Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
File:                     m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json)
Hash identifier:          uHbvk3Umd5aGHbTYI2ADGx1NbE5HfP4C0CNjtCjJ688=
Subject key identifier:   73:05:1C:4B:DE:6E:C3:68:48:5E:06:08:8E:84:90:97:65:5F:22:FF
Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
Certificate issuer:       /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Certificate serial:       01987306A5590A478F717B0D3CB1AD226899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
Manifest number:          01AF
Signing time:             Mon 04 Aug 2025 03:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:12 +0000
Files and hashes:         1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=)
                          2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: +astH2OYKp4oJKo5Hc9JE7zVkuyOLY1TMq4oyXgMya8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:a5:59:0a:47:8f:71:7b:0d:3c:b1:ad:22:68:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
        Validity
            Not Before: Aug  4 03:01:12 2025 GMT
            Not After : Aug  5 03:01:12 2025 GMT
        Subject: CN=73051c4bde6ec368485e06088e849097655f22ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:02:13:1f:7f:fe:e9:85:23:29:7a:b8:ae:
                    9b:1d:53:15:cb:a2:7d:99:59:e8:cb:b8:24:b1:5a:
                    7e:cd:40:70:35:2c:47:8f:ff:e0:60:c7:be:6b:f4:
                    43:a8:78:e7:d5:6b:aa:d2:44:61:b1:20:fa:4a:21:
                    e0:5a:b4:bd:6f:ed:6e:b8:33:c0:54:fb:42:d0:e4:
                    d7:54:2c:0d:c1:b8:b1:ab:fd:ba:50:7d:eb:3a:4e:
                    76:88:33:15:06:45:ae:ea:a3:76:23:a1:8b:4c:10:
                    9d:c9:1f:77:75:8d:13:cd:16:ea:a7:b0:c3:ac:e0:
                    b6:77:e0:3c:63:72:f4:18:02:ac:a0:33:e7:a3:2f:
                    5f:00:31:0d:cb:c8:95:fb:fd:84:0b:44:fc:fe:11:
                    ee:cf:7e:5f:21:49:d7:a2:dd:4c:3c:8d:09:15:e5:
                    f4:9d:8d:bc:5b:d2:ac:b8:6d:9b:dd:74:47:91:57:
                    0d:b0:29:57:46:31:d1:62:ed:05:8b:01:2b:7f:f0:
                    09:67:45:5d:2c:3f:be:9c:11:ce:2b:cd:f9:81:10:
                    15:47:48:c4:4b:b8:4c:96:7c:64:88:d0:3f:a1:62:
                    19:8d:0b:bf:eb:da:56:da:c5:bb:69:01:95:e3:06:
                    a4:af:2a:a6:39:bd:08:10:98:c3:2f:81:d6:21:40:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:05:1C:4B:DE:6E:C3:68:48:5E:06:08:8E:84:90:97:65:5F:22:FF
            X509v3 Authority Key Identifier:
                keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:88:98:30:69:88:c4:d4:4c:0c:d1:ce:c5:80:e1:f5:9d:c5:
         e6:39:1d:7b:ea:c4:be:c1:62:0b:93:1f:5e:6a:eb:ec:3b:d8:
         18:f4:57:bd:3a:1f:6d:a6:d1:81:83:cb:de:5b:3d:72:c7:a2:
         5e:d2:c7:01:f2:51:83:54:6e:25:36:21:be:2f:46:a3:ac:f2:
         07:c8:81:72:fa:7d:13:62:a2:6d:1e:e1:80:6c:31:c9:55:1f:
         c2:20:bf:08:29:0c:14:06:b4:cd:6a:e8:e8:d9:47:92:1c:f0:
         fb:b4:f5:01:b5:10:1b:a2:3b:24:f4:d1:f9:31:dd:40:b2:8b:
         95:a2:42:bd:03:72:e8:4f:b3:15:b1:1c:ea:53:92:bf:e6:26:
         b9:a0:31:40:95:d7:56:4e:31:bb:11:5d:e2:ad:61:d8:af:5a:
         2c:37:a0:6c:39:c1:55:74:77:d0:2f:49:b9:02:00:6b:71:fd:
         04:cd:52:7f:b9:e3:9f:dd:9b:d1:2b:af:13:3e:94:9c:26:5d:
         6c:18:67:f6:94:8d:ef:ab:99:ad:72:4e:ae:0b:29:a5:66:27:
         e2:97:9a:79:57:a9:bc:39:ac:5e:74:d9:13:6f:c6:0d:13:49:
         9f:64:fb:a8:52:11:7c:52:db:d8:97:0b:83:f7:99:34:a2:d4:
         ef:d5:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:44 2025 by rpki-client