Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File:                     jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier:          FbuPnpYnpOUC7l98h9hZj2zBQeV046az5N1tjBB8/RY=
Subject key identifier:   E1:96:17:76:C1:C0:B4:36:D6:63:EB:23:F9:1C:B4:8F:25:F7:8A:C6
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer:       /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial:       019872CFA959B38B9827E7AF729957226181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number:          083E
Signing time:             Mon 04 Aug 2025 02:01:08 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:08 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:08 +0000
Files and hashes:         1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
                          2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: qfz/7J5JkBnTxtAm3CFAru2SM8czrPlLBM0V9H8ofZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:a9:59:b3:8b:98:27:e7:af:72:99:57:22:61:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
        Validity
            Not Before: Aug  4 02:01:08 2025 GMT
            Not After : Aug  5 02:01:08 2025 GMT
        Subject: CN=e1961776c1c0b436d663eb23f91cb48f25f78ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:82:79:a9:3c:76:4f:fa:7f:a8:38:f6:77:
                    e6:44:62:17:76:7a:50:fa:4c:d9:b7:e4:3d:ce:d0:
                    69:7d:57:53:ff:f3:4e:17:c0:ee:3a:90:96:95:c6:
                    de:a9:ea:25:a9:5e:95:12:63:4b:50:5b:1b:b6:dc:
                    1b:e0:61:30:3f:55:da:8a:45:05:d3:49:83:53:b5:
                    3b:1c:71:11:21:52:4f:d1:63:51:65:73:c4:46:c5:
                    18:35:1d:71:00:21:13:51:1d:ce:29:2d:72:01:49:
                    dc:b6:3d:a4:51:22:a6:d7:52:b6:83:ac:fb:1d:6d:
                    23:83:f3:e1:b6:72:4b:94:bb:fe:d5:1c:fb:58:6f:
                    10:58:74:31:ac:a8:6f:4a:d8:8d:06:93:12:35:e2:
                    db:ac:0c:e6:dc:d9:32:61:c2:ea:86:34:8a:28:84:
                    53:4f:d8:b7:ac:b8:ff:40:32:ea:69:0c:0b:3f:58:
                    92:d7:04:3f:94:42:b9:d9:21:0b:de:42:64:5c:ff:
                    01:b7:ce:16:07:fe:87:9b:1e:22:1b:42:3d:85:5d:
                    b3:37:78:13:35:50:03:4d:c6:c5:cd:76:4d:4e:0f:
                    4c:b3:99:43:00:de:11:55:7d:ea:3e:bd:4d:ef:11:
                    e9:ca:2a:4b:b6:24:5f:b7:28:87:53:0d:31:df:00:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:96:17:76:C1:C0:B4:36:D6:63:EB:23:F9:1C:B4:8F:25:F7:8A:C6
            X509v3 Authority Key Identifier:
                keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:8e:5b:62:ef:f3:97:1d:e7:16:0a:18:b2:a5:fe:5d:fd:
         93:ab:cb:29:a9:c2:54:77:be:33:d6:ab:bd:22:e2:3c:29:dd:
         24:5b:38:88:1e:e7:f7:3d:6a:34:ec:dd:2e:eb:89:63:bc:3b:
         5e:dd:a6:59:0d:59:a5:8c:d2:12:40:0b:87:f4:a9:92:70:7f:
         53:09:9a:9a:46:c8:6f:6c:07:66:a8:b0:2f:49:d5:28:e9:d4:
         36:03:01:fe:72:7a:8f:cf:42:40:a8:cf:2d:2a:55:3f:93:b0:
         b4:64:6b:b0:18:f7:88:9a:57:93:52:23:0d:15:4a:cc:ea:32:
         72:fb:c4:88:3a:6d:69:2b:33:77:2b:af:2a:e1:78:2c:b7:5a:
         82:d8:a1:27:fb:4d:b0:88:2d:f0:c9:d4:74:37:a4:d4:09:94:
         a7:8f:6d:2e:ef:76:54:7d:77:8a:01:94:a2:70:81:db:40:6d:
         4f:c7:36:35:5a:b2:95:04:c1:a5:61:0b:d5:44:46:bf:b4:52:
         c2:f3:dc:e4:30:b9:f8:d4:7e:9b:1a:16:82:58:da:1e:fc:03:
         62:73:dd:fc:58:23:f4:b1:a0:95:8d:0a:c9:a6:6c:d0:be:3e:
         cf:8e:b9:63:30:0a:7f:44:4d:c1:ae:50:02:43:4f:f1:a9:25:
         ba:d6:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:53 2025 by rpki-client