Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File:                     josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier:          vSPOig5olrwnROvhXRZ4vuQYaSd921Akj9EzpG0O1UA=
Subject key identifier:   77:E9:68:C5:36:27:E7:F0:12:3A:3C:27:49:ED:8A:D4:6B:72:34:BB
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer:       /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial:       0197B7EAD526B3BDD2B60B6EB44F35E721C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number:          132C
Signing time:             Sat 28 Jun 2025 19:01:49 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:49 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:49 +0000
Files and hashes:         1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
                          2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
                          3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: 3CLDJBBIdorVwmWZDFRvDTdMbTe1YWABoLk0RIBXG98=)
                          4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:d5:26:b3:bd:d2:b6:0b:6e:b4:4f:35:e7:21:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
        Validity
            Not Before: Jun 28 19:01:49 2025 GMT
            Not After : Jun 29 19:01:49 2025 GMT
        Subject: CN=77e968c53627e7f0123a3c2749ed8ad46b7234bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:0d:60:b6:1b:1d:b3:ed:17:29:88:8d:8b:
                    dd:f8:07:01:f8:1b:1b:3f:23:ef:d2:c9:2d:4c:cc:
                    ac:fd:06:45:52:d1:64:9a:31:9d:9e:93:23:3c:bf:
                    57:2f:cf:a4:ac:be:1f:bf:2b:50:9c:3e:95:b8:a6:
                    97:d9:3f:7d:26:8e:53:95:f9:9f:e7:58:7c:c6:75:
                    ec:6a:80:3c:8e:d8:83:c7:64:70:30:45:88:a0:99:
                    a4:6b:2b:ac:68:d1:91:ff:1c:51:21:ef:95:78:22:
                    79:26:5b:9c:8e:a4:72:6a:d0:0a:44:ca:0f:6b:1e:
                    3c:6e:94:60:05:b9:2d:71:19:e2:6e:b3:a5:ec:ed:
                    df:c5:26:e0:df:13:eb:63:9b:ef:a0:2c:4b:1f:3d:
                    00:1c:a8:b0:a5:91:a7:6e:81:a2:e5:79:e4:18:92:
                    0b:97:94:b7:b3:1b:23:fc:a6:74:3c:76:f0:9b:4b:
                    d6:84:c1:48:23:24:45:8a:15:df:1c:20:4b:fc:7b:
                    b2:08:0d:c6:3d:ab:37:ae:fd:b5:52:cc:5f:c0:36:
                    a8:72:73:37:38:74:7c:b9:d0:f1:ba:58:4c:b8:9a:
                    42:19:7f:e6:8a:53:07:4a:68:85:6b:7f:bc:2b:a3:
                    fa:8b:4c:1f:fd:63:8f:0c:05:72:a3:09:6e:e8:71:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:68:C5:36:27:E7:F0:12:3A:3C:27:49:ED:8A:D4:6B:72:34:BB
            X509v3 Authority Key Identifier:
                keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:29:06:6e:e0:17:f8:eb:97:32:0d:e4:8a:3f:41:07:e2:02:
         39:47:45:65:67:01:e7:cc:82:3d:42:df:f5:52:5a:70:6f:9c:
         73:4a:e6:58:d5:1d:11:d5:9a:15:ea:7f:8c:e6:f0:86:74:65:
         68:8e:a2:c2:47:b2:c1:69:04:d3:5e:7a:7e:0d:c9:e8:ce:be:
         9f:90:fb:48:93:02:16:ff:86:73:10:de:fa:2a:6c:c0:a2:54:
         58:71:40:39:e8:80:4d:70:6f:87:cf:df:0e:be:7d:71:52:32:
         ab:08:55:bf:3b:3f:2f:01:5d:d9:57:78:dd:62:33:29:7c:2b:
         5c:1f:56:aa:0d:cc:b9:90:44:5a:a5:f9:e4:91:14:ce:39:85:
         ec:74:a7:8b:b2:f4:65:f2:bd:48:af:4f:66:6a:03:19:85:4d:
         eb:3d:9d:f0:ee:17:91:ea:9c:ee:b1:7f:f3:d7:62:b8:dd:e7:
         53:11:95:d7:8a:54:e5:ba:13:fd:9d:46:47:fe:b9:b3:f8:b5:
         ee:c4:e5:f2:4c:a2:6b:7e:60:71:65:37:6e:87:45:ef:97:6a:
         f4:01:4c:b3:2a:8f:75:5b:c2:38:f2:c4:fa:8e:1f:81:b2:c4:
         a7:53:1b:39:bb:e6:1c:fb:72:3d:92:8f:14:9c:d4:1f:03:b2:
         c4:61:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:28 2025 by rpki-client