Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File:                     rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier:          104FcMlhkbvtcc3M/IN1qTOOEsY3oaciZZyiuO+jGgg=
Subject key identifier:   07:6D:F3:F6:BC:18:2E:10:10:DB:98:99:D7:22:57:5D:9F:B6:96:B1
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer:       /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial:       01988B4582E158051A29E59035ECE4A0DAB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number:          0A5E
Signing time:             Fri 08 Aug 2025 20:00:45 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:45 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:45 +0000
Files and hashes:         1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
                          2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: zw1DgINSVfSUZ6pRYDrxytTJ7wNzMcTry2Y7sBu5nlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:82:e1:58:05:1a:29:e5:90:35:ec:e4:a0:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
        Validity
            Not Before: Aug  8 20:00:45 2025 GMT
            Not After : Aug  9 20:00:45 2025 GMT
        Subject: CN=076df3f6bc182e1010db9899d722575d9fb696b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:e7:64:c8:19:89:01:41:ce:e4:c0:f1:74:
                    f5:62:33:5e:98:e9:aa:bf:3d:5e:77:1a:07:05:22:
                    48:87:85:4f:7a:ba:84:9e:00:5c:dd:a9:a5:d2:0d:
                    ae:22:5d:67:c8:2d:67:ea:67:cc:87:97:6e:a6:34:
                    65:0e:40:8f:61:19:23:d9:2d:e9:6f:5d:8a:ce:9d:
                    5a:83:ff:75:05:62:e8:04:0a:4c:5a:57:eb:56:a8:
                    13:53:51:58:5c:1a:5e:c7:6b:4f:f1:5b:07:de:da:
                    ac:3c:31:2c:4f:a0:dd:02:b2:6e:8c:25:0e:28:eb:
                    7c:56:12:e6:12:cd:0c:c6:26:e4:ed:2d:d8:78:22:
                    04:a2:84:40:c1:79:6d:8a:0c:19:6c:63:ee:fe:7f:
                    ff:5e:0c:6e:c4:0c:49:e3:b5:94:ee:ea:c6:cf:b7:
                    25:00:c5:50:d4:ee:56:70:f8:7d:c5:c8:4e:15:ed:
                    6b:0c:cd:d5:b2:37:28:e1:be:96:ec:9d:a4:3a:bd:
                    ec:92:b3:71:01:dd:7f:48:08:86:69:25:a0:a9:8f:
                    a0:fb:00:eb:9b:1c:66:34:e8:8e:86:62:39:8e:9c:
                    5d:6e:11:23:e0:6b:f2:4d:95:d6:f6:67:7a:69:c3:
                    ba:fa:d8:97:dd:6d:1d:23:6a:fd:45:ff:6f:17:0e:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6D:F3:F6:BC:18:2E:10:10:DB:98:99:D7:22:57:5D:9F:B6:96:B1
            X509v3 Authority Key Identifier:
                keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:c1:f0:dd:eb:3d:29:68:fd:2c:6a:6f:ef:7c:c7:8b:99:
         2e:e5:33:d6:eb:cd:9f:cd:39:95:9a:a2:f1:3e:ab:58:05:11:
         f9:ed:7f:37:1a:94:a7:70:92:c3:57:79:86:2a:bf:05:26:c6:
         a7:27:20:d3:31:75:65:7e:3c:ae:6a:08:6c:90:63:5b:32:09:
         6e:53:12:51:04:5a:89:fb:fd:6d:22:b3:15:1b:eb:36:c0:97:
         ce:ed:5e:29:6e:b0:1f:c2:a5:13:1e:aa:f7:97:07:8b:41:44:
         31:9e:73:27:0b:78:04:4c:3b:42:d3:76:ec:c3:75:f2:07:37:
         d8:7c:fd:ab:41:0c:99:93:de:da:b4:ac:2e:fa:2b:b5:d9:25:
         87:a2:cd:29:ac:64:5b:9d:3d:b2:02:66:dd:e0:b6:98:25:5c:
         b0:01:65:92:cf:74:b9:45:ea:c8:11:67:8a:24:3c:b6:67:b2:
         80:53:f9:2c:55:49:c3:08:ca:d2:95:75:50:f1:b2:72:39:2d:
         ab:74:51:18:a8:7a:c1:d3:b3:db:a7:55:ae:e5:79:e9:98:fb:
         1b:9f:73:ad:61:33:c4:68:31:6e:4a:7a:7a:5d:fd:b1:1a:73:
         6d:86:9b:9e:3a:20:1e:34:ee:8c:b4:25:14:2e:99:8b:12:f6:
         44:8a:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:19 2025 by rpki-client