:4e:f1:f9:03:b4:24:46:8c:
         89:62:0a:fe:e0:11:48:3a:65:8e:27:59:b5:01:95:0e:b2:0e:
         7f:1d:5e:b9:3d:7f:93:11:a4:c5:36:46:f6:d8:98:e1:0b:af:
         a7:21:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:15 2025 by rpki-client