Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          PHNnQE5ppMKOuCnJqq0PzgKasGAs2TkVFkZCScg4+yo=
Subject key identifier:   BB:6F:FA:46:37:8A:F4:B1:FA:69:21:4A:CF:1A:F7:2A:9D:0A:8F:D2
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       0198744FC0E5626E7C4D145894BE8B844DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          06F2
Signing time:             Mon 04 Aug 2025 09:00:40 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:40 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:40 +0000
Files and hashes:         1: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: ZW8MDY86VjZtm00hIiU4W6aDPwK6t1LSi9ZsrLbaavk=)
                          3: rDlkyigziSazpq7KkBehs1Ktw-g.roa (hash: 0blcMDi8SQKGoP7zdqimF2o0peaDeYPg+Ie2kFh43K4=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:c0:e5:62:6e:7c:4d:14:58:94:be:8b:84:4d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Aug  4 09:00:40 2025 GMT
            Not After : Aug  5 09:00:40 2025 GMT
        Subject: CN=bb6ffa46378af4b1fa69214acf1af72a9d0a8fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:79:89:49:49:be:3d:49:e2:8a:69:84:6e:
                    5c:50:4b:47:a4:b2:6f:af:44:c8:65:7d:16:1d:32:
                    7c:d7:91:b2:0c:e3:f1:db:e4:3c:5b:fc:d3:e3:86:
                    89:a8:3d:0c:fd:e9:86:45:39:42:96:d7:5a:05:be:
                    69:90:23:f3:51:c4:da:0d:4a:f2:73:e1:16:92:ef:
                    92:b3:51:ba:5a:55:83:55:d3:cc:ce:69:54:43:33:
                    50:ee:dc:56:bd:78:ad:9c:d9:37:39:4b:02:1d:02:
                    e9:eb:e9:7a:ad:4d:49:a9:d5:4f:4d:17:4f:7d:08:
                    68:af:45:98:c2:b0:22:da:d4:d1:05:b7:36:af:9f:
                    9c:d0:81:c4:a1:4f:b3:8d:7e:5f:a8:de:6a:97:8b:
                    7b:47:5b:9c:f2:67:eb:3e:f7:e2:1a:08:ed:44:5a:
                    eb:7d:88:f0:fd:8a:f0:2d:d0:b2:64:27:63:48:7b:
                    45:15:95:dd:8c:c7:29:76:1f:9a:36:2f:44:48:dc:
                    08:8e:03:ad:cf:d2:f7:da:0f:29:56:f7:56:57:a8:
                    08:03:fc:09:86:2f:d6:26:d0:22:12:2f:26:c0:84:
                    2c:21:53:90:c4:bb:0d:a2:4d:a6:af:d1:11:3e:b1:
                    9f:59:da:fe:16:25:67:5c:42:12:51:07:c0:d7:93:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6F:FA:46:37:8A:F4:B1:FA:69:21:4A:CF:1A:F7:2A:9D:0A:8F:D2
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:5d:8c:b7:2b:e3:1b:6d:37:13:97:ab:07:aa:36:2a:4f:
         90:ff:16:0f:46:17:d6:32:0b:7f:c7:f1:0b:cc:f3:d3:48:43:
         b4:87:e1:88:76:b0:7d:d9:18:30:f5:f5:b1:29:f4:0b:ce:94:
         18:e8:21:e3:3d:77:79:83:e3:c9:79:ce:2b:76:dd:8d:b6:86:
         e8:40:ab:59:4c:47:cd:27:12:76:3d:28:ff:90:da:f0:77:c0:
         32:95:ce:28:89:c8:34:a0:c3:02:d7:4b:b0:c6:e1:79:ac:6a:
         69:a9:fa:57:1a:e9:b6:e7:07:49:73:fb:e5:1f:6e:c2:79:77:
         9a:d4:08:57:01:22:53:b5:cc:6e:70:36:1e:6a:a4:ba:7f:aa:
         c1:ae:ce:f5:1d:70:28:e4:07:78:63:1b:53:31:6f:14:02:55:
         ce:cc:c1:bc:af:fa:53:56:7d:e1:f4:39:db:86:d4:dc:f9:9f:
         71:aa:e4:7a:33:c9:ea:8a:a9:b3:fd:36:8f:4b:02:b3:bf:cc:
         bb:c1:e4:cb:3c:7c:37:db:77:c7:c2:57:ad:00:3c:d0:37:b8:
         1e:71:76:68:13:27:8f:c9:57:57:a7:fa:2b:1f:f1:65:57:f9:
         d5:ee:7b:f8:a9:95:f3:53:d6:c3:8a:5c:f6:38:fe:23:5a:3b:
         56:40:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:02 2025 by rpki-client