Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File:                     jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier:          FN8I0AZRJy+Eo3oJaBRb/ntZIzXZH7lune1bon/0foE=
Subject key identifier:   CC:99:6D:2C:B4:EE:9C:4B:83:03:74:7B:8A:37:5D:00:8C:06:20:6F
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer:       /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial:       01987418C32D608422B29AADF24520CBBA2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number:          15A4
Signing time:             Mon 04 Aug 2025 08:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:36 +0000
Files and hashes:         1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
                          2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: yg6O8Zk3gPxgSAUS4F+e5ZbVm2Pdfe9eIgFQFhc3H4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:c3:2d:60:84:22:b2:9a:ad:f2:45:20:cb:ba:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
        Validity
            Not Before: Aug  4 08:00:36 2025 GMT
            Not After : Aug  5 08:00:36 2025 GMT
        Subject: CN=cc996d2cb4ee9c4b8303747b8a375d008c06206f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:ec:f1:d4:31:4a:82:be:52:41:e7:df:9b:
                    fd:d3:c5:bc:47:1a:65:b2:b5:08:27:7b:3f:16:f2:
                    36:2a:5f:2d:59:bc:41:6e:09:97:90:88:43:4a:6a:
                    4d:27:a6:fe:e4:0b:c5:c0:08:51:67:af:2e:b1:82:
                    f0:52:c7:64:2f:bb:31:30:3b:4c:5c:fe:40:07:86:
                    e6:45:3d:41:15:b7:f0:85:ab:06:06:be:2b:5b:47:
                    9d:c7:b2:88:4f:e3:7a:98:9c:c1:3c:c1:d1:88:81:
                    19:9c:de:96:1b:72:6c:87:dd:56:ea:1d:6e:7b:b9:
                    7f:cd:60:08:35:9e:44:4c:1e:e0:20:b5:73:2d:bf:
                    5f:28:1b:2d:58:e7:25:4b:34:b9:b6:c5:3a:da:34:
                    b2:43:35:c2:93:87:60:b9:87:51:4a:71:3b:20:84:
                    c0:06:55:f3:25:9c:9f:62:1f:39:32:86:f5:da:d1:
                    c3:af:71:77:4d:75:2a:92:dd:60:8c:c4:95:b9:51:
                    5c:8b:dd:56:a6:6d:04:6b:0f:e9:0d:2e:03:c5:f2:
                    71:b7:4f:fa:b0:e9:9a:d5:05:eb:36:bb:1f:e7:54:
                    7d:2a:7f:24:53:06:71:45:b1:c1:a4:d3:7c:f8:af:
                    90:43:6d:83:c0:c9:9f:63:1f:d8:c2:3e:91:5c:8a:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:99:6D:2C:B4:EE:9C:4B:83:03:74:7B:8A:37:5D:00:8C:06:20:6F
            X509v3 Authority Key Identifier:
                keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:e7:fb:40:57:26:65:ba:32:2a:44:c9:86:21:8b:b9:6d:
         cf:62:29:44:99:fd:15:1e:9d:7c:c6:6d:2c:d0:e9:58:28:1c:
         29:43:b9:21:3b:65:f2:25:85:d1:17:e1:31:2d:80:4d:0a:90:
         1d:de:c1:a5:84:aa:d0:f3:3e:4f:7b:ea:cb:d9:c4:bb:7c:f9:
         d5:73:97:dc:cc:5e:40:9b:d8:c5:21:4b:5c:62:4f:b4:06:bd:
         dd:6e:c6:d7:4b:0f:7b:2f:0e:98:a0:54:88:7f:a2:c4:7f:99:
         a2:34:f2:80:b3:a3:6c:ff:39:d3:82:31:77:83:2f:f9:4d:0e:
         22:8d:6b:f3:d6:80:d9:95:d3:e9:47:ca:55:31:c2:f5:20:fc:
         92:8c:89:75:d4:fa:13:41:55:a8:dc:ae:de:cb:24:3f:27:0d:
         a9:22:d1:0e:83:09:08:f5:d8:03:7a:4a:86:28:b3:81:fa:d1:
         1a:31:d4:c6:44:9c:85:30:b8:7e:87:40:d1:38:41:2a:a0:44:
         cb:4a:08:ad:69:be:5b:8b:f9:7c:87:1c:94:61:36:09:20:6c:
         e2:b3:f6:79:13:d0:0e:e6:e1:eb:64:6c:e1:b4:a6:b0:d1:81:
         c4:67:1f:74:24:39:51:b8:78:89:71:7c:7b:1d:92:b9:4a:fa:
         bb:6d:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:12 2025 by rpki-client