Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File:                     jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier:          rgtuC4FGsOkxQqF88xHOX7e15ads1qUZqteybFnyln4=
Subject key identifier:   87:AB:DB:DE:09:DE:B2:48:34:10:A6:61:1D:1F:BD:BE:E1:79:DC:14
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer:       /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial:       019896A627DE169EECFE9E328C953E973AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number:          162D
Signing time:             Mon 11 Aug 2025 01:02:08 +0000
Manifest this update:     Mon 11 Aug 2025 01:02:08 +0000
Manifest next update:     Tue 12 Aug 2025 01:02:08 +0000
Files and hashes:         1: RJ12iqBIGMdg63G0MMvg2LDMix8.roa (hash: sESw+q0gARk5gtp41IohBHW+APoentCrsvNrV3WWi+U=)
                          2: aUmaQEWRoE1QO_xmwTCfYrd0iAI.roa (hash: KmZy81mfy9sZbmzpjyQc2GLJJhLJJJePfwOXkxp6EMc=)
                          3: h17YXZJyvSVJKfuRPJwacmnQTko.roa (hash: gCm2d2N9654aioOcioiAbPWA94RRy8WmG63hHdr1o54=)
                          4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: cn0Mgmi6wIVmQzlcQGTyl5ygYD8L4gyLfA+ZpiTOTaE=)
                          5: vum5ModJUNyeXtPPKIV3l7J0g94.roa (hash: zPI/RZhzXTNYTyqGgKwTajtQQ1UJGC+Yon4LK77IQPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a6:27:de:16:9e:ec:fe:9e:32:8c:95:3e:97:3a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
        Validity
            Not Before: Aug 11 01:02:08 2025 GMT
            Not After : Aug 12 01:02:08 2025 GMT
        Subject: CN=87abdbde09deb2483410a6611d1fbdbee179dc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:b9:a2:46:04:12:72:a0:1f:1a:49:d0:5a:
                    fe:5e:b3:06:1f:e8:13:f5:c0:4d:a5:8d:99:af:af:
                    64:b5:86:cf:55:a0:65:99:92:52:f5:8e:a7:33:f7:
                    cb:63:c8:53:76:2f:49:45:80:59:65:8d:40:29:49:
                    1e:5d:21:d9:b4:37:ed:1b:1f:5a:ff:cd:7a:ce:93:
                    63:3c:a7:5d:77:9b:06:cd:6f:fd:6a:1f:43:20:92:
                    af:f7:82:46:a7:39:db:85:ca:7b:b2:c2:b4:a1:a6:
                    65:06:e0:5f:c0:f4:d7:ca:60:3f:eb:ca:bf:d1:3a:
                    7c:24:56:d4:8f:9f:1f:ae:1b:60:8c:5f:e6:7f:86:
                    76:4b:12:9f:28:d0:2c:f4:cb:12:bb:29:0b:ae:0e:
                    e1:c5:7d:88:81:83:fc:83:0e:fc:de:3e:97:1c:b3:
                    b8:06:8a:07:aa:d2:83:43:8a:bb:94:12:10:d9:cb:
                    01:52:e5:7c:17:46:01:ce:e1:1e:c9:b4:1a:13:d3:
                    2c:1f:65:11:b7:29:cb:11:db:96:9e:a6:1a:5c:5c:
                    07:1c:1f:83:d0:e5:70:e3:ee:8c:9c:3f:7a:31:2e:
                    59:04:b0:1e:46:71:be:b7:25:df:61:b0:ab:cd:35:
                    b8:e6:6e:2e:9f:9d:a7:4a:24:e6:55:ca:e2:32:d0:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:DB:DE:09:DE:B2:48:34:10:A6:61:1D:1F:BD:BE:E1:79:DC:14
            X509v3 Authority Key Identifier:
                keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:cc:d4:ab:2e:15:c8:65:4d:69:e9:df:b8:a9:65:ac:7a:6f:
         4b:8a:3f:8c:2e:ec:85:5f:7f:c6:db:ed:0d:0e:28:bf:79:63:
         4a:09:be:b9:e8:64:ff:31:5e:3b:f2:57:02:a4:ac:aa:7c:bd:
         68:1d:4b:9a:10:08:49:7d:e7:99:38:4c:78:90:7d:38:2b:d4:
         af:9f:7b:72:69:06:a0:6b:1d:29:7a:e2:a2:b3:aa:c2:c9:53:
         9c:51:98:5f:17:1a:07:5c:05:4c:3e:bd:91:24:91:48:74:eb:
         8c:28:cb:00:a5:00:1a:e0:01:37:e7:04:b2:df:90:a7:52:e6:
         65:27:34:44:ca:99:a7:9c:aa:8a:97:65:f0:08:d8:2f:31:a3:
         b2:ed:80:bd:7d:4b:16:02:54:63:05:94:e5:fd:b2:8b:3c:48:
         8a:f8:57:23:be:c0:71:46:04:14:74:61:0b:f0:70:20:f3:be:
         f7:46:49:c9:a6:2c:da:ed:f7:74:92:14:16:22:35:c2:c6:6c:
         28:fa:42:23:e7:d0:8a:e4:76:a4:8c:ab:f1:91:d0:51:d3:02:
         6d:2b:44:34:6a:a0:23:f9:a5:5c:e6:29:e0:80:f5:af:6b:08:
         04:0b:73:db:3c:56:61:85:c5:b4:6d:b8:a2:63:1c:4e:a8:33:
         37:07:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:59:04 2025 by rpki-client