Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File:                     jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier:          TYy5Yf+OdbWJyWJIwflYIyUM12SULMwkmXT0iPeCC1o=
Subject key identifier:   92:ED:B0:19:7C:6C:DF:38:98:49:30:6A:95:EF:40:4E:3E:5C:80:11
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       01988166EAB53513E6CD1A8AB0B2D06DA842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number:          0460
Signing time:             Wed 06 Aug 2025 22:01:02 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:02 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:02 +0000
Files and hashes:         1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=)
                          2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: JhOvbzPlW6cRkRyxQjpO58IEAGFSe8IRj2mKFAq5p2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:ea:b5:35:13:e6:cd:1a:8a:b0:b2:d0:6d:a8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: Aug  6 22:01:02 2025 GMT
            Not After : Aug  7 22:01:02 2025 GMT
        Subject: CN=92edb0197c6cdf389849306a95ef404e3e5c8011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:c4:3d:bc:25:f7:69:df:17:a2:67:cc:15:
                    04:9a:c3:fa:77:f9:9f:37:39:5d:c4:d2:ff:1f:8c:
                    ad:65:8d:18:bf:8d:f5:33:80:86:c5:3e:fd:61:bc:
                    2a:58:ab:b3:3d:00:94:ca:cf:80:54:7e:68:78:3d:
                    5d:c5:d6:41:b2:25:e5:3b:15:8f:f5:56:4e:fc:27:
                    71:65:f3:cd:a7:ba:5f:8d:f7:52:66:9b:ea:ad:91:
                    4e:a3:5a:56:e5:61:79:8c:b8:48:87:7f:07:ea:0d:
                    67:05:34:a9:85:85:5a:39:ba:a1:38:ef:e6:1d:80:
                    4c:2a:88:ee:92:f0:b7:37:85:6a:ef:f1:9b:74:6d:
                    c8:4b:be:49:a8:ff:2e:9f:54:68:33:e3:6b:9f:bc:
                    e2:da:2b:bd:64:3a:e7:fe:1f:1d:0b:ef:7c:3b:aa:
                    13:ec:a2:fa:fa:bf:97:ab:12:94:63:89:b6:a8:6f:
                    58:61:d7:d2:76:56:38:39:3e:d9:2c:cd:99:d2:48:
                    21:35:35:e5:35:e3:ed:9d:01:4b:59:15:ac:be:74:
                    b2:bc:50:f8:a8:af:f8:66:e6:1d:09:91:6a:bb:c7:
                    18:2c:e9:e5:bf:66:20:25:9d:02:71:a0:f9:a1:6e:
                    55:76:e7:46:e5:a4:64:73:dd:61:17:8a:18:d8:70:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:ED:B0:19:7C:6C:DF:38:98:49:30:6A:95:EF:40:4E:3E:5C:80:11
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:00:b7:52:27:e3:ea:d6:7a:8a:23:f7:3b:b3:2b:27:b3:
         21:3a:9a:13:af:a2:72:97:3a:da:2d:7d:e1:f3:12:19:4d:d0:
         88:43:e0:90:b5:d1:6d:26:b1:78:83:6d:ba:3e:b6:cd:a8:5c:
         d6:d3:af:ad:eb:50:55:e0:af:44:0a:1e:4b:5b:eb:16:99:f2:
         77:a0:23:b2:5a:09:5f:bc:76:e5:75:74:88:aa:70:95:e2:93:
         e8:f1:fa:cb:70:69:fb:28:32:a6:b0:6d:5a:28:65:ce:72:db:
         78:a5:0a:05:74:62:3d:cd:6f:ec:50:42:c2:9c:3c:5c:7e:92:
         c1:22:bb:cc:3d:d5:cd:57:b5:23:ad:7a:09:df:6a:cb:f8:21:
         f7:30:7f:11:63:10:11:2a:08:d0:94:15:a5:10:29:05:0e:2b:
         2e:45:ed:82:be:6a:3a:6a:dd:d3:09:9c:5a:da:7b:80:55:9f:
         79:2f:63:3b:67:e0:9f:07:3a:a3:ca:08:bc:5d:99:94:a5:b8:
         9f:0d:3b:86:f8:9b:c0:df:22:58:61:b3:38:3f:08:d2:71:aa:
         e3:3d:21:ad:29:3b:ac:5d:a8:0d:5a:91:6e:6f:bd:1e:72:fc:
         46:8e:ff:10:23:48:23:80:f5:2d:d7:89:fc:98:d0:76:e8:5d:
         10:2e:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:30 2025 by rpki-client