Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File:                     INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier:          5p7HqFKVP/UIYEqEXmkKD1FST75PHBgBccAmJfb5Ap8=
Subject key identifier:   CF:80:67:BD:DB:1D:2E:A3:12:1F:F9:8D:19:3F:3A:A0:8C:DF:1D:AE
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer:       /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial:       0198820B824C48BDA3B9E4D5137D251E4598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number:          0A96
Signing time:             Thu 07 Aug 2025 01:00:49 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:49 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:49 +0000
Files and hashes:         1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
                          2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: +JfXP1bosiOhUhE5gTM7X0qAkJnuYzMDMV4RqJ9KgAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:82:4c:48:bd:a3:b9:e4:d5:13:7d:25:1e:45:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
        Validity
            Not Before: Aug  7 01:00:49 2025 GMT
            Not After : Aug  8 01:00:49 2025 GMT
        Subject: CN=cf8067bddb1d2ea3121ff98d193f3aa08cdf1dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:06:24:c3:05:a9:bc:60:48:ca:dd:51:86:
                    c0:80:c7:8d:e3:28:51:11:d6:bb:e4:9e:f0:95:22:
                    d4:4e:e2:77:a1:cb:1f:e3:eb:0d:f2:95:03:0f:f8:
                    2c:0a:ea:84:89:f1:ea:40:ee:5f:da:32:aa:eb:7c:
                    ee:d0:5d:01:1f:26:8d:cf:ba:63:91:84:e2:80:da:
                    32:42:e2:a2:34:b9:90:a9:f6:e0:ea:11:b8:4c:07:
                    f6:ef:94:41:ac:61:bb:c2:f1:d2:62:9b:31:69:d3:
                    42:48:71:5e:68:fd:09:13:2b:cb:1a:f7:a1:2d:9c:
                    07:53:dd:d2:a0:4e:e8:77:28:ca:67:b5:ea:37:f7:
                    ee:36:9f:08:f8:a7:89:c8:73:29:a8:e7:6a:9d:26:
                    e1:94:55:ae:61:a7:18:27:48:d1:8f:96:18:fd:1d:
                    28:9c:7f:99:58:0e:d6:e7:c7:31:5b:26:3d:f4:77:
                    42:c4:41:57:48:0d:8e:3a:fa:f2:4e:76:8d:18:f7:
                    94:7b:28:9e:67:e0:21:f0:1a:96:01:4b:db:0e:d0:
                    1d:e8:4e:3b:cc:c5:a8:c7:bd:40:c9:a1:82:e3:e3:
                    07:a1:84:df:d7:73:2a:52:8c:fc:04:84:7b:58:db:
                    fa:10:cd:78:1b:40:dc:e6:f7:75:7f:d7:3d:f5:a0:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:80:67:BD:DB:1D:2E:A3:12:1F:F9:8D:19:3F:3A:A0:8C:DF:1D:AE
            X509v3 Authority Key Identifier:
                keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:98:f3:94:ca:01:0a:f8:c8:c2:87:6b:aa:3e:ce:73:b1:96:
         5d:87:ba:f0:05:3a:4d:3b:8b:08:7d:ff:05:16:1b:be:4d:06:
         34:39:a4:95:1e:37:0c:01:28:b5:01:46:0c:9f:7b:c8:3a:29:
         66:fb:bd:91:ce:c7:7f:62:2c:86:72:0c:a8:58:73:eb:fb:89:
         67:b3:b6:4a:0a:32:d7:3c:a6:69:81:ba:d6:43:bc:f8:7f:81:
         5a:bb:48:95:a4:b6:56:21:e3:37:37:66:93:39:12:81:75:75:
         05:ef:b3:87:7d:32:5f:87:d8:2a:c3:76:36:43:5e:7d:f4:9f:
         a5:11:d6:e1:c9:bd:e2:be:c1:8f:05:b1:6b:a2:1f:c8:ec:8d:
         ad:42:82:e3:26:1b:b6:0e:a3:10:62:b8:b9:8b:70:84:9a:ae:
         78:ac:5e:c0:24:72:03:36:7d:48:30:f3:33:ea:ca:fb:a9:fb:
         49:e4:12:8f:bc:14:e0:16:0f:7b:e0:3c:0e:83:0d:58:48:a5:
         5c:6a:b0:35:34:ce:e5:76:6e:a5:95:86:ab:17:1a:73:19:e2:
         e8:15:0b:22:b5:ff:13:a7:a2:b6:32:c6:f5:85:31:91:3f:14:
         fd:05:75:1d:8d:b9:3a:c9:33:c5:36:26:f5:01:9d:91:a6:8d:
         79:7d:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:20:19 2025 by rpki-client