Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File:                     JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier:          YdViPlWTohuO2YyVXa6SZpXnkPkDQBeHpJvu2o3B634=
Subject key identifier:   D0:E4:5C:7E:F7:5D:74:D1:96:0A:61:8B:55:79:A6:BB:7E:B2:9C:11
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer:       /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial:       0198A34DB8A3FC91796E461479E0BD4AF6EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number:          1110
Signing time:             Wed 13 Aug 2025 12:00:36 +0000
Manifest this update:     Wed 13 Aug 2025 12:00:36 +0000
Manifest next update:     Thu 14 Aug 2025 12:00:36 +0000
Files and hashes:         1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
                          2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: ZNVEb7bqPNkz+wXBEnH803u6EX29anD4sOTjetH+juI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 Aug 2025 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a3:4d:b8:a3:fc:91:79:6e:46:14:79:e0:bd:4a:f6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241ed58e426975e299875897caff9552640d9c09
        Validity
            Not Before: Aug 13 12:00:36 2025 GMT
            Not After : Aug 14 12:00:36 2025 GMT
        Subject: CN=d0e45c7ef75d74d1960a618b5579a6bb7eb29c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:45:e9:3d:d1:76:e8:8b:85:2c:e7:b4:97:
                    fd:30:ae:07:54:81:e8:b2:75:b5:f4:e5:8b:23:8b:
                    ac:08:23:82:19:f3:52:9c:e8:9f:b3:3d:18:6c:fa:
                    8f:7e:cd:84:9d:8f:13:22:ab:dd:84:b0:4f:25:8f:
                    e6:d1:c5:d1:66:7b:6d:83:5e:2b:32:2d:16:73:32:
                    ac:c2:74:3a:e5:39:8d:76:aa:1d:10:25:b4:58:6d:
                    5c:1b:0c:70:78:ef:64:5e:b0:a4:39:3f:39:eb:97:
                    25:59:56:a8:ea:62:fb:f5:e6:73:4b:66:fd:dc:7a:
                    b7:99:01:98:88:97:91:43:2f:0e:98:9a:e8:cb:41:
                    84:33:e6:72:8c:64:d9:68:6c:0b:98:bb:b4:a8:00:
                    a2:04:0e:cf:05:3b:7e:59:13:fc:cb:e0:dc:30:16:
                    a6:15:6b:30:dc:ee:04:bb:e0:88:78:42:e2:46:78:
                    6d:d5:b3:8e:ba:80:76:b5:9e:83:83:89:17:3e:7a:
                    fa:ff:8c:54:dc:cb:c8:61:41:b3:32:bd:ad:a8:32:
                    e6:04:87:5f:6e:b5:70:ca:9a:6d:4b:83:21:c4:c3:
                    36:10:4c:6e:19:c3:ad:d0:65:45:5d:6e:ab:03:3a:
                    be:45:a1:2b:ee:e6:ff:c0:54:41:eb:bc:40:a0:8b:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:5C:7E:F7:5D:74:D1:96:0A:61:8B:55:79:A6:BB:7E:B2:9C:11
            X509v3 Authority Key Identifier:
                keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ed:cb:a6:4a:8a:5e:b6:20:ce:6f:e6:2c:1f:7f:79:77:79:
         16:bd:9a:b3:59:61:fc:89:b0:ee:f9:78:1f:4c:4d:17:e3:38:
         88:4e:c1:1b:1d:c1:9a:7b:62:66:94:f4:c7:ad:f4:51:6b:8f:
         fa:58:7f:6f:bf:c4:a8:19:21:2c:f0:77:b0:99:59:61:eb:b7:
         77:41:d9:2a:57:d8:51:39:a9:a5:bd:2f:1a:b4:d6:2d:b9:36:
         4e:d5:d3:e8:63:3b:51:b2:e8:3f:84:22:7d:a2:48:04:02:e4:
         76:2a:35:d3:11:29:79:1e:f9:ce:ba:f5:df:26:0c:fc:38:80:
         7e:17:5c:c9:0f:ea:fd:f4:a2:02:0b:87:d2:e2:80:9f:ba:61:
         a7:6b:d8:13:f6:81:51:b0:33:c2:bf:c5:9f:22:f1:10:70:9e:
         5c:0d:8b:f2:e3:1a:ab:ff:12:41:11:96:b5:3d:1e:20:2b:0a:
         ce:c4:46:04:06:51:8f:59:a0:67:e6:e7:19:58:d2:81:97:0d:
         6c:90:1a:85:ea:4d:03:40:96:ef:de:01:02:f1:f4:4e:62:9f:
         59:6d:fb:b6:4d:ea:b4:7f:7e:8b:bc:fa:91:09:b7:d0:12:29:
         f8:38:66:db:44:f4:d8:90:3f:c7:37:92:0f:18:94:27:53:d3:
         12:cd:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:04:21 2025 by rpki-client