Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File:                     J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier:          D173c2MsQYYU9t6oVNB2zK0nf1l7jYhFm5ekEWY0pSo=
Subject key identifier:   4F:01:69:D8:AC:CD:D8:23:62:EA:A8:36:B4:40:DD:9F:97:41:43:AC
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer:       /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial:       0198D472DC0C3DC7F31EC5B7F327C844909F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number:          04FC
Signing time:             Sat 23 Aug 2025 01:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:33 +0000
Files and hashes:         1: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: WsssyW9OxxYj6hKBTRfdcUUZlKAhdmotSW/mN/a8c7o=)
                          2: Ri5k7SQxU6x0UFludmWvZ0B6TWI.roa (hash: TLxEmCkGZUEaMyJcwR/yeYXTxZGAU/9BCp1xDMGwRT4=)
                          3: TIq2cJHpR6KvpC_5zEbT28CzxmQ.roa (hash: AjELo4AcRNi6tjWnrWUw4e1yYtJi2dPHt3KwG3rn9eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:dc:0c:3d:c7:f3:1e:c5:b7:f3:27:c8:44:90:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
        Validity
            Not Before: Aug 23 01:02:33 2025 GMT
            Not After : Aug 24 01:02:33 2025 GMT
        Subject: CN=4f0169d8accdd82362eaa836b440dd9f974143ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:8b:ff:b6:e1:19:7c:6b:f7:42:58:5c:24:
                    8a:0b:c2:74:eb:48:d7:90:00:78:87:69:33:9d:da:
                    e4:e6:17:1f:66:1a:b4:81:ff:7c:7a:cc:af:d8:97:
                    c3:84:0a:7a:cc:e1:9f:37:98:5e:f5:c7:42:b8:4d:
                    12:57:46:1d:b8:4a:b0:30:c5:31:24:88:95:f5:ea:
                    ee:1b:88:ed:60:09:a4:26:7c:4d:3b:8e:fe:4c:b3:
                    4a:2c:f8:e0:ba:d2:a5:40:ff:df:8d:c9:c6:9d:a8:
                    df:92:e7:41:6d:4b:72:70:fe:b8:7a:75:af:35:dd:
                    b5:54:4c:fe:da:ff:05:df:eb:ba:41:ab:b5:50:e5:
                    ba:dd:da:80:6b:f6:0b:e5:c8:d4:13:9e:1a:a5:b3:
                    9d:85:0d:56:9d:c8:52:b1:f5:34:35:f7:db:1b:45:
                    96:58:a8:77:9f:16:a0:e2:49:dc:b4:cd:b3:c0:d3:
                    14:89:6f:60:e1:e4:39:ec:86:71:20:8a:16:97:bb:
                    fe:b3:2b:0d:2a:57:94:4a:ea:b4:11:be:66:e0:c4:
                    6d:f8:83:da:49:dd:23:93:c1:c2:ba:75:fd:5b:b0:
                    b0:3c:5b:0a:cd:c7:76:00:71:7c:68:86:73:f2:94:
                    c9:32:3f:cc:b0:5c:ec:ed:05:52:91:d0:eb:94:a9:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:69:D8:AC:CD:D8:23:62:EA:A8:36:B4:40:DD:9F:97:41:43:AC
            X509v3 Authority Key Identifier:
                keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:f4:77:c1:be:1a:0c:95:b8:2e:60:e8:0b:c9:72:a0:95:
         fc:f8:97:a9:a1:b0:b1:13:3d:16:cb:3a:fb:4a:27:08:2b:fd:
         40:ab:d4:33:9e:6f:fe:27:88:71:77:db:20:40:0b:d6:77:97:
         98:95:f9:fa:1e:2a:f0:85:5b:bd:35:fd:b9:7e:39:8c:75:aa:
         a4:ba:60:9c:6e:e0:93:1c:4b:d9:80:57:99:f6:6f:ce:75:30:
         42:f2:c6:0e:6b:a2:40:8e:51:30:8a:b2:c5:7b:4c:66:98:24:
         f0:fd:fa:67:28:08:e0:4a:31:cb:20:d2:3a:28:12:c2:c9:99:
         c7:5b:1f:43:a5:be:66:6a:ae:a5:14:e7:be:3e:2c:db:15:3a:
         24:fa:da:c5:0c:4b:ff:08:ec:ba:f9:96:b1:07:0b:02:ea:4c:
         71:4f:8d:84:aa:57:ed:9d:9b:79:4f:ad:e0:17:5b:54:c1:14:
         6c:18:6e:8a:49:30:d1:ac:50:c5:92:71:2e:ab:ed:b1:83:59:
         38:25:29:a9:91:76:90:9d:14:38:83:36:9f:66:a4:5f:36:fc:
         bf:13:f8:ae:a9:3a:3a:a4:09:88:71:65:65:9f:5d:61:a6:61:
         f9:dd:d8:c1:bb:08:fc:40:e8:55:07:63:83:b8:54:fd:34:df:
         81:d5:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:44 2025 by rpki-client