Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          lgy9tDvcthyeQ5kFcwkxl2MFxE7fSSJ614lMniqYFJU=
Subject key identifier:   D0:94:CC:66:54:A9:8E:A1:01:3C:79:F4:96:F7:F6:D7:7F:97:83:2B
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       0198D515D4B22C7746846E51E585BA186D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          0C68
Signing time:             Sat 23 Aug 2025 04:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:34 +0000
Files and hashes:         1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
                          2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: iahbdhhKkVWFpDcCb7OrzznTpL0Ig0CKPGFbHoK9cH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:d4:b2:2c:77:46:84:6e:51:e5:85:ba:18:6d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Aug 23 04:00:34 2025 GMT
            Not After : Aug 24 04:00:34 2025 GMT
        Subject: CN=d094cc6654a98ea1013c79f496f7f6d77f97832b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b2:ac:03:74:7e:74:2a:0b:a9:09:5d:9a:1b:
                    9d:d2:49:2d:b6:bc:1f:84:dc:6c:a8:c2:2b:39:9e:
                    31:07:85:87:f3:94:90:0a:5a:65:65:fc:dc:c3:f7:
                    ba:ca:28:81:2c:76:1c:0d:cf:84:82:3e:c4:73:12:
                    ef:ff:ee:2b:6f:03:97:c9:ad:5f:6e:0f:0b:fc:dc:
                    42:8e:00:a9:eb:94:5d:ef:c2:0b:5f:35:39:be:ca:
                    4d:53:0a:fa:e9:8c:4f:b7:40:c6:eb:07:1f:fe:db:
                    0c:22:0c:34:50:3e:5e:07:f5:c7:2a:61:bf:0b:ce:
                    3e:43:d4:0b:97:0d:d5:e4:55:79:48:e4:b0:62:c4:
                    35:da:a4:42:98:77:78:e3:7e:7e:37:ef:0c:9b:87:
                    64:0a:8c:37:bd:fe:c1:14:af:94:35:fa:19:b9:86:
                    d7:ff:fc:bc:c3:f6:65:4f:fd:7c:88:21:d4:39:88:
                    1f:1e:23:0a:52:1d:55:96:e4:03:a5:43:c5:da:a7:
                    ea:3d:99:39:52:e9:0d:fb:e0:90:e4:05:2f:4a:3d:
                    1a:6c:2e:68:bd:df:3e:35:07:11:8f:70:54:1b:6f:
                    a0:2d:04:12:02:f8:7e:a5:7d:d2:13:50:e8:b9:de:
                    51:59:5d:76:85:d8:bf:06:28:15:8e:06:79:bc:8c:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:CC:66:54:A9:8E:A1:01:3C:79:F4:96:F7:F6:D7:7F:97:83:2B
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:d7:62:c4:fd:4f:ca:f0:01:03:61:96:86:26:b0:60:19:
         5f:68:71:e5:94:f2:86:95:a2:90:22:dc:cd:e8:ba:4d:1c:e4:
         d2:a2:fa:df:00:9f:d2:37:d5:d7:23:61:ad:33:b9:94:92:f5:
         28:bf:7c:24:7f:c9:f6:59:67:18:78:97:63:ff:06:0a:bb:7d:
         79:b2:c3:0c:a6:1b:a4:16:76:2f:10:15:3a:51:eb:ef:cd:80:
         84:12:35:2f:6d:69:4d:a4:1c:10:5b:c8:ec:90:58:91:76:25:
         9d:16:f7:dc:0f:b3:10:bd:5f:c4:c6:c9:6c:47:e2:26:99:59:
         16:93:f7:a6:19:9d:a2:38:68:da:6d:f3:cb:fb:a0:5b:8a:7b:
         3e:c2:5e:d2:ca:d7:c5:3f:cb:84:8b:b5:c0:5d:20:60:bd:6d:
         da:f1:93:e9:8c:fb:16:ff:bf:58:d9:5e:61:ec:c9:45:36:61:
         07:d1:fd:e9:54:1a:91:94:c3:a4:af:bf:9e:d9:4f:85:1a:71:
         74:97:cb:d3:94:3e:40:44:0b:b3:e1:18:c4:29:03:33:31:b1:
         2c:f5:49:17:87:4c:ff:0b:ae:bb:dd:59:4d:c6:36:d6:94:9c:
         48:d2:58:41:ad:3b:0e:d0:3d:74:50:94:83:d7:3a:f6:2b:d7:
         15:9e:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:04 2025 by rpki-client