Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File:                     jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier:          TePnMUIR27c+r6LceM6nY/bjEeoVh/WYbKS6zcXtxSo=
Subject key identifier:   B5:98:1A:82:B1:26:41:05:43:DA:38:C7:EE:13:6F:7C:6D:1A:9E:F0
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer:       /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial:       0198733D732D72220491FCDAA0E8E11F127A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number:          1011
Signing time:             Mon 04 Aug 2025 04:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:03 +0000
Files and hashes:         1: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (hash: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=)
                          2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: 89OQohIOrlWSPz1Ifly59iHuEQLTqO5+GJrMZ8XcFtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:73:2d:72:22:04:91:fc:da:a0:e8:e1:1f:12:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
        Validity
            Not Before: Aug  4 04:01:03 2025 GMT
            Not After : Aug  5 04:01:03 2025 GMT
        Subject: CN=b5981a82b126410543da38c7ee136f7c6d1a9ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:58:52:20:4e:9b:da:e6:07:10:39:ce:c4:96:
                    5f:bf:2a:fc:a0:86:e9:93:75:d5:6a:e1:e4:55:a8:
                    68:82:f3:ae:2a:39:83:1c:43:b7:a7:0e:e4:5d:af:
                    00:40:bc:12:a9:00:c5:45:9c:d2:d3:1a:9a:6f:c5:
                    41:15:e9:13:91:aa:2f:4f:68:58:fd:45:dc:90:ca:
                    a5:26:65:b8:42:e1:98:36:7b:1a:39:8c:a9:85:cc:
                    61:26:81:7e:9d:6f:e8:58:eb:d3:6e:d2:b1:e3:5c:
                    6d:7b:12:83:cb:84:f4:55:d0:3b:59:00:85:96:af:
                    e4:13:74:51:09:15:e7:17:55:da:35:3a:94:7d:05:
                    56:1d:92:88:06:17:7c:54:02:9e:f4:3d:b1:50:23:
                    2a:e7:a4:9f:a4:a7:b4:af:b9:4c:82:68:93:dc:18:
                    26:db:12:f8:33:f6:6f:75:99:0c:d6:ba:11:60:b8:
                    17:ef:5e:f3:65:3b:90:9a:d9:02:9e:da:19:57:87:
                    5e:6e:17:03:2a:b1:70:e3:3c:2f:c9:45:8f:f0:36:
                    b8:77:be:b8:96:96:d7:9d:65:6e:0d:01:88:1f:96:
                    b8:36:f4:66:61:4a:a6:ab:c0:f7:52:cb:3a:78:83:
                    e4:74:2a:b7:97:37:ba:82:ca:4d:09:94:8c:d3:55:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:1A:82:B1:26:41:05:43:DA:38:C7:EE:13:6F:7C:6D:1A:9E:F0
            X509v3 Authority Key Identifier:
                keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:98:cd:fd:8a:10:a9:d5:50:31:b0:80:7a:aa:c7:4f:b9:c5:
         fe:97:fe:5c:c2:a2:a9:b6:58:17:9b:a2:05:0b:0d:6d:38:ab:
         d7:94:25:e0:6b:a3:bd:72:57:29:70:f3:fa:73:58:b7:39:8b:
         42:b4:17:77:ea:bf:f5:c3:45:8d:01:9d:aa:b6:da:8d:6f:4d:
         4a:db:21:32:7a:c5:dc:33:50:21:2d:01:d0:45:dc:4d:bc:b0:
         02:49:7c:92:29:8d:7b:a4:e1:b9:36:45:2a:62:63:3c:c7:6b:
         77:49:48:a3:cf:c6:d8:8f:e1:89:29:ec:e4:3b:f5:6c:77:77:
         eb:21:bb:8d:68:43:d7:da:68:58:5c:3a:38:e8:d7:14:9d:83:
         0b:0d:bd:2a:4a:b3:a4:82:7a:9f:b1:4e:77:aa:e9:af:1f:bc:
         c3:ea:4d:c7:02:ab:cd:05:65:73:ff:3a:36:cf:18:5b:69:50:
         23:a1:19:9c:72:4a:f4:53:45:a4:b1:65:7f:20:87:6b:ec:b4:
         f5:c7:3c:bd:0b:52:63:67:b3:83:ff:c3:35:5e:7d:a7:ea:f4:
         e2:42:cb:90:f8:bc:5b:f9:a8:a8:a8:76:d8:6f:57:da:da:b8:
         a1:34:87:bd:e8:dd:a1:d9:8b:90:35:bf:cf:a3:04:30:67:67:
         d6:16:f4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:31 2025 by rpki-client