Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
File:                     JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json)
Hash identifier:          NlMkgyFbb7dI1FIMFcDSLPMcXD/SwoPB+gSudvfFnSs=
Subject key identifier:   85:66:19:B8:BD:05:D1:34:18:2F:D9:C7:E2:CC:5A:D9:1C:DC:EA:0C
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Certificate issuer:       /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial:       01988243533EA20E612A175F4FDF4A3127CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
Manifest number:          1365
Signing time:             Thu 07 Aug 2025 02:01:46 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:46 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:46 +0000
Files and hashes:         1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=)
                          2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=)
                          3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: +J4wEAvY0C+EJXYIlynq+5Qwf1W3k8SvNlYZpP5wcSw=)
                          4: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=)
                          5: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=)
                          6: e0eoCvsiK7SasiyB3s3vVf_06r4.roa (hash: hu+jMVWRtJ0t9dVnEO6X7YjTvJeeEKYO8KGJ+pPf1v0=)
                          7: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=)
                          8: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=)
                          9: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=)
                          10: vk6LGZMNcC3KaiIa5C3dnYSKUhg.roa (hash: 7Gr8EYP5E5UsMRFGLJUElOUxKJpCvyrgvk2k+QyN1AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:43:53:3e:a2:0e:61:2a:17:5f:4f:df:4a:31:27:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
        Validity
            Not Before: Aug  7 02:01:46 2025 GMT
            Not After : Aug  8 02:01:46 2025 GMT
        Subject: CN=856619b8bd05d134182fd9c7e2cc5ad91cdcea0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e8:db:ac:35:68:6b:04:cf:18:bc:70:9f:ce:
                    98:d6:48:fe:2f:cf:18:33:12:9a:89:42:a9:ae:29:
                    7b:00:fa:29:61:be:a7:22:64:5d:bf:f9:3e:9a:e1:
                    23:17:88:c8:8b:9e:f6:d0:31:ba:31:1b:3e:35:3f:
                    85:96:db:e4:57:e9:bc:fb:2a:3a:e3:8f:19:bf:0e:
                    cb:63:58:2b:e8:a8:bb:10:fd:84:42:b2:6d:a6:38:
                    95:c4:c3:c3:31:68:f8:a5:0b:c9:e4:89:06:3c:b3:
                    c4:59:99:68:8b:b1:84:c3:88:b9:71:c5:a9:e2:a1:
                    65:71:fd:42:dd:31:54:40:df:53:43:bd:51:5b:d9:
                    6d:aa:50:58:84:0b:38:6a:7f:f8:d7:1e:07:3c:55:
                    f3:7d:d2:ff:80:e4:46:1a:8f:59:80:d8:f5:2e:60:
                    66:21:38:d3:2a:b0:78:30:bb:9c:99:fa:0e:64:08:
                    3c:27:7d:b0:61:82:9e:92:32:a1:8c:98:f1:fa:93:
                    e7:8a:4a:95:55:00:c4:a5:b6:b3:dc:b2:2c:7d:59:
                    51:74:a0:f6:aa:c5:27:5b:96:71:43:c6:0c:91:7a:
                    ca:2b:41:f7:f4:c6:2f:ed:f8:17:3b:d4:67:07:ea:
                    c7:3f:30:b4:e6:09:3b:10:40:65:95:52:9a:b5:63:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:66:19:B8:BD:05:D1:34:18:2F:D9:C7:E2:CC:5A:D9:1C:DC:EA:0C
            X509v3 Authority Key Identifier:
                keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:03:a6:2e:42:6a:0c:80:04:9f:9f:a5:b1:90:cd:72:68:63:
         e4:8f:41:f7:f8:9c:1e:1f:6c:82:fe:6a:11:36:bd:44:6e:08:
         dc:33:ef:55:08:dd:2c:0a:05:54:a6:c0:46:16:e2:f8:d1:2e:
         67:d3:4e:dc:22:31:75:51:41:13:a3:1f:c4:6e:ef:45:dc:5a:
         f5:eb:57:f3:d5:cb:a0:89:03:57:18:24:ac:09:23:52:75:e5:
         7c:fa:0b:fc:f2:e2:4a:21:6f:b8:f5:c5:e7:73:f0:26:e7:67:
         3c:b4:bd:72:84:e3:eb:1b:ed:cb:7f:ff:6c:56:72:11:3b:4f:
         5a:64:8d:06:d4:fe:17:c5:6f:de:c9:1a:7f:0e:96:d8:17:1f:
         7d:9b:03:f2:45:f9:a2:c7:07:14:92:de:08:d3:4b:20:bd:09:
         b5:24:78:91:2d:b5:23:c2:45:f9:56:b1:b2:69:cd:8a:27:91:
         5c:6a:be:6c:df:ae:40:aa:3f:7e:1e:47:e5:ac:ac:86:cc:ab:
         dd:0d:1d:5b:c1:ea:54:90:e3:2c:18:6d:a6:b9:3c:45:ff:50:
         7a:12:bc:1f:34:1c:8f:eb:cf:6a:13:32:e0:29:9a:eb:0d:d2:
         ee:7a:27:81:ec:77:2a:d7:b9:52:10:a5:d0:02:0e:94:32:a6:
         29:21:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:57 2025 by rpki-client