Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File:                     ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier:          z4pinFDI3yjEjZfbda76Rkj69asBl1py56biYoYHd7I=
Subject key identifier:   6D:B3:22:D6:21:1B:D4:6F:ED:6E:C4:D0:F0:3F:3B:D0:EC:4A:79:7E
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer:       /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial:       0198752B9FC8EBF547AE9ADDB0C029D579DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number:          0799
Signing time:             Mon 04 Aug 2025 13:00:49 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:49 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:49 +0000
Files and hashes:         1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
                          2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: x6pvcp7pLnS1jKr2wOkzfwzZHAZVDS88HU9FzY+paTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:9f:c8:eb:f5:47:ae:9a:dd:b0:c0:29:d5:79:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
        Validity
            Not Before: Aug  4 13:00:49 2025 GMT
            Not After : Aug  5 13:00:49 2025 GMT
        Subject: CN=6db322d6211bd46fed6ec4d0f03f3bd0ec4a797e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:42:00:51:8e:d1:cb:eb:4d:49:a0:bf:07:
                    f1:c3:c0:c2:2e:f0:8a:d6:44:66:fa:90:73:8a:a8:
                    c9:c5:35:d7:f2:6e:8d:02:81:2a:09:8a:e9:e6:e3:
                    08:57:3f:dc:9c:11:59:a8:6d:15:dd:3b:34:fa:3f:
                    59:47:ca:d8:db:19:d7:15:77:59:4a:2f:ca:ad:06:
                    38:c1:d3:55:6d:a4:88:c6:9c:37:3a:7c:28:31:a9:
                    43:89:c0:df:1b:12:2f:26:ca:38:12:9b:8a:98:7a:
                    24:97:e2:de:7a:ae:a1:1a:4c:ec:a5:c7:bd:ea:2c:
                    de:60:af:9b:cb:25:40:0d:53:89:f4:a4:a8:17:ed:
                    4b:29:5f:b5:07:48:01:b9:e1:85:b5:bf:c4:b7:85:
                    9a:31:d0:e1:dc:37:cc:b1:d1:75:e2:5d:f7:1e:87:
                    d8:cb:eb:2a:02:01:e3:89:32:c1:8d:80:67:8d:9d:
                    01:ef:b3:b9:e2:e6:f2:d5:41:d0:48:ca:fb:88:34:
                    8a:a5:11:d8:e7:12:5b:e0:0c:0a:f6:33:1c:12:b4:
                    b9:80:cd:bd:fa:52:3b:3f:5a:d4:2e:46:80:de:dd:
                    9d:95:b4:73:0f:3e:17:d3:ed:6c:9c:b4:2c:7d:ca:
                    ce:5b:4e:d2:d1:1e:21:e0:f9:79:79:a6:d1:ee:71:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B3:22:D6:21:1B:D4:6F:ED:6E:C4:D0:F0:3F:3B:D0:EC:4A:79:7E
            X509v3 Authority Key Identifier:
                keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:ec:e7:f6:e8:4f:02:0e:73:79:3d:2b:9d:6f:f9:7c:f9:
         8b:ed:8c:23:c8:85:8f:11:4f:6c:72:a5:87:31:1f:fe:32:2b:
         13:9d:2c:1a:5d:98:1e:5e:8e:01:9b:81:77:b2:c0:d5:ac:a2:
         80:79:ca:0a:8d:72:34:e3:c8:56:65:15:1e:df:f7:3d:0b:88:
         8f:4c:b5:12:3a:0e:a6:db:2a:90:8f:63:a8:a6:2b:77:4a:4f:
         77:8a:5f:42:c2:43:4e:72:e7:42:0d:29:75:d4:f5:43:09:4f:
         86:72:67:c2:ea:2f:93:27:f7:57:af:cb:2e:21:cc:ca:ed:fa:
         8b:c1:c5:03:77:91:c4:6a:f7:ec:b6:24:23:d9:ae:7e:93:30:
         49:e8:50:fc:d9:c3:f3:de:7b:35:11:e7:05:7d:f5:65:77:2a:
         0d:4f:f6:9b:fb:6e:ab:6b:90:04:54:dd:ec:ae:48:df:7b:8d:
         10:2f:71:28:97:49:b3:c5:bf:30:20:be:cc:19:95:a2:10:fc:
         3f:a7:91:79:c6:e8:06:ae:c9:ee:61:1a:a6:4f:f4:f8:a7:e0:
         d2:6b:26:ea:3f:76:b5:4e:1d:5c:71:c7:c3:f4:c6:43:ee:5c:
         68:35:28:9e:26:cd:a9:5e:33:f4:b7:72:18:6d:04:9d:a7:95:
         6c:69:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:01:06 2025 by rpki-client