Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File:                     j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier:          urlLOLTX2A8eP6X0ahMp5KJ7+pqUy4EIQDKs+BSJ7/Q=
Subject key identifier:   D6:A5:B7:57:17:BB:B3:FD:28:57:8C:C2:4B:BF:17:32:E8:3D:74:9C
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer:       /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial:       019873E2DE28CF867478A57B9D46C7F0DD67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:01:44 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:44 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:44 +0000
Files and hashes:         1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
                          2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: 2KQiLsbwD/4DLPP8jCMiK3qrdUZvu83wy0cVBIUOkS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:de:28:cf:86:74:78:a5:7b:9d:46:c7:f0:dd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
        Validity
            Not Before: Aug  4 07:01:44 2025 GMT
            Not After : Aug  5 07:01:44 2025 GMT
        Subject: CN=d6a5b75717bbb3fd28578cc24bbf1732e83d749c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:fe:36:e1:1f:c6:1e:cf:37:58:50:b1:1f:
                    bc:9d:ac:b4:21:71:77:f2:09:32:d9:ce:2a:42:58:
                    2a:b6:0a:21:5c:24:f4:fd:59:0c:e1:a9:d0:b5:d5:
                    32:55:ca:3e:3c:2c:3d:b8:fe:3e:72:21:d0:42:09:
                    0b:15:fd:c7:4a:28:8a:81:00:cb:fe:16:dc:b0:ed:
                    dd:25:57:25:80:c0:58:26:69:be:44:fc:54:01:72:
                    9c:11:b8:30:6e:a1:63:bd:b0:e2:a2:4a:39:11:43:
                    14:77:70:cc:5a:cc:ad:10:9b:a8:97:98:15:96:80:
                    47:e3:e5:a5:f6:c5:36:2f:7d:ec:1b:2c:b9:ac:3d:
                    a3:a1:2c:62:6e:59:a2:d5:da:cf:10:08:ec:2e:f1:
                    68:83:b9:09:1b:56:4d:19:eb:14:42:b8:2d:78:8e:
                    ac:5d:3d:65:05:00:23:c4:32:0c:79:dc:95:63:f8:
                    c1:3d:d5:d8:bf:de:71:15:b5:6f:64:bd:87:a1:97:
                    0f:99:67:74:8a:00:c5:27:cd:b2:ea:6a:1b:12:78:
                    44:df:c2:65:21:6d:b6:2b:92:21:21:3a:73:01:f0:
                    bd:52:ae:2c:f6:3f:6c:d3:0a:11:ac:f5:d7:f2:1b:
                    dc:73:34:60:18:d0:77:f4:15:36:cc:20:7e:39:ee:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:B7:57:17:BB:B3:FD:28:57:8C:C2:4B:BF:17:32:E8:3D:74:9C
            X509v3 Authority Key Identifier:
                keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ca:35:a3:5a:59:9a:23:ce:ae:b4:f5:7d:75:46:2a:bf:32:
         b5:da:63:a9:55:85:01:8f:b6:7e:3c:f9:ce:2e:ab:82:16:6a:
         8f:17:07:d8:30:6d:cd:a9:a4:62:13:10:1f:ec:e9:97:b1:79:
         25:03:fb:2c:3a:e0:33:16:e6:30:dd:3d:db:4c:a9:eb:52:cb:
         58:a8:b0:47:cd:86:a7:81:09:33:0d:33:c3:8c:9e:b8:c9:53:
         3c:14:da:f8:2b:47:de:cf:5d:a5:7f:ca:f8:7a:1b:ed:b7:07:
         88:47:66:0f:dc:10:35:f7:20:a5:89:17:fd:66:82:7a:21:fd:
         92:f0:3d:c1:44:ab:68:3e:19:fc:2a:ac:c1:59:28:15:9f:29:
         ad:48:90:80:89:a3:ab:06:0d:33:3c:31:05:99:c3:a3:6a:0a:
         15:df:47:f2:b6:87:73:93:a7:42:15:7b:01:e9:e1:d3:82:fa:
         71:e4:ee:fb:50:d8:e5:28:64:7e:13:f5:90:53:25:f6:74:cc:
         23:49:5b:02:f9:c3:29:77:d5:97:c1:65:07:b4:fc:c9:b9:89:
         b0:7f:22:78:64:e9:c8:10:cc:b5:16:dd:47:48:a0:7f:fa:94:
         a1:f0:bf:29:70:e0:c6:fd:7a:fd:06:e8:7c:37:9e:81:33:b2:
         9b:0a:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:51 2025 by rpki-client