Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          UzSAmDw9DSQUCr2tA6R2OgQsoFa2EuJXckQpt9pDuQ8=
Subject key identifier:   48:55:0A:E8:EC:3E:63:9A:73:0C:CC:49:D6:51:AF:D2:05:99:80:84
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       0198820C2F35C0BECDC9290C119CD9F47251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          121F
Signing time:             Thu 07 Aug 2025 01:01:33 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:33 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:33 +0000
Files and hashes:         1: NDP41gN8CNlECLeeTXiB3irVa-U.roa (hash: NHPnUFyVxDx6ULqS5NRDRG6OIw5kEx/T23RBy4+HG3M=)
                          2: js2bBD_I5yJI3Ud9Hr2ey1HFBOk.roa (hash: xsXDDwFas5f9a39GX28p7wV/dlDbG2nAM+0coXG2hrE=)
                          3: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: qP4CXbRQJ4JqCSxAxDM3cMtShBe2FgygKGKk9DHsNBo=)
                          4: praewBGKObVyHJrk-EW3SR6etDM.roa (hash: SH0U3WS8ZCn7PM3WLsz5WjDkQUu5ZhLAkIQAfKgw1ew=)
                          5: uxTu2Af7G_ZNcFKBsHAS_BIRmZs.roa (hash: OAOgfI+ToS2uVsVUxA6LbD290GEB1RA6ap9BGvXIi7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:2f:35:c0:be:cd:c9:29:0c:11:9c:d9:f4:72:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Aug  7 01:01:33 2025 GMT
            Not After : Aug  8 01:01:33 2025 GMT
        Subject: CN=48550ae8ec3e639a730ccc49d651afd205998084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:45:38:ae:1e:ed:82:6a:67:36:56:fa:fc:
                    af:35:9b:f9:0a:c6:0d:4f:fd:75:08:1e:14:6b:79:
                    6c:23:6b:e7:22:42:2f:2e:99:48:87:91:d3:c9:31:
                    80:ad:e8:46:e4:8b:df:f8:dc:7a:44:22:dc:76:5f:
                    7e:6d:f6:24:c8:be:9f:e1:ba:55:30:c3:25:43:e3:
                    f6:4b:90:f3:ea:1c:68:2a:6f:ab:ef:f6:dc:7b:0a:
                    c9:2b:18:33:b9:8c:bb:31:e4:6e:a6:ca:4f:30:97:
                    a2:4d:43:0c:9d:a8:42:f5:13:c3:88:05:84:9d:7a:
                    e7:9e:ff:86:0d:e9:19:0e:15:dc:41:0c:76:37:c8:
                    07:4e:cd:f2:35:75:84:f4:01:a9:08:42:c9:bf:5e:
                    8a:26:40:84:22:63:0a:cc:76:14:8a:86:af:79:de:
                    75:93:5f:69:3a:08:92:41:01:a4:b1:9e:e7:28:97:
                    7d:fe:c1:74:0d:c4:88:5c:22:8d:90:09:cd:50:aa:
                    7c:72:a7:a6:41:e8:f3:99:8f:87:2c:0b:c0:71:dd:
                    9a:66:c3:19:6b:19:88:4a:20:89:58:44:15:ae:62:
                    a8:c5:82:22:9d:5c:79:5d:89:ea:97:49:34:3c:bd:
                    a4:c9:2f:65:fa:bc:15:0a:da:d6:94:08:8d:9b:db:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:55:0A:E8:EC:3E:63:9A:73:0C:CC:49:D6:51:AF:D2:05:99:80:84
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d9:67:08:d6:7a:e0:72:91:42:95:f0:90:e0:9e:d9:8c:38:
         bb:5d:3a:00:90:2d:3d:e0:20:aa:bc:42:03:e1:ec:bf:0a:1b:
         ad:0c:4c:2c:14:9d:87:25:31:ab:92:0c:16:c4:3c:51:c2:3e:
         e2:b3:67:78:4d:59:b8:9b:d3:d4:2b:be:c3:3b:ab:9e:d9:19:
         e0:63:27:64:94:a1:37:f3:0e:2e:50:06:f4:5f:b3:59:e6:90:
         58:68:53:e0:3a:67:27:2e:d6:15:10:dc:af:25:c1:20:fe:19:
         c6:71:cd:82:07:88:4b:a4:d8:2a:8a:c3:68:31:7a:58:29:a7:
         7d:d6:c4:b6:d0:a8:51:11:3b:a1:0a:4c:1d:7d:45:6b:5d:5d:
         04:2e:3d:92:a1:8b:86:61:1b:1d:a2:9e:5b:84:2a:e6:2d:95:
         a4:8d:98:f6:22:c5:2d:1a:26:51:e2:74:8d:ef:0b:99:c4:97:
         9a:08:b1:7d:75:60:6c:f5:a2:1d:ae:b0:ae:15:c6:54:a2:6b:
         7f:ff:a7:c6:52:1e:5d:fa:d9:6d:88:4e:3f:56:f2:83:45:45:
         78:7f:9a:3e:ba:01:1c:6f:e8:41:88:3c:01:ab:94:d9:ff:78:
         32:87:76:f1:9d:7a:75:33:c3:89:6d:b9:59:dd:9f:b2:50:34:
         b9:1a:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:16 2025 by rpki-client