Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File:                     jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier:          rS6XkPkM/fee3nJJQYTiaWPyiTvZ3jtgjytx+7SaXM0=
Subject key identifier:   CE:D0:00:44:99:8C:1A:2C:2C:FA:9D:F3:4E:59:47:CF:A6:C5:74:87
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer:       /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial:       01987D8BCB478AA39D663252037D98CEA3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number:          0D2A
Signing time:             Wed 06 Aug 2025 04:02:50 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:50 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:50 +0000
Files and hashes:         1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
                          2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: XEOKECG4/KTF5LLWqa3BVcsKQVMnqygbWpZmhKiVh0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:cb:47:8a:a3:9d:66:32:52:03:7d:98:ce:a3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
        Validity
            Not Before: Aug  6 04:02:50 2025 GMT
            Not After : Aug  7 04:02:50 2025 GMT
        Subject: CN=ced00044998c1a2c2cfa9df34e5947cfa6c57487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:fe:74:6a:6a:5e:3b:0f:51:f6:28:30:62:
                    e4:32:1f:82:3d:d1:b8:15:b0:f2:4c:72:2e:cd:dc:
                    76:b6:a7:3a:ab:76:45:01:4e:0e:c6:b8:e5:81:ec:
                    9e:3f:c6:8c:11:1a:97:29:c0:d2:fe:30:ee:27:4c:
                    72:a3:52:f1:a5:ab:6f:c8:fb:6b:b2:a4:c0:5c:81:
                    ce:45:88:60:0a:8b:d7:41:0c:82:a0:67:ea:0b:a5:
                    56:09:b1:60:04:02:5b:b3:71:28:3a:79:21:34:47:
                    62:58:5f:4b:b9:4e:f2:2d:56:c7:5e:b7:86:69:8c:
                    bd:19:7d:0f:15:5e:be:03:cc:9c:de:b0:e3:95:e3:
                    47:3c:8e:77:da:f3:c8:11:d9:6d:b3:42:14:2d:9f:
                    bd:d8:c2:e4:f2:b3:22:97:d5:16:f9:3b:cb:77:df:
                    5e:eb:ce:f0:0d:e6:6b:17:37:f9:05:47:9b:cd:61:
                    ae:6c:60:ba:69:a5:3c:93:b6:bf:59:dd:5f:cc:f9:
                    1f:75:9d:e3:bd:cf:cf:a8:b3:49:a8:6f:ee:bb:fc:
                    5c:d8:da:aa:9d:b1:94:e4:8e:9b:bb:04:f4:61:30:
                    72:6d:4b:1b:16:e0:e7:1f:a7:93:09:d3:90:2a:f8:
                    f1:18:c1:25:78:29:02:f0:c8:0e:5b:f8:e5:94:de:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D0:00:44:99:8C:1A:2C:2C:FA:9D:F3:4E:59:47:CF:A6:C5:74:87
            X509v3 Authority Key Identifier:
                keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:89:17:a1:4e:d5:31:ba:ef:b2:19:7b:b1:83:67:40:b8:d8:
         4b:ca:29:56:08:a0:51:19:6e:be:bf:cb:86:a1:a1:9e:a6:5b:
         bb:bb:7f:b5:dc:8f:bc:b6:91:13:0e:59:20:10:ac:77:b7:68:
         16:ac:8e:91:b4:dd:6b:36:ab:53:ee:79:95:ed:f2:7c:d1:5c:
         d3:7a:e5:a5:f6:2c:7e:34:2c:38:fc:e3:f7:3e:c8:d7:bd:89:
         1d:a1:5c:9e:31:f8:dc:2d:d3:5c:e8:c4:6f:e6:96:48:e3:12:
         b4:0f:ef:ce:e0:29:15:5a:fb:0b:5e:3b:d3:4f:c0:96:35:46:
         8e:f8:d7:26:35:77:3e:f6:1b:cc:98:f0:37:4c:27:8c:1d:d0:
         6d:56:52:dc:ce:ed:15:68:46:81:2c:f5:06:d7:39:0c:17:2d:
         2b:ad:3d:99:bf:ff:76:fc:30:d1:02:33:b8:0d:0f:03:b2:65:
         2f:39:67:29:2b:bd:a3:96:e8:c4:d1:d1:e1:36:0c:74:3c:97:
         26:24:ef:0e:49:70:ad:85:58:f9:cd:82:f1:3a:29:17:ed:91:
         5d:30:b1:cc:61:28:6a:90:d4:db:c0:74:66:46:7f:87:db:84:
         67:a9:67:e4:71:fc:de:e5:14:6a:bf:a7:0b:d5:92:32:02:8a:
         a0:75:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:22 2025 by rpki-client