Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          /qp2LscjXL/v1aZispZJhOClD5XjzZ5/ahVI+u3HvPA=
Subject key identifier:   03:6F:37:FF:3D:ED:60:D5:FC:DF:B9:57:11:57:DE:EE:C7:18:95:77
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       019873E1FF1421147DD1E864A3849094A953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0CF8
Signing time:             Mon 04 Aug 2025 07:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:47 +0000
Files and hashes:         1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: Ie6CV3GmbssYYZ76NgJFNCDzyNdu9wijPTuFzEC6pJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:ff:14:21:14:7d:d1:e8:64:a3:84:90:94:a9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: Aug  4 07:00:47 2025 GMT
            Not After : Aug  5 07:00:47 2025 GMT
        Subject: CN=036f37ff3ded60d5fcdfb9571157deeec7189577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:dc:32:6e:d1:3f:e9:d6:0d:cd:f8:5d:73:
                    16:f6:33:a1:d3:30:1c:a3:1f:48:65:e2:72:fc:02:
                    13:f3:d2:fa:4b:c7:d8:89:b6:f3:eb:0d:ce:73:2e:
                    7a:5d:56:1a:8d:85:ce:54:b7:1a:a5:d0:6f:be:3f:
                    49:a5:45:8d:a5:3d:3c:e5:1b:64:30:f8:af:42:8b:
                    46:58:c0:e2:08:18:f4:d7:a9:f8:4d:73:aa:43:5a:
                    ed:4b:77:73:18:ab:61:ed:22:f5:70:62:62:5e:d1:
                    7c:5d:e6:99:08:3b:bd:d1:cf:db:82:3f:ee:e7:4d:
                    5e:45:c0:06:a5:63:7c:ae:07:81:9e:0c:9a:46:d6:
                    8d:06:38:3f:dc:68:70:56:2d:a2:f1:e2:c6:53:06:
                    ac:fb:ee:2f:a3:13:3f:78:cd:70:dc:ec:23:4a:83:
                    da:b4:dd:48:31:4a:4e:88:6a:57:fd:72:d9:24:62:
                    3a:80:fa:fe:a9:86:d1:61:49:6d:ad:7e:5d:8a:bb:
                    45:5b:d8:12:99:ce:de:ee:d3:cc:e8:46:fd:eb:57:
                    e2:96:51:0a:eb:d2:4e:dc:b5:0d:56:30:1d:3a:c1:
                    6e:29:4c:d7:2e:e7:d7:8d:70:ca:64:8c:45:30:43:
                    70:70:20:e3:69:90:c2:ad:75:8e:dd:80:b6:5d:e5:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:37:FF:3D:ED:60:D5:FC:DF:B9:57:11:57:DE:EE:C7:18:95:77
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:ec:c2:a0:c8:bd:55:68:b4:3f:83:22:29:31:f7:fd:8f:
         6a:10:d7:e2:8f:52:ff:83:cc:72:09:aa:d9:09:92:52:4a:da:
         5f:57:fd:ce:3e:18:05:d8:2a:bd:b9:7d:ad:ed:85:48:0b:1d:
         ff:b2:1e:33:c9:54:4b:bb:af:0b:e9:65:41:76:2c:7a:ae:a3:
         b2:7d:93:36:8b:8c:14:b7:ad:50:f1:89:12:fc:7a:e1:4e:0e:
         39:ed:bc:e2:d2:df:2e:65:a2:67:bd:28:44:ac:a1:dd:6c:73:
         f8:84:28:ce:09:d9:41:f0:1f:7e:85:30:b6:c2:1a:89:0c:b6:
         ab:9c:82:47:30:2a:89:4f:17:4c:b2:7d:63:bb:20:24:eb:a9:
         a0:bc:b0:45:00:01:80:32:3b:a1:83:16:7d:87:b4:aa:5e:2c:
         90:22:66:5c:f6:bb:30:57:e1:87:2a:1e:96:c4:84:82:ac:03:
         c6:f2:26:37:66:16:61:7a:5d:e4:de:4d:8b:96:1a:0a:c1:4e:
         b5:31:90:64:30:b6:54:82:a9:22:0e:ce:46:bb:fd:66:2f:f7:
         65:d9:ab:81:2a:ec:da:66:fc:8d:44:66:2d:9e:a6:6c:ec:96:
         b1:98:fc:bc:9f:37:ef:72:00:97:32:9d:7c:c5:85:e7:cf:ca:
         27:ac:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:43 2025 by rpki-client