Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File:                     jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier:          miZMI7oyfQg7s3GzPFC+h/FN9uMCOHnPyTx6h7QZ8BY=
Subject key identifier:   4C:22:12:2E:D9:E8:94:F0:FA:FF:61:E5:ED:02:1A:C6:76:4A:DD:5E
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer:       /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial:       01988BEADDF45EB3E593BE11512090117E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number:          08AF
Signing time:             Fri 08 Aug 2025 23:01:21 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:21 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:21 +0000
Files and hashes:         1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
                          2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: u7K0HMApB1pZMPK3N6Q59TP1Rs43mojR6MhcnF7Szp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:dd:f4:5e:b3:e5:93:be:11:51:20:90:11:7e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
        Validity
            Not Before: Aug  8 23:01:21 2025 GMT
            Not After : Aug  9 23:01:21 2025 GMT
        Subject: CN=4c22122ed9e894f0faff61e5ed021ac6764add5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:3d:75:08:9d:fe:45:61:23:01:ba:ac:a9:
                    5f:71:74:81:0b:27:f6:54:05:fe:55:80:99:ae:6e:
                    8f:af:88:7b:f5:46:a0:e6:8d:6d:d8:75:61:40:cd:
                    3a:ff:df:33:81:a4:ac:cd:25:15:71:fc:2e:f0:8d:
                    70:9f:a9:7a:f2:fc:6c:ae:f8:f8:ff:4d:23:cd:bb:
                    0d:66:b9:3e:52:69:43:c5:54:c8:37:d7:6a:7f:7a:
                    40:14:71:2b:eb:99:ef:72:72:1b:79:21:03:ca:b3:
                    c2:96:e0:19:33:76:98:f6:4d:01:a6:87:f4:12:1f:
                    26:ce:c8:06:fb:41:5e:7c:4e:83:f4:c9:e7:36:1a:
                    85:c5:5f:c9:7b:74:fe:0f:b8:03:ea:f8:39:17:55:
                    ab:08:e9:d2:ce:09:2d:b2:46:54:1c:57:53:a0:48:
                    1a:dc:50:4e:5d:4f:f2:0c:59:d5:01:39:64:e1:d3:
                    3c:21:8f:fb:94:21:cb:ae:34:f5:cb:23:32:86:fa:
                    8b:93:e8:aa:9b:2a:62:30:f3:39:d1:0b:75:fb:77:
                    fd:74:ee:b0:1f:93:9d:78:ae:fe:56:4f:ab:fb:ec:
                    5f:49:17:be:fa:41:a1:83:3c:d1:10:e2:85:76:ae:
                    e9:3e:22:9d:1b:f3:7d:40:68:4e:eb:db:b8:7f:3b:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:22:12:2E:D9:E8:94:F0:FA:FF:61:E5:ED:02:1A:C6:76:4A:DD:5E
            X509v3 Authority Key Identifier:
                keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:71:6b:25:71:52:ad:b3:33:e3:94:b9:0e:cf:e0:08:40:
         eb:98:c4:4a:3d:b1:a3:4b:bb:8e:2f:e7:42:63:a5:b6:c7:16:
         3d:eb:3b:2d:a9:eb:f7:8f:16:58:c8:03:52:bc:ce:24:f2:80:
         ee:91:1a:d5:34:f5:aa:89:a1:94:a0:b0:0c:b0:88:2e:dc:37:
         51:cb:78:b2:a6:a5:fb:92:72:17:51:a2:a5:8d:52:b4:35:ec:
         2c:62:e2:fd:4c:94:86:1f:23:9c:b3:93:5e:2f:b0:42:2b:ee:
         8b:ec:a5:7e:d7:f5:74:54:ef:56:b9:15:b0:60:b6:81:a9:5c:
         d7:78:19:22:0b:30:d9:b8:21:01:4e:e7:ae:2b:1d:3d:c5:8f:
         a8:33:5f:0d:10:40:8b:aa:4d:46:c1:a1:9c:1e:b7:34:6e:0f:
         91:a8:1e:f9:bc:af:72:e2:ec:d0:35:4a:14:04:aa:c7:55:12:
         35:73:98:fb:9e:bf:b4:dc:ee:16:9e:48:15:58:be:05:fb:b3:
         de:da:87:d2:f9:e7:47:19:05:6b:40:07:55:0f:2d:22:ca:5a:
         e6:33:68:be:71:3c:6f:5d:a2:cf:ab:2d:1e:34:59:05:be:f1:
         86:ed:eb:08:38:67:7e:b5:a0:d2:1b:6d:5b:be:09:57:92:1e:
         5d:a8:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:00 2025 by rpki-client