Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          TuWTi5fcrXh1t/5woM1yWUg5ou/jxjDiqXJ/FYg0Xlo=
Subject key identifier:   84:B1:64:31:A1:40:69:BC:88:E6:D5:5A:C1:29:4E:E8:AD:1C:25:D7
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       019880544877731F704C797B5CADECD162BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          1202
Signing time:             Wed 06 Aug 2025 17:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:03 +0000
Files and hashes:         1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: Cd8bPPlmQsDOXcPROVTXdrRQ2hnh5/SGBUp4l3cUK+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:48:77:73:1f:70:4c:79:7b:5c:ad:ec:d1:62:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: Aug  6 17:01:03 2025 GMT
            Not After : Aug  7 17:01:03 2025 GMT
        Subject: CN=84b16431a14069bc88e6d55ac1294ee8ad1c25d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:4b:30:0d:40:0d:b1:e1:5c:9b:f9:ce:0a:
                    82:15:2d:d4:d8:cb:fd:98:f5:ca:e4:03:fc:94:13:
                    3d:e7:39:c7:a2:ac:f8:12:da:a5:8a:bd:1f:aa:ef:
                    f7:bb:f2:a7:61:ce:d4:87:37:48:70:eb:97:2e:99:
                    d7:b1:7e:98:5a:2f:8e:f0:78:44:8a:83:37:bd:13:
                    b5:0d:4d:76:c8:48:0b:bb:94:95:47:e6:0f:0e:a7:
                    88:6e:a6:07:65:fe:df:5b:89:06:71:1b:31:44:a6:
                    66:15:7f:e9:b4:d4:bc:75:05:f7:00:7d:ab:99:28:
                    87:1a:11:9b:6c:4f:33:8d:43:44:9a:7a:21:0b:64:
                    4f:4a:96:b8:84:0a:c1:48:ff:79:e1:fd:15:cd:df:
                    2a:33:83:d8:60:04:cb:26:6e:cf:e2:cb:74:3e:e6:
                    06:7c:20:67:2a:fc:40:08:81:87:a8:27:ac:b5:47:
                    1b:4f:83:ea:89:b2:5e:58:8d:35:72:76:48:f7:54:
                    2d:5c:53:a8:20:39:89:d4:ca:2f:0f:88:32:e2:1f:
                    5f:29:b0:24:ac:7f:e2:c3:24:b5:7e:09:f5:d8:a0:
                    7f:a9:81:d7:04:4b:86:f0:eb:91:35:c0:d8:4f:64:
                    31:df:14:1c:bc:c6:d1:17:f6:9f:c5:ac:d1:6c:8a:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:64:31:A1:40:69:BC:88:E6:D5:5A:C1:29:4E:E8:AD:1C:25:D7
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:54:6c:6a:02:ae:eb:11:9e:e2:07:bf:89:25:d9:3a:ef:
         6c:57:cd:9e:49:0d:1b:38:49:76:93:73:c5:48:97:ee:94:9e:
         45:c3:db:2e:20:14:8b:10:b0:de:2d:9c:ef:b0:2f:57:34:52:
         5c:8e:f5:9e:1c:a3:20:9a:e1:a9:fb:28:62:a5:53:5b:b8:d1:
         0f:36:74:ef:00:9e:9f:ed:24:c2:11:0e:87:f9:b3:f6:2e:23:
         c1:20:46:97:c2:4d:91:64:f5:ea:5e:5e:61:db:20:65:ca:69:
         84:31:5c:8f:1c:00:d8:d2:8c:22:50:bd:50:70:a7:81:04:1b:
         2c:9c:22:25:45:fa:28:f2:4e:39:82:f0:3f:07:7a:9d:b3:f7:
         ed:fb:95:b9:66:b2:f8:be:8e:18:35:b2:fc:8e:29:35:79:07:
         6b:6d:73:36:c6:7d:27:fe:d1:ef:68:e6:64:b7:30:11:05:fe:
         04:d4:46:77:c4:3d:7b:7c:dc:8d:9b:62:81:ca:42:cc:1b:2d:
         3f:33:6e:ed:ef:0a:6e:17:41:9b:fa:67:bd:32:33:6a:f3:26:
         8f:ae:31:4b:05:da:fa:38:9a:d4:f9:7c:80:98:9c:1a:4c:ef:
         df:f8:c8:14:6e:e4:7e:1a:c1:81:24:09:ca:47:1d:12:5a:0e:
         3d:6d:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:29 2025 by rpki-client