Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          tNL4sYAWOU0XyxyHzzPkdwxcrp4QeV4PBfFw1mcnQoc=
Subject key identifier:   DD:2D:C4:93:82:60:E9:81:21:73:08:6B:28:A3:B0:2D:07:63:18:36
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019873E1D2E0E5D5B4CBAD75B3CA74327F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          02FA
Signing time:             Mon 04 Aug 2025 07:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:36 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: Xw0QiKCxet4WgPecSEJM2lg72/xPYoRBVWZSlzZRmq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d2:e0:e5:d5:b4:cb:ad:75:b3:ca:74:32:7f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Aug  4 07:00:36 2025 GMT
            Not After : Aug  5 07:00:36 2025 GMT
        Subject: CN=dd2dc4938260e9812173086b28a3b02d07631836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:e3:7d:b2:9c:83:76:79:36:88:4d:53:aa:
                    94:82:6f:1e:0f:09:5e:12:54:38:88:da:f0:e7:b1:
                    d0:37:99:f6:b2:8c:bd:be:79:bd:5e:3f:94:88:dc:
                    33:19:23:1f:72:fe:63:56:f4:1b:73:f1:38:79:2c:
                    f5:43:56:ef:ae:ba:86:e0:5b:f6:de:94:30:7f:9f:
                    2d:eb:47:65:09:6a:24:5a:5c:1a:2d:1e:e7:a1:b6:
                    b9:fa:eb:36:2c:31:e3:2f:c2:03:0e:fe:6b:38:d0:
                    3b:89:74:f8:3e:6a:88:22:33:d9:a4:f3:51:cb:96:
                    d3:bd:7b:91:d1:38:e1:45:15:25:04:01:0f:86:a1:
                    49:42:ca:b6:d2:9f:0d:b3:b6:d6:b3:45:2c:a2:09:
                    6c:2b:87:25:94:47:ba:55:58:9f:ac:20:3f:f2:9b:
                    0f:e6:fa:02:fa:7b:b2:0c:ac:de:a3:83:e7:4c:a0:
                    3a:11:a1:bb:5c:c2:b8:f5:95:e8:e9:01:c1:ef:3d:
                    56:a0:d0:a7:01:d9:71:27:bb:3e:ae:44:b3:11:0e:
                    b0:7d:67:94:f4:b6:de:0e:58:45:54:dc:69:6b:1b:
                    3c:39:55:8e:81:f1:07:47:77:d0:54:f7:99:32:0c:
                    36:b1:9a:a7:3e:1e:e3:ed:61:96:b0:86:2c:6d:28:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2D:C4:93:82:60:E9:81:21:73:08:6B:28:A3:B0:2D:07:63:18:36
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:56:ec:bc:3d:53:ff:00:6a:5f:c9:49:1c:0c:0d:af:6e:d3:
         ce:94:45:a4:b8:ac:ff:a8:84:3e:fa:02:1e:d8:62:eb:1d:fe:
         31:ef:8e:53:58:c9:af:4b:01:25:95:6f:18:1e:e7:4f:b0:0d:
         d6:a8:4e:61:12:52:7f:d5:67:f7:5e:87:03:30:61:80:db:27:
         d0:ea:e5:a6:39:c1:97:65:ee:3a:b7:7d:b2:94:90:d1:21:24:
         58:66:78:48:e2:7e:a8:cf:4a:bd:11:92:cd:85:22:11:f0:ec:
         02:6b:c7:8e:a7:78:e2:a7:05:54:e6:6a:42:33:c7:48:7d:e5:
         f1:aa:03:8b:1c:15:78:01:eb:66:e2:05:e5:a9:ab:b2:36:8f:
         2a:db:71:ba:e6:08:93:77:4f:60:3b:8c:3e:f2:83:3c:1c:d0:
         ea:e8:74:87:f8:e6:fd:73:b3:cb:d1:4e:12:08:8e:0e:0a:b2:
         c3:40:15:1d:47:fc:21:fc:c1:df:d5:41:c4:5f:26:02:cc:94:
         e2:22:3c:4d:19:cd:a7:f3:c8:ae:b7:98:0e:e2:0a:ee:58:66:
         d3:de:57:9d:a1:da:9c:12:6a:4f:09:5d:e6:87:b4:1f:2e:1a:
         7f:e9:5b:59:62:e9:67:9d:df:79:d5:e4:5e:c4:5d:4e:9e:97:
         5f:43:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:35 2025 by rpki-client