Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File:                     JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier:          22bENnxDi+yoQvnauvg1hFRR03fDwNS8w3wPEmODfEc=
Subject key identifier:   8C:CE:B0:1B:6D:AC:61:30:00:88:65:8D:EA:15:BE:3E:A6:64:C7:1E
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer:       /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial:       0198A08439C8D04E29114DF7EFD0AEA32982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number:          0934
Signing time:             Tue 12 Aug 2025 23:01:16 +0000
Manifest this update:     Tue 12 Aug 2025 23:01:16 +0000
Manifest next update:     Wed 13 Aug 2025 23:01:16 +0000
Files and hashes:         1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: l9PkQdyTqhtKzyk/H+y6M8+P5eWtnXMhrvIzHXT6E1k=)
                          2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:84:39:c8:d0:4e:29:11:4d:f7:ef:d0:ae:a3:29:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
        Validity
            Not Before: Aug 12 23:01:16 2025 GMT
            Not After : Aug 13 23:01:16 2025 GMT
        Subject: CN=8cceb01b6dac61300088658dea15be3ea664c71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7c:95:c4:a1:32:a2:db:66:1f:60:7f:64:10:
                    06:6a:92:8e:29:4f:27:55:b6:f3:28:a1:3a:62:19:
                    7e:7f:71:db:3e:59:a9:e7:e7:a8:d3:4a:fb:a6:77:
                    e2:5b:6e:9a:38:98:27:c8:26:1c:78:64:00:9a:f3:
                    b1:ac:a3:6a:f6:fa:53:9d:4e:6f:54:a2:e2:32:42:
                    8d:49:1d:54:5c:92:53:3e:f7:c4:af:f8:04:9c:fb:
                    62:ec:97:89:a7:5c:15:f3:56:de:3d:2d:e0:17:90:
                    9e:1c:46:b1:30:f1:f9:65:ca:1a:17:03:e8:5b:7e:
                    99:c1:a3:43:1d:54:88:23:30:15:b4:fe:46:e3:1e:
                    19:9a:b4:70:1b:be:26:c5:73:fd:8c:9b:f4:8a:37:
                    20:cb:30:3e:28:45:b6:1b:d1:c9:8e:69:be:98:bc:
                    02:e2:58:0f:9f:d6:07:0d:cd:db:9c:17:64:9f:11:
                    29:7c:73:4e:b8:79:03:b3:7c:55:9a:4b:e6:52:85:
                    fa:1a:90:de:39:9a:34:8b:18:fc:8a:05:27:9a:d7:
                    a0:d2:c1:99:67:de:2f:a7:1d:90:19:8a:60:6b:e2:
                    17:b9:5f:f8:a9:24:ca:8e:42:04:35:f9:60:50:54:
                    0d:48:bb:fa:bd:ce:79:1c:9b:f1:02:dd:1c:a8:b7:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:B0:1B:6D:AC:61:30:00:88:65:8D:EA:15:BE:3E:A6:64:C7:1E
            X509v3 Authority Key Identifier:
                keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:56:39:73:7a:fa:fd:d6:29:35:c4:22:4a:9a:81:67:22:ec:
         31:b9:ef:2d:ca:fa:16:e7:52:d0:97:21:97:13:cc:3f:ce:12:
         e4:9b:0a:fd:1e:25:f2:f8:f6:1b:36:07:a2:f9:11:ea:2b:f8:
         0b:6c:9f:7a:07:3d:15:af:3f:bf:45:c9:94:d4:8e:aa:86:78:
         95:4f:8e:7a:f5:41:82:72:23:3d:ed:2b:01:30:4a:83:c4:2c:
         16:83:80:89:60:2f:f6:8f:95:92:d7:3f:47:36:ff:74:83:c7:
         6c:61:02:25:3a:42:31:4a:51:ad:36:bd:02:06:f6:bf:33:23:
         43:7c:ed:bf:fb:8c:aa:5d:20:ad:b6:73:0b:5e:9c:62:3e:3a:
         96:66:e0:ff:4e:24:4b:13:72:9f:76:8a:bf:4b:c4:3d:e6:23:
         2c:74:8e:52:5b:9c:a9:c8:59:fc:17:2e:eb:a6:dd:b2:f5:b6:
         42:83:a7:3b:b7:e3:4e:0f:0d:37:a0:1c:8a:d0:eb:23:2b:69:
         3c:23:14:74:c4:6b:16:10:38:e7:dc:a9:3e:33:d5:8f:9c:7d:
         17:06:aa:b1:f3:d9:7a:23:d3:d7:27:f4:c9:dd:00:e5:4d:3b:
         b4:26:70:af:ac:e7:00:4e:e5:48:ec:d6:25:d1:69:bc:cd:f8:
         05:e5:d2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:39 2025 by rpki-client