Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File:                     j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier:          yDRBODIl+dAEOLJxK3yBR95eB57+Vs9CgZFAiyQz+xo=
Subject key identifier:   23:B9:1C:96:2E:62:67:F1:40:F5:13:75:D3:30:5A:25:A0:51:92:CB
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer:       /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial:       01987418DA94B0AC226EA7C24FDE16A6ED15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number:          12F2
Signing time:             Mon 04 Aug 2025 08:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:42 +0000
Files and hashes:         1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
                          2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: Sxb0Cm43reJd3EzxiRRjHJEXzhvGyEuOvsubhr1awUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:da:94:b0:ac:22:6e:a7:c2:4f:de:16:a6:ed:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
        Validity
            Not Before: Aug  4 08:00:42 2025 GMT
            Not After : Aug  5 08:00:42 2025 GMT
        Subject: CN=23b91c962e6267f140f51375d3305a25a05192cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:e6:f4:f9:55:c9:ce:f4:35:95:19:bb:62:
                    f8:72:e2:30:7e:76:b8:fa:8a:9c:b4:11:55:b6:f5:
                    46:b4:a8:98:3b:8c:b5:32:28:53:9d:3c:a7:31:7f:
                    a5:be:ec:8a:ec:e7:43:c7:16:c1:e6:e7:f3:9d:5e:
                    ea:30:4f:20:62:33:aa:44:3f:a4:cb:b1:61:70:84:
                    d8:b8:7d:49:1e:19:81:b0:80:9a:7b:6d:35:53:15:
                    6f:64:88:63:59:7d:06:4a:f8:be:2c:62:62:a2:ce:
                    c8:25:db:31:8a:74:ab:a9:a6:17:6a:f4:71:22:00:
                    74:cf:97:42:c8:2a:1d:7e:02:93:f5:02:13:bb:13:
                    89:54:1a:e8:9c:c8:f5:b0:7f:5e:c5:01:36:0b:95:
                    23:2d:86:06:e4:49:18:7b:67:25:4b:a2:07:43:0b:
                    51:49:11:46:4c:3c:4f:2f:18:58:f7:62:70:60:24:
                    e1:28:77:15:28:1d:23:c3:8a:d7:0e:f9:99:b3:ee:
                    7e:79:4d:04:4e:55:b6:e7:47:b5:d7:2b:6e:17:c0:
                    ba:fb:fa:0a:6c:48:a5:f3:d7:e1:00:36:ac:27:2b:
                    b1:80:8f:23:b8:53:51:7e:af:ed:b6:b0:28:1e:b0:
                    a0:54:05:77:a2:03:f9:4f:75:65:ba:c5:9f:b7:59:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:1C:96:2E:62:67:F1:40:F5:13:75:D3:30:5A:25:A0:51:92:CB
            X509v3 Authority Key Identifier:
                keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6e:37:b8:9f:f6:34:1b:e4:2e:a6:f5:65:51:17:4e:f2:a7:
         ac:7e:59:48:ab:8e:47:77:57:d8:66:12:7a:0b:39:38:74:3c:
         af:e7:52:40:53:d3:6f:db:06:b6:4b:84:9d:c7:1e:e1:26:ab:
         fd:d1:f6:fc:2a:2a:03:8e:13:45:a0:84:9c:c3:7a:cb:66:fc:
         53:e4:ac:ee:c3:de:af:53:46:6e:1a:8e:5f:d6:db:ec:57:9f:
         87:50:02:bd:20:76:6e:52:3e:3f:e2:e6:bb:d1:eb:22:0e:ba:
         b3:a1:e6:af:8b:4c:8c:67:52:2c:b5:f1:69:bf:f2:87:4c:0b:
         59:79:4d:3a:c6:2f:58:cd:16:8e:98:97:41:1e:f4:56:3c:91:
         af:41:4b:be:36:04:f7:70:9e:a5:c4:f4:a9:5e:7c:da:60:07:
         4b:cf:a2:c6:ac:db:e8:84:58:6f:a5:0a:4b:b9:07:5e:5f:6a:
         fd:73:35:24:5d:95:b6:4e:73:46:e9:00:7f:1a:1c:9d:50:09:
         53:fa:48:5f:8f:37:61:8d:20:9b:2f:05:ab:8e:2b:53:46:43:
         45:49:f7:23:f9:e0:e2:8c:84:8c:a9:f3:e1:0d:d6:3d:bc:0d:
         d0:b3:04:65:fc:f9:64:98:cc:61:bb:77:a4:74:7d:4b:23:51:
         b3:3d:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:15 2025 by rpki-client