Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File:                     rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier:          FfQTXffZw0SKhNPolhgItaLj7A50CpGtQHEJ8WdYZ0M=
Subject key identifier:   79:FA:2A:1D:95:DB:F9:07:90:D5:B0:3D:D5:52:F2:32:D6:1B:AB:E0
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer:       /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial:       019887A07320699DDF6BCD9089EE156E6E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number:          0EDE
Signing time:             Fri 08 Aug 2025 03:01:36 +0000
Manifest this update:     Fri 08 Aug 2025 03:01:36 +0000
Manifest next update:     Sat 09 Aug 2025 03:01:36 +0000
Files and hashes:         1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=)
                          2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: VYMO3zQAornK20bF16f1cMPdWZOjgAjczycUmJoCcZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:a0:73:20:69:9d:df:6b:cd:90:89:ee:15:6e:6e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
        Validity
            Not Before: Aug  8 03:01:36 2025 GMT
            Not After : Aug  9 03:01:36 2025 GMT
        Subject: CN=79fa2a1d95dbf90790d5b03dd552f232d61babe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:ef:b1:68:31:44:f3:cb:c5:15:74:57:06:
                    a1:08:21:4b:87:53:b0:f0:3a:e6:7f:21:a3:04:aa:
                    0a:9b:36:ee:9d:85:64:cd:75:47:9f:ec:ef:e3:bc:
                    26:20:d9:4d:88:18:dd:f0:45:d7:f1:02:70:09:ef:
                    bb:f9:6a:d4:cc:17:ef:eb:8c:9e:eb:74:13:bc:52:
                    3e:ea:e4:bb:74:12:98:30:a8:72:3e:35:81:85:aa:
                    13:53:06:d2:cf:cc:10:a9:0e:20:9a:4b:30:5a:ff:
                    99:c5:00:39:97:be:7d:ff:3b:75:17:6e:68:b6:1a:
                    ba:a5:9d:64:03:2e:f5:80:e8:f4:88:4d:6f:24:a8:
                    b8:ee:63:24:5f:84:a7:d5:d6:fd:93:04:f1:a6:47:
                    1b:09:fe:cb:fc:aa:d5:8b:cd:cc:24:a9:10:ab:e5:
                    cb:d6:bc:59:0a:4f:11:4f:db:80:2a:74:1d:08:b6:
                    12:35:3d:63:95:ec:b0:f5:11:1d:b1:1d:55:fd:01:
                    16:2a:9f:04:4f:6a:a0:32:3e:f7:6c:21:7a:2a:14:
                    8f:42:41:aa:ed:de:8e:b2:70:55:1c:59:8c:cb:3f:
                    8e:1e:3e:ce:fa:1f:3e:d1:07:8c:eb:a5:e5:ca:8c:
                    a3:6d:40:19:81:8a:27:2a:b7:6d:e8:72:ab:d4:6c:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:2A:1D:95:DB:F9:07:90:D5:B0:3D:D5:52:F2:32:D6:1B:AB:E0
            X509v3 Authority Key Identifier:
                keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:7c:db:3b:d7:bc:0f:d8:83:2a:2f:20:cf:44:18:ce:07:
         7f:ce:69:db:a2:df:cf:2b:c2:e8:80:84:f9:d4:f1:8c:aa:3a:
         bc:96:b9:8c:cf:34:cb:b6:84:a5:88:9c:85:a5:81:d8:80:fd:
         32:c0:6f:48:3e:ac:51:4b:9e:0c:07:bc:fa:e9:64:27:0f:fc:
         e7:fb:6e:0b:77:f6:97:f1:61:5f:bc:2a:06:15:3b:8d:8d:30:
         62:33:78:1a:7a:aa:d5:cc:2e:47:12:d5:8b:e0:03:f2:b7:bc:
         56:2f:0e:9f:de:80:69:99:05:56:b7:f8:ee:7a:c8:98:68:90:
         c6:0a:07:df:0c:9b:8f:f7:3e:2e:6b:1f:7d:8e:6b:41:5e:5f:
         4f:bf:35:69:43:2d:61:12:87:ad:76:45:00:04:b1:7f:03:a8:
         ac:e8:1a:ac:0c:a5:1b:71:a2:51:4f:80:5f:57:22:01:c5:ca:
         17:3b:80:37:ed:1a:0f:a6:25:f0:94:98:8f:dc:7e:17:7d:48:
         03:d7:16:03:73:4c:3e:e5:b3:c9:8f:66:48:82:67:a6:bf:56:
         98:43:8e:bf:46:50:68:59:d2:66:0e:56:7e:07:31:9f:e8:06:
         35:1c:be:c6:ac:d1:3d:67:77:b3:6a:aa:fe:97:bd:da:e1:ed:
         74:7f:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:25 2025 by rpki-client